Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

cyberark

Cloud access simplified, secured, and just a request away

Nov 6, 2025 By Brooke Jameson In CyberArk
CyberArk introduces Access Requests for Secure Cloud Access: Secure, seamless user experience for requestors and approvers alike. Securing and requesting access to multiple clouds can feel like navigating through a maze of approvals and endless tool-switching. In an ideal world, access requests would provide users with frictionless, just-in-time access across AWS, Azure, and Google Cloud from within their existing platform.
Read Post
apono

APIBased JIT Access vs Proxies: Streamlining Secure Cloud Permissions

Nov 6, 2025 By Gabriel Avner In Apono
Breaking down the trade-offs between API integration and proxy gateways for modern access management The way organizations manage access has fundamentally shifted. In the past, infrastructure was mostly static—centralized data centers, long-lived servers, and predictable traffic patterns. You could rely on VPNs, firewalls, and a fixed set of roles in your identity provider. Access paths were clear, and change was infrequent. But that’s no longer the case.
Read Post
apono

TruffleNet Weaponizes Stolen Credentials to Target AWS

Nov 5, 2025 By Gabriel Avner In Apono
New details are emerging about a wave of intrusions into Amazon Web Services environments. Attackers are reportedly weaponizing AWS IAM, using it to validate stolen credentials and turn identity controls into a springboard for in-cloud abuse. According to new research from Fortinent, attackers are leveraging the open source TruffleHog tool to automate testing of stolen AWS credentials in what they are calling the TruffleNet infrastructure.
Read Post
manageengine

Mastering cloud app control, Part 1: Locking down access

Nov 3, 2025 By Hari Kumar Selvanarayanan In ManageEngine
When it comes to managing cloud application usage in an organization, the challenges are anything but simple. On one side, users are constantly exposed to malicious links and risky apps. On the other, locking things down too tightly by broadly blocking access to services can cripple employee productivity. Ideally, you'd want a balance between security and productivity.
Read Post
opti9

6 Months After re:Inforce: Which AWS Security Updates Actually Matter for SMBs

Nov 3, 2025 By Mark Mazza In Opti9
AWS re:Inforce 2025 delivered a flood of security announcements back in June. Simplified AWS WAF consoles. New Shield network posture management. Integrated CloudFront security. The headlines promised that enterprise-grade security finally became accessible to mid-market companies. Six months later, the hype cycle is over.
Read Post
fidelis security

Understanding the Role of Misconfigurations in Data Breaches in Cloud Environments

Nov 3, 2025 By Fidelis Security In Fidelis Security
Key Takeaways Cloud misconfiguration is the silent epidemic destroying enterprise security. While organizations accelerate cloud adoption across cloud environments, Gartner analysis shows that through 2025, 99% of cloud security failures have been the customer’s fault, primarily due to misconfigurations. For decision-makers, this represents a critical business risk that demands immediate strategic attention.
Read Post

Cloudflare Radar: New TLD Insights and Certificate Transparency

Nov 1, 2025 By Cloudflare In Cloudflare
André, who joined Cloudflare as an intern in Lisbon, Portugal, in 2024, explains how radar.cloudflare.com showcases trends in Internet traffic, protocol adoption, and security. He walks us through Radar’s new Top-Level Domain (TLD) insights, how the team uses DNS magnitude to measure domain popularity, and why certificate transparency is crucial for a safer web. The conversation also goes into outage monitoring, the Data Explorer and URL scanner tools, and how users around the world are finding surprising Internet trends — like the rise of Linux usage in France.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.