Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Zenity

OpenClaw Security Checklist for CISOs: Securing the New Agent Attack Surface

Feb 13, 2026 By Cinthia Portugal In Zenity
OpenClaw exposes a fundamental misalignment between how traditional enterprise security is designed and how AI agents actually operate. As an AI agent assistant, OpenClaw operates with human permissions, executes actions autonomously, and processes untrusted content as input, all while sitting outside the visibility of conventional security tools.
Read Post

Moltworker (for OpenClaw) & Markdown for Agents: Running AI on Cloudflare

Feb 13, 2026 By Cloudflare In Cloudflare
Celso explains how Markdown for Agents was conceived, built, and shipped in just one week, why AI systems prefer markdown over HTML, and how converting a typical blog post from 16,000 HTML tokens to roughly 3,000 markdown tokens can reduce cost, improve speed, and increase accuracy for AI models. We also explore Moltworker, a proof-of-concept showing how a personal AI agent originally designed to run on a Mac Mini can instead run on Cloudflare’s global network using Workers, R2, Browser Rendering, AI Gateway, and Zero Trust.
View Video

Delegation in Active Roles

Feb 13, 2026 By One Identity In One Identity
In just three minutes, explore the fine-grained delegation capabilities in Active Roles that can keep your privileges and permissions under control for maximum AD security. Examine Active Roles features with Ian Stimpson, One Identity Solutions Architect, to see the centralized, policy-driven permissions delegation that can drastically reduce your AD attack surface.
View Video
vista infosec

PCI DSS Compliance for Fintech Companies

Feb 13, 2026 By Narendra Sahoo In VISTA InfoSec
PCI DSS compliance is a mandatory, revenue-critical requirement for fintech companies that touch cardholder data—directly or indirectly. This guide is written for fintech founders, CISOs, CTOs, and security leaders building or scaling payment-enabled platforms in the US and globally. If your fintech stores, processes, or transmits cardholder data, PCI DSS compliance for fintech companies is not optional—it is a baseline operating requirement. With PCI DSS v4.0.x now fully in force.
Read Post
WatchGuard

How to Protect Identity in a World Without VPNs

Feb 13, 2026 By Carlos Arnal In WatchGuard
For years, cybersecurity relied on a perimeter-based model, where the network defined the boundary between what was secure and what wasn’t. With the adoption of cloud computing, SaaS applications, and hybrid working, that control has shifted to identity, making credentials the primary target for attackers.
Read Post
cyjax

Cyber Threat Intelligence Trends Financial Institutions Can't Ignore in 2026

Feb 13, 2026 By Shail Yadav In CYJAX
Financial institutions face growing cyber risk as AI-driven attacks, cloud complexity, and regulatory pressure reshape the threat landscape. This blog explores the cyber threat intelligence trends shaping financial services in 2026 and what organisations need to prepare for.
Read Post
sentrium

The Rise of Continuous Penetration Testing-as-a-Service (PTaaS)

Feb 13, 2026 By Adam King In Sentrium
Traditional penetration testing has long been a cornerstone of cyber assurance. For many organisations, structured annual or biannual tests have provided an effective way to validate security controls, support compliance requirements, and identify material weaknesses across infrastructure, applications, and external attack surfaces.
Read Post
appknox

Mobile App Release Readiness Checklist

Feb 13, 2026 By Raghunandan J In Appknox
Every mobile team has shipped an app that technically worked, and still caused problems. Sometimes it’s a last-minute App Store rejection. Sometimes it’s a privacy disclosure mismatch. Sometimes it’s a vulnerability discovered days after release, when rollback is no longer clean. The pattern is consistent, which isn’t a lack of tooling but a lack of release readiness clarity. Release readiness isn’t about perfection. It’s about answering one question with confidence.
Read Post
Arctic Wolf

Update: Arctic Wolf Observes Threat Campaign Targeting BeyondTrust Remote Support Following CVE-2026-1731 PoC Availability

Feb 13, 2026 By Andres Ramos In Arctic Wolf
Since our previous security bulletin, Arctic Wolf has observed malicious activities in the wild tied to suspected exploitation of CVE-2026-1731 of self-hosted BeyondTrust Remote Support and Privileged Remote Access deployments. We are sharing threat intelligence related to this activity to help defenders protect against this campaign. CVE-2026-1731 allows unauthenticated remote threat actors to execute operating system commands in the context of the site user via specially crafted requests.
Read Post
gitprotect

Cross-platform Recovery: Key to Surviving the Next Outage

Feb 13, 2026 By Wojciech Andryszek In GitProtect
Outages recently disrupted 46% of organizations just in 2025, yet 47% of executives still rate their resilience as high, according to a SAS report. In other words, despite nearly half the industry facing service failures, almost half still believe they’ve solved the problem. It seems surprising. The more so in times when a single outage or vendor lock-in can halt all operations on a given platform.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.