Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Modern Threat Actors Are Changing the Defense-in-Depth Playbook - Webinar October 8, 2026

Oct 8, 2026 By GitGuardian In GitGuardian
Ransomware is still growing, but payouts are shrinking. Enterprises got better at backups, so attackers moved to where defenses are thinner: SaaS, identity, and stolen credentials. Infostealers do the collecting at scale, and AI is widening the gap. Credentials for AI services were the fastest growing category of leaked secrets in 2025, up 81% year over year with 1.27 million exposed (State of Secrets Sprawl 2026). Most defense-in-depth programs were not built with this attack chain in mind.
View Video

11:11 Systems Acquires Select IBM VMware Cloud Service Provider Enterprise Customers

Oct 8, 2026 By 11:11 Systems In 11:11 Systems
Brett Diamond, CEO, 11:11 Systems, shares the exciting news about our acquisition of select IBM VMware Cloud Service Provider enterprise customers. At a time of significant change across the VMware ecosystem, 11:11 Systems continues to expand its ability to give customers greater choice, continuity and control. With the acquisition of select IBM VMware Cloud Service Provider enterprise customers, 11:11 has now made eight VMware-related acquisitions and continues to strengthen its position as the largest privately held, global VMware Cloud Service Provider.
View Video
teleport

How to Tie Kubernetes Audit Logs to Individual Engineers

Oct 8, 2026 By Daniele Polencic In Teleport
Kubernetes audit logs may show multiple engineers as one user and do not capture what is typed after a kubectl exec session starts. Assign each engineer a unique identity, make sure it stays consistent through proxies and cloud IAM, and use a session recorder if you need to review terminal activity.
Read Post
nucleus

Risk Acceptance Has a Shelf Life: Notes from the Aviation ISAC Cybersecurity Summit

Oct 8, 2026 By Adam Dudley In Nucleus
The first Aviation ISAC summit, a little over a decade ago, was about forty people in a room in Miami, hosted by the Health ISAC. This year’s conference in Vancouver hosted more than five hundred: airlines, airports, OEMs, suppliers, and government, all in one place for three days. Many in the audience were new to the conference. One of the opening speakers asked first-timers to raise their hands, and a lot of hands went up around the room.
Read Post
sentrium

Critical Bookly IDOR Leads to Booking Disclosure and Deletion (CVE-2026-93399)

Oct 8, 2026 By Theklis Stefani In Sentrium
During independent security research conducted as part of the Wordfence Bug Bounty Program, we identified an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability in Bookly, a WordPress appointment booking plugin used to manage online scheduling, services, staff availability and customer appointments.
Read Post
CrowdStrike

CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage

Oct 8, 2026 By Daniel Bernard In CrowdStrike
Critical infrastructure is where cyber risk becomes real-world risk. The environments powering energy, water, manufacturing, and transportation are among the most complex to defend as they often combine decades-old operational technology (OT) with modern IT. Downtime is not an option, and patching isn’t always possible. Now, AI is raising the stakes. Adversaries are using AI to move faster and operate at greater scale, compressing the time defenders have to respond to attacks.
Read Post
cyjax

ASOS Cyber Incident: CYJAX on the Third-Party Risk Facing UK Retailers.

Oct 8, 2026 By Shail Yadav In CYJAX
On 6 October 2026, ASOS customers received an extortion message through the retailer's own app claiming its Snowflake instance had been compromised. CYJAX looks at what happened, why third-party and cloud platform risk sits at the centre of the incident, and how organisations can monitor their extended supply chain before attackers do. By now, most people in the UK will have heard about the cyber incident that hit ASOS on 6 October 2026.
Read Post
knowbe4

Two Systems, One Truth: Unifying Training Records Across SAT and LMS

Oct 8, 2026 By Nick Gasse In KnowBe4
Somewhere in your security and compliance stack, there are records that prove your employees completed their security awareness training. But when these records need to serve as evidence, would they actually hold up to scrutiny? For many companies, the answer is no, and that’s becoming a major risk. Following steadily rising claims over the years, insurers have narrowed their coverage definitions and requiring stricter adherence to security standards.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.