Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Risk Acceptance vs Risk Exposure: Making Smarter Security Investments

Dec 17, 2025 By Reach Security In Reach Security
Before investing in new security tools, it’s critical to understand what your current stack is actually delivering. Barmak Meftah spoke about the importance of baselining existing investments to truly grasp risk acceptance versus real risk exposure. Without that foundation, new acquisitions lack context and are often driven by trends rather than necessity. Smarter decisions come from understanding:︎ What is already deployed︎ How it is configured︎ Where exposure persists.
View Video

Agentic AI and Shadow APIs: Why SecOps Needs Specialization Now

Dec 17, 2025 By A10 Networks In A10 Networks
Agentic AI and Shadow APIs: Why SecOps Needs Specialization Now APIs are rapidly becoming the core “language” of AI, and when agentic AI can generate its own APIs, the security stakes rise significantly. In this clip from the A10 Networks discussion, “APIs are the Language of AI – Protecting Them is Critical,” A10 security experts Jamison Utter and Carlo Alpuerto unpack why specialized skills and tools are now essential for modern security operations teams.
View Video
vanta

The top 6 AI security trends for 2026-and how companies can prepare

Dec 17, 2025 By Vanta In Vanta
AI is changing the threat landscape faster than organizations can respond. AI-generated phishing and fraud have increased sharply year-over-year, and GenAI is enabling more sophisticated cyber attacks than ever before. ‍ Businesses are feeling the pain. Our team at Vanta surveyed 2,500 business and IT leaders across the globe and found that nearly three-quarters believe AI threats are outpacing their ability to manage them.
Read Post
jfrog

How to Detect and Eliminate Shadow AI in 5 Steps

Dec 17, 2025 By Or Cohen Naznin In JFrog
The pressure to integrate AI is immense. Your developers need to move fast, and they’re finding ways to get the job done. But this rush for innovation often happens outside of established governance, creating a sprawling, invisible risk known as Shadow AI. To secure your organization, you must first understand what Shadow AI actually is. It’s not just a developer downloading a file to their laptop. Shadow AI is the totality of unmanaged AI assets within your supply chain.
Read Post
sentrium

DeepChat AI agent XSS-to-RCE via Mermaid and Electron IPC

Dec 17, 2025 By Theklis Stefani In Sentrium
In December 2025, a critical remote code execution vulnerability was disclosed in DeepChat, an open-source desktop AI agent platform built using Electron. The issue, tracked as CVE-2025-67744, affects all DeepChat versions prior to 0.5.3 and carries a CVSS score of 9.6. The vulnerability arises from the interaction between two separate weaknesses. The first allows attacker-controlled JavaScript execution through unsafe rendering of Mermaid diagrams.
Read Post
cato networks

AIOps in the Cato SASE Platform: Using Predictive AI Networking to Shift from Reactive to Proactive IT

Dec 17, 2025 By Dr. Guy Waizel In Cato Networks
It was a quiet Monday morning until John, head of IT, opened his laptop and saw 424 new support tickets. Users across the office were reporting issues like “apps won’t load” and “internet not working.” After hours of investigation that stretched into the next day, the team traced the problem to a branch router overwhelmed by malformed DNS queries from a misbehaving IoT device.
Read Post
Exploring The Future Of AI In Cybersecurity Penetration Testing

Exploring The Future Of AI In Cybersecurity Penetration Testing

Dec 17, 2025 By SecuritySenses In SecuritySenses
In recent years, the role of Artificial Intelligence (AI) in various fields has grown tremendously, and cybersecurity is no exception. As cyber threats evolve in complexity, the need for innovative solutions like AI-driven penetration testing becomes more crucial. AI has the potential to revolutionize how businesses approach security, making penetration testing faster, more accurate, and more effective. This article delves into the increasing role of AI in cybersecurity, particularly in penetration testing, exploring its benefits, challenges, and future implications.
Read Post
link11

Link11 Identifies Five Cybersecurity Trends Set to Shape European Defense Strategies in 2026

Dec 16, 2025 By Link11
Link11 releases new insights outlining five key cybersecurity developments expected to influence how organizations across Europe prepare for and respond to threats in 2026. The findings are based on analysis of current threat activity, industry research, and insights from the Link11 European Cyber Report, alongside broader market indicators such as PwC's Global Digital Trust Insights 2026.
Read Post
vanta

How security leaders can safely and effectively implement agentic AI

Dec 16, 2025 By Vanta In Vanta
2025 began with experts warning about the dangers of agentic AI use—but that didn’t slow adoption. Our annual State of Trust Report shows that nearly 80% of organizations are either actively using or planning to use agentic AI. That acceleration is outpacing the governance required to keep these systems safe: ‍ ‍ A level of machine autonomy that would’ve been unthinkable just a few years ago is quickly becoming normalized.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.