Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

Oct 13, 2026 By CrowdStrike Counter Adversary Operations In CrowdStrike
In late September, 2026, CrowdStrike's Counter Adversary Operations team collaborated with the United States Federal Bureau of Investigation (FBI) to disrupt several laptop farms operating across the U.S. maintained by DPRK-nexus adversary FAMOUS CHOLLIMA to fraudulently employ operatives at American companies while concealing their true location and identity.
Read Post
acronis

Acronis Cloud Storage adds a recovery warranty

Oct 13, 2026 By Pavel Egorikhin In Acronis
Backup is not the outcome. Recovery is. When critical data becomes unavailable, businesses need more than a completed backup job. They need confidence that their data is protected, available and ready for recovery. That is why Acronis is introducing the Anti-Ransomware Recovery Warranty for eligible customers using Acronis Cloud Storage. The capability adds a clear recovery commitment to the secure cloud storage foundation customers already rely on.
Read Post
knowbe4

Extortion Groups are Impersonating Help Desks to Gain Initial Access

Oct 13, 2026 By KnowBe4 Team In KnowBe4
Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters. “Attackers overwhelmingly targeted users and their unmanaged devices to gain access to accounts,” the researchers write.
Read Post

How to Choose a Penetration Testing Company: 6 Things to Check

Oct 13, 2026 By Astra Security In Astra
We are sharing six things to check before you sign: who's actually testing, proof of exploit, cloud and API coverage, retesting, continuous testing, and report quality. Backed by 6.8M findings from the State of Pentesting 2026 report. Chapters Astra Security is a penetration testing company that combines autonomous and human-validated pentesting for web apps, APIs, cloud and AI applications.
View Video

Introducing Sophos AI Defense

Oct 13, 2026 By Sophos In Sophos
Sophos AI Defense finds the AI tools employees and applications are using, including the ones security teams never approved, and enforces policy wherever they run. Every AI tool an organization can’t see is a potential gap in confidentiality, integrity, and availability. Delivered through Sophos Fusion, the AI-native cybersecurity defense system, Sophos AI Defense connects controls on the device, across the network, at sign-in, and in the browser into one line of defense, so teams can safely adopt AI faster without adding another disconnected tool to manage.
View Video
CalCom

CIS Benchmarks: The Configuration Baseline Regulators Expect

Oct 13, 2026 By Dean Roberts In CalCom
Every major security regulation now asks the same question: can you prove your systems are securely configured? Few of them define what “secure” means. CIS Benchmarks fill that gap. Misconfiguration remains one of the easiest ways into an organisation. Default accounts, legacy protocols and inconsistent settings across thousands of servers hand attackers a foothold. Regulators have noticed.
Read Post
CloudCasa

CloudCasa and Dell Technologies: Disaster Recovery for Kubernetes, Built on PowerStore

Oct 13, 2026 By CloudCasa In CloudCasa
Together, CloudCasa by Catalogic and Dell PowerStore provide a complete disaster recovery solution for Kubernetes environments — combining PowerStore’s native array-to-array replication with CloudCasa’s Kubernetes-aware orchestration. PowerStore handles the data path, synchronously or asynchronously, while CloudCasa discovers workloads, validates the DR plan, and rebuilds Deployments, StatefulSets, and KubeVirt VMs on the target cluster, reconnecting them to the recovered volumes.
Read Post
Feroot

PCI DSS SAQ A: What You Still Need to Verify About Script Attacks

Oct 13, 2026 By Feroot In Feroot
Before you buy another security tool or remove an existing control, answer one question: how does your website actually present the payment form? For e-commerce merchants completing PCI DSS Self-Assessment Questionnaire A (SAQ A), that architectural detail matters. An embedded payment form, a redirect, and a fully outsourced payment process are different arrangements, with different implications for how the SAQ A script-attack eligibility criterion applies.
Read Post
Feroot

Agentic AI and PCI DSS: What Happens When AI Agents Reach Checkout?

Oct 13, 2026 By Feroot In Feroot
An AI shopping assistant can recommend a product without being allowed to buy it. An agentic AI system may go further: access an account, select a payment method, interact with a checkout, and initiate a transaction. Each added permission changes the payment-security questions you need to answer. Before adding an agent to a payment journey, draw its boundary. What can it read? What can it change? What can it authorize? What happens when it encounters content controlled by someone else?
Read Post

Why Data Masking Breaks AI Workflows (And What Works Instead)

Oct 13, 2026 By Protecto In Protecto
What if masking sensitive data actually broke your AI application? Most AI security strategies start with a simple rule: mask sensitive information before it reaches the LLM. But real AI workflows are more complex. An AI agent might need to search a CRM, retrieve a contract, check account details, call external tools, and generate a response. Each step may require a different level of access to sensitive data.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.