Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

manageengine

What is a backdoor attack?

Sep 10, 2026 By James Messer In ManageEngine
A backdoor attack is hard to detect. Since they bypass standard security measures, backdoor attacks can enter your system and go unnoticed for a long time. While some cyberattacks tend to be smash-and-grab, backdoor attacks are stealthier. They allow hackers to enter secretly, gather more secure data than typical attacks, and can cause significant damage. Because they can be so difficult to detect and cause so much damage, you need to know the signs of a backdoor attack and learn how to mitigate it.
Read Post
manageengine

Breach fatigue: Why your team has switched off and how to fix it

Sep 10, 2026 By Jeremy Spence In ManageEngine
Cybersecurity continues to face continued challenges in the Australian environment. The Australian Signals Directorate’s (ASD's) Annual Cyber Threat Report 2024–25 revealed that there were more than 84,700 cybercrime incidents and over 42,500 calls to the Australian Cyber Security Hotline, representing a 16% increase in comparison to the previous reporting period. More threats. More notifications. More training events. Yet, surprisingly, employee vigilance is continually decreasing.
Read Post
one identity

Your AD is a stomping ground for lateral movement

Sep 10, 2026 By Lori Cotton In One Identity
Active Directory (AD) is the backbone many enterprises lean on for their IT environments. Yet, most organizations rarely govern the directory with the scrutiny necessary. This was the throughline of a recent webinar with Nitish Deshpande, senior analyst at KuppingerCole, and Robert Kraczek, global strategist at One Identity. The pair made a strong case for mediating admin access to AD, emphasizing just how easily compromised credentials can beget full-blown incidents.
Read Post
miniorange

SSH Session Monitoring: How to Monitor, Record & Audit SSH Sessions

Sep 10, 2026 By Chinmay Rasam In miniOrange
Secure Shell (SSH) gives you direct access to critical servers, databases, and cloud infrastructure. Once a privileged user connects through SSH, they hold extensive control over that system. They can alter core configurations, run terminal scripts, move files, or delete production databases in seconds. If you lack visibility into privileged actions, it can be risky. If a credential gets stolen or an insider goes rogue, traditional firewalls won’t be enough.
Read Post
veracode

Scaling DevSecOps: The Role of a Comprehensive Application Security Platform

Sep 10, 2026 By Natalie Tischler In Veracode
Exploitation of software vulnerabilities is now the number one cause of breaches, according to the 2026 Verizon DBIR Report. At the same time, release velocity keeps climbing and AI coding tools are now authoring roughly half of all committed code in organizations that use them. For application security and engineering teams, the math is unforgiving: more code, faster delivery, and a growing attack surface.
Read Post
cyberhaven

8 Key DLP Use Cases Every Enterprise Should Know

Sep 10, 2026 By Cyberhaven In Cyberhaven
Most enterprise data loss prevention (DLP) programs get judged on a single metric: how many exfiltration attempts did it block last quarter. That framing undersells what a modern DLP program needs to do. Sensitive data now leaves through AI prompts, personal cloud accounts, and agent-initiated file transfers that a legacy blocking rule alone was never built to catch, while auditors and boards expect evidence that the program is working, not just alerts confirming it.
Read Post
kovrr

When a Cyber Loss Becomes a Recall

Sep 10, 2026 By Kovrr In Kovrr
Cyber loss models are built around information leaving an organization. Records exposed, notification costs, regulatory penalty, litigation from affected individuals. Every category assumes the harm is informational. ‍ A compromise affecting vehicles in the field produces something the model has no term for. The vehicle can behave differently, the manufacturer may have to recall it, and the recall cost is frequently larger than anything the cyber categories would have produced. ‍
Read Post
kovrr

What an AI Correlation Rule Does When Sources Disagree

Sep 10, 2026 By Kovrr In Kovrr
A correlation rule joins records from several sources to establish that one thing happened. Two of those sources return different answers about the same identity, the same session or the same action. Something has to happen next, and what most systems do is pick a winner. ‍ Picking is the wrong default. The disagreement carries information that resolving it discards, and in a few specific cases the disagreement is the most useful thing the system produced. ‍
Read Post

Preparing for an AI-Powered Future with Amazon CSO Steve Schmidt

Sep 10, 2026 By CrowdStrike In CrowdStrike
Steve Schmidt, SVP and CSO at Amazon, sees firsthand how both defenders and adversaries are using AI to their advantage. In this episode, he joins Adam and Cristian to discuss modern AI models, evolving adversary behavior, and how Amazon is responding to shifts in the threat landscape. “The big change we’ve seen recently is the ability of models to chain things together to produce something interesting,” Steve says. As AI models grow more adept at automatically chaining and acting, he adds, the time to respond has dramatically decreased.
View Video
Zenity

Seeing Every MCP Connection: Zenity Joins the Cursor Marketplace

Sep 10, 2026 By Ian Miller In Zenity
Cursor has become one of the primary AI coding environments for development teams, and its agents increasingly reach into the outside world through MCP servers: databases, ticketing systems, cloud consoles, and internal APIs. Every connection extends what an agent can do. It also extends what could go wrong if that access goes unmonitored or unchecked.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.