Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

mend

Move faster than AI-driven risk: Inside Mend.io's latest AI application security update

Jul 28, 2026 By Asaf Saar In Mend
AI didn’t just change how fast you ship. It changed what your AI application security program has to protect. Two years ago, security teams protected code, open source, and containers. Today they also have to protect AI agents, MCP servers, models, prompts, and runtime interactions, configured or deployed faster than any team can manually review. The attack surface didn’t grow. It exploded.
Read Post
astra

AI Pentesting vs Traditional Pentesting: A Comparison, Cost, and Coverage Breakdown

Jul 28, 2026 By Niharika Mahesh In Astra
If there’s one thing all of us can agree about modern security, it is that penetration testing is no longer a once-a-year activity. Modern attack surfaces do not stay still. New code ships faster, cloud infrastructure is constantly changing, and APIs are multiplying across product ecosystems. To keep up, engineering teams have moved security earlier in the development lifecycle through shift-left practices.
Read Post
cloudflare

Natural disasters and government interference: examining Q2 2026's major Internet disruption events

Jul 28, 2026 By AWS In Cloudflare
Like most infrastructure, the Internet's fragility is easy to overlook — as long as it's working. When it fails, its complexity comes into full view. Cloudflare is in a unique position to detect and document the moments when one of the interrelated systems the Internet depends on breaks down and connectivity suffers as a result. Each quarter, we summarize the disruptions we detect and annotate on Cloudflare Radar.
Read Post
What CISSP Still Proves That a Stack of Tool Certs Doesn't

What CISSP Still Proves That a Stack of Tool Certs Doesn't

Jul 28, 2026 By SecuritySenses In SecuritySenses
Look at almost any security resume and you will find a wall of product badges. A cloud provider's associate cert, a SIEM vendor's operator credential, an EDR platform's specialist track, maybe a firewall qualification or two. Every vendor runs a certification program, every tool ships a badge, and collecting them is a reasonable way to prove you can do the job in front of you.
Read Post
Homeschooling Families Run a School Network With No IT Department

Homeschooling Families Run a School Network With No IT Department

Jul 28, 2026 By SecuritySenses In SecuritySenses
A homeschool day often ends the way an office day does, with data entry. A parent logs attendance in one app, uploads a scanned writing sample to a second, and reviews a progress dashboard on a third. The laptop is shared. The router came from the internet provider years ago and has not been touched since.
Read Post
Why Cybersecurity Is Becoming Critical for Crypto Market Infrastructure

Why Cybersecurity Is Becoming Critical for Crypto Market Infrastructure

Jul 28, 2026 By SecuritySenses In SecuritySenses
Digital asset markets have developed quickly, but their long-term growth depends on more than trading volume or market interest. As crypto becomes more connected to institutional finance, payment systems, fintech platforms, and treasury operations, the infrastructure behind these markets is coming under greater scrutiny. Speed and liquidity matter, but so do security, resilience, access control, and operational transparency.
Read Post

OpenAI's Models Go Rogue - The 443 Podcast - Episode 380

Jul 27, 2026 By WatchGuard Technologies In WatchGuard
This week on the podcast, we cover the crazy saga that unfolded between the popular open-source AI platform Hugging Face and the frontier AI lab OpenAI. After that, we discuss a recent WordPress remote code execution vulnerability WP2Shell and the research process that Searchlight Cyber followed to uncover it sing artificial intelligence. Finally, we end with a quick analysis of Palo Alto Global Protec's authentication bypass vulnerability CVE-2026-0257.
View Video
jfrog

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

Jul 27, 2026 By Yoav Landman In JFrog
Just last week, OpenAI and Hugging Face jointly disclosed what may be the first incident of its kind: during an internal evaluation of frontier cyber capabilities, OpenAI’s models, running deliberately without production safeguards in an isolated research environment, autonomously discovered and employed chained vulnerabilities to escape its sandbox, reach the open internet, and extract evaluation answers from Hugging Face’s infrastructure.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.