Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

protecto

Attribute-Based Access Control: How ABAC Works, Examples and Use Cases

Aug 21, 2026 By Mariyam Jameela In Protecto
Access control has become significantly more complex as enterprises adopt cloud platforms, AI applications, and distributed workforces. A user’s identity alone is no longer enough to determine whether they should access sensitive data. Factors such as device posture, data sensitivity, location, and business context all influence the right decision. This shift is driving widespread adoption of attribute-based access control, a model that evaluates multiple attributes before granting access.
Read Post

The Complete Re-evaluation of AI Security

Aug 21, 2026 By Razorwire Cybersecurity In Razorthorn
The OpenAI model that escaped its testing environment and compromised Hugging Face exposed a much bigger cybersecurity problem: are our existing defences actually designed for autonomous AI attacks? In this Razorwire Raw, James Rees looks beyond the original incident at what happens when AI can identify vulnerabilities, exploit them and move through systems at a speed human defenders simply can't match. From AI security and sandboxing to defensive AI and the possible return of honeypots, it may be time to reconsider what defence in depth looks like in the age of AI.
View Video
elastic

How SLED can win the cybersecurity race with agentic AI

Aug 21, 2026 By Bobby Suber In Elastic
Adversaries are using AI to launch cyber attacks in record time, forcing security teams to measure responses in minutes instead of months. Phishing campaigns built with large language models (LLMs) achieve click-through rates 4.5 times higher than traditional methods,1 and the average time between initial compromise and lateral movement has fallen to just 29 minutes.2 This is a 65% increase from the prior year.2 State and local governments and higher education institutions are at an inflection point.
Read Post
astra

How autonomous pentesting kills false positives

Aug 21, 2026 By Ephrim Holyson In Astra
Ask any security engineer what they actually think about their vulnerability scanner, and you will get a version of the same answer. They trust maybe 20% of what shows up in the patching queue. The rest gets a suspicious glance, and a slow death in a backlog. That is the real cost of a false positive. It is quiet, it compounds, and it hollows the tool out from the inside. It is also the reason autonomous pentesting came to replace hypotheses with confirmed exploits.
Read Post
kovrr

What Counts as One AI Asset? Getting the Unit Right

Aug 21, 2026 By Kovrr In Kovrr
Two teams inventory the same organization and return different numbers. One counts forty-one AI assets, the other counts one hundred and twelve. Neither is wrong, because they counted different things, and nobody had decided what a row represents. ‍ Guidance on building an AI inventory covers which fields a row should carry and skips what a row is. That question determines the count, the risk scores, the regulatory classification and whether two inventories can ever be reconciled.
Read Post
teramind

AI Prompt Data Leakage: How to Secure Sensitive Data in LLMs

Aug 21, 2026 By Teramind In Teramind
As generative AI adoption surges, so does a dangerous new enterprise risk: AI prompt data leakage — the unintentional exposure of confidential corporate data to third-party Large Language Models via user prompts. Why does it happen? Driven by productivity pressure and the need to speed up their work, employees routinely bypass traditional DLP controls.
Read Post

Secure AI Written Code Before It Ships: Salt Code

Aug 20, 2026 By Salt Security In Salt Security
AI coding assistants are transforming how enterprise software gets built. Developers at every level are prompting their way to production-ready APIs, MCP integrations, and agentic workflows faster than any security team can review them. The problem is that none of those assistants knows your internal security standards, regulatory obligations, or risk tolerance. The result is insecure patterns shipping unnoticed, vulnerabilities discovered downstream when fixes are costly, and compliance becoming a guessing game on every commit.
View Video
1Password

451 Research report: How agentic AI is redefining identity security

Aug 20, 2026 By 1Password In 1Password
In the short time that AI agents have been a part of the enterprise, they have upended many of our bedrock assumptions about the nature of identity, access, development, and work itself. At 1Password, we’ve been in the trenches of the agentic revolution; we’ve seen its positive impact on productivity, and the serious concerns it raises about security.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.