Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Snyk

The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security

Jul 28, 2026 By Daniel Berman In Snyk
Every so often, an industry gets a moment that quietly redraws where the line is — not because anything was said, but because something was proven. AI security had one of those moments last week, and it's worth being direct about that before getting into the details: this wasn't an incremental data point. It was the moment a risk that security and safety researchers had described in theory for years showed up, fully formed, in a disclosed incident report.
Read Post

Cyberhaven: Data Security for the Agentic Enterprise

Jul 28, 2026 By Cyberhaven In Cyberhaven
AI changed work, Cyberhaven protects it. Cyberhaven exists to protect the way enterprises actually work today: with AI agents accessing, moving, and acting on data across every workflow. In this video, we share Cyberhaven's mission and our stance on data security for the agentic enterprise.Traditional data security, built for files at rest, wasn't built for AI agents acting at machine speed. Cyberhaven traces data through its full lifecycle and adapts protection as context changes, so security keeps pace with how work actually happens.
View Video
appsentinels

Best API Discovery Tools for Lineage Mapping

Jul 28, 2026 By AppSentinels In AppSentinels
API discovery has become a foundational capability for modern enterprises as API ecosystems expand across cloud-native applications, microservices, SaaS integrations, partner APIs, and AI-powered workflows. By 2027, 78% of applications are expected to use APIs, and with that growth comes an urgent need for visibility that goes far beyond simply listing endpoints.
Read Post

The EU AI Act: Compliance for Companies Serving the EU Market

Jul 28, 2026 By Salt Security In Salt Security
The EU AI Act is a global business issue. Just like GDPR before it, it reaches beyond EU borders. If your organization does business in the EU, you are in scope. Full enforcement begins August 2, 2026, with fines of up to 35 million euros or 7% of global turnover for non-compliance.
View Video
Torq

Torq SOC Brain: The AI SOC That Learns, Not Just Remembers

Jul 28, 2026 By Bob Boyle In Torq
Back in June, I wrote a blog making the case that agentic triage alone isn’t an AI SOC. The way I see it, that’s like saying triage is the only responsibility of a SOC team. But as we know, the SOC’s responsibilities extend far beyond that, and these triage-only solutions don’t investigate threats, contain them, or close cases. That work is still left to the SOC team; the bottleneck is just shifting.
Read Post

TITAN AI Demo Series: What a Mature TPRM Program Looks Like with TITAN MAX

Jul 28, 2026 By SecurityScorecard In SecurityScorecard
Most Third-Party Risk Management (TPRM) programs can be compliance-driven and reactive. A mature program looks different. See what threat-informed TPRM with continuous monitoring looks like in SecurityScorecard's Demo Tuesday series. Vendor engagement drives real remediation. Your team spends time on risk decisions instead of manual busywork. TITAN MAX pairs the TITAN AI platform with SecurityScorecard's expert team to run these workflows on your behalf Continuous monitoring through a dedicated Vendor Risk Operations Center Faster questionnaire cycle times, without adding headcount.
View Video

Black Hat FOMO? Dojo AI Demo

Jul 28, 2026 By Sumo Logic, Inc. In Sumo Logic
On this episode of Masters of Data, we take you inside the Dojo AI demo we're bringing to the show floor at Black Hat. We walk through the SOC Analyst Agent, Mobot, and MCP back to back. SOC Analyst Agent triages every tier one alert down to the one that actually matters, and Mobot picks up from there, running the investigation in plain English to track down other phishing victims and lateral movement. We also show how MCP pulls that same insight into Claude or Slack. SOC leads tired of alert fatigue and analyst burnout will want the numbers here: 100% of tier one alerts triaged automatically, and 25 hours a week back per person.
View Video
tigera

MCP's Auth Hardening: What the Six New OAuth SEPs Fix, and What They Still Don't

Jul 28, 2026 By Alister Baroi In Tigera
In short, the MCP 2026-07-28 release candidate is getting attention for going stateless. The quieter story is a package of six SEPs that harden the protocol’s OAuth layer: issuer validation, credential binding, client type declaration, and cleanups around refresh tokens, scopes, and discovery. All six are worth shipping, and all six fix real failure modes. But they harden how a client authenticates to a server, and that was never the whole problem.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.