Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

aikido

AI as a Power Tool: How Windsurf and Devin Are Changing Secure Coding

Nov 6, 2025 By Trusha Sharma In Aikido
We brought together Ian Moritz, Deployed Engineer at Cognition, and Mackenzie Jackson from Aikido Security for a live masterclass on AI-assisted coding. The goal wasn’t to hype new tools. It was to talk about how developers can stay in control while AI starts writing, testing, and securing code beside them.
Read Post
veracode

From Detection to Protection: A Look at End-to-End AppSec Solutions

Nov 6, 2025 By Natalie Tischler In Veracode
Modern application development moves at an incredible pace, but this speed often creates a gap between innovation and security. Effective AppSec Solutions close this gap by shifting security from a reactive bottleneck to a proactive, integrated part of the entire software development lifecycle (SDLC). This end-to-end approach doesn’t just detect flaws; it provides a unified framework to manage and reduce risk from the first line of code to the final cloud deployment.
Read Post
Tines

How CIOs and CISOs are unlocking AI's full value: 5 real-world takeaways

Nov 6, 2025 By Brad Rumph In Tines
Recent research from Forrester Consulting commissioned by Tines, Unlocking AI’s full value: How IT orchestrates secure, scalable innovation, underscores the essential role IT leaders must play in AI orchestration, as well as the challenges that stall adoption – and the opportunities that await those who overcome them. But how do these findings translate to real life, and what are leaders and practitioners doing to navigate this landscape?
Read Post
Featured Post
The Shift Left of Boom: Making Cyber Threat Prevention Practical Again

The Shift Left of Boom: Making Cyber Threat Prevention Practical Again

Nov 5, 2025 By John Dominguez, Senior Director of Product Marketing In Reach Security
The old saying "prevention is better than cure" has lost currency in today's cybersecurity industry. Instead, security teams are advised to assume that the business has been breached and focus on threat detection, investigation, response, and recovery. Yet, during cyber incident post-mortems, it is not uncommon to find that the business owned the tool that would have protected it against the breach. The problem arose because it wasn't correctly configured before the incident happened, and no one knew this - or if they did, they didn't have the time or resources to fix it.
Read Post
cato networks

Securing the AI Browser Revolution: How Cato Helps Mitigate Risks in OpenAI Atlas

Nov 5, 2025 By Dr. Guy Waizel In Cato Networks
The launch of OpenAI Atlas, an AI-powered browser that merges ChatGPT’s intelligence with a full web experience, marks a major leap in how people interact with the internet. Instead of typing queries or clicking through pages, users can now ask, act, and automate, delegating browsing tasks to AI agents capable of retrieving data, filling in forms, or performing actions on their behalf. For businesses, Atlas represents both opportunity and risk.
Read Post
CrowdStrike

CrowdStrike Leads New Evolution of Security Automation with Charlotte Agentic SOAR

Nov 5, 2025 By Paola Miranda In CrowdStrike
AI has transformed both how attackers operate and how defenders must respond. Today’s adversaries use AI to shift tactics in real time, forcing defenders to react at unprecedented speed. Many SOCs struggle to keep pace due to the limits of legacy automation. Even the most mature playbooks can’t anticipate every scenario or data variation, because playbooks are predictable — but adversaries aren’t.
Read Post
cyberark

Welcome to Agentic Park: What chaos theory teaches us about AI security

Nov 5, 2025 By Kaitlin Harvey In CyberArk
The first time it happened, nobody noticed. An automation reconciled a ledger, logged its success, and shut itself down. The token that made it possible looked harmless. Tidy, legacy, supposedly scoped “just enough.” But a week later, refunds ghosted, dashboards blinked, and audit logs told three different versions of the truth. And that token? Not a token at all. More like a Fabergé raptor egg sitting in a server room. Not decoration. Incubation. Of chaos.
Read Post

The AI buzzword trap in compliance tools | Heard in the founder chat ft. Inflo's Tom Skelton

Nov 5, 2025 By Vanta In Vanta
“AI-powered.” “AI-native.” “End-to-end AI.” At some point, it all sounds the same—but it’s not. In this “Heard in the Founder Group Chat” episode, Tom Skelton, Information Security and Technology Lead at Inflo, shares how to spot real AI that saves time (and risk)—and how to avoid platforms that just rebrand old features.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.