Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

kovrr

Meeting the NIST AI RMF Measure Function With Monitoring Evidence

Oct 26, 2026 By Kovrr In Kovrr
Measure carries four categories and twenty-two subcategories, and they divide cleanly by what kind of evidence satisfies them. Some ask whether something was observed. Others ask whether something was tested. Monitoring answers the first group and contributes almost nothing to the second.
Read Post
ignyte Team

NIST AI RMF: What It Is and How to Adopt It

Oct 23, 2026 By Dan Page In Ignyte
One of the jobs of the National Institute of Standards and Technology is to keep on top of new technologies as they are developed and evolve. This is particularly important for risk management, considering both of the major governmental information security frameworks (FedRAMP and CMMC) are based on NIST publications. Well, as you might imagine, Artificial Intelligence technology is a huge new risk factor.
Read Post
mend

NIST SSDF: 4 core practices for secure software development

Oct 6, 2026 By Stephanie Broyles In Mend
The NIST Secure Software Development Framework (SSDF) is a set of fundamental, outcome-based practices that integrate security throughout the software development lifecycle (SDLC). Documented in NIST SP 800-218, it helps organizations reduce vulnerabilities, prevent recurrences, and establish a common language for secure development. The SSDF outlines dozens of tasks grouped into four high-level categories.
Read Post
armo

NIST AI Agent Authorization: Five Asks Mapped to Kubernetes

Sep 30, 2026 By Ben Hirschberg In ARMO
NIST has published no AI agent authorization standard, and nothing in its February 2026 draft gives an auditor a control to test. What the NCCoE did publish is more useful to a CISO with an audit on the calendar: five areas of interest that read like an assessor’s question list. Together they ask which agent acted, on whose behalf, under what authority, and with what record. A Kubernetes cluster has a primitive it can point to for each area.
Read Post
appsentinels

What Does NIST IR 8587 Mean for API Security?

Sep 22, 2026 By AppSentinels In AppSentinels
On September 15, 2026, NIST published Internal Report 8587, “Protecting Tokens and Assertions from Forgery, Theft, and Misuse.” It’s built to extend NIST Special Publication 800-53 Release 5.1.1, and on paper it reads like an SSO hardening document for government agencies and their cloud vendors.
Read Post
Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Sep 15, 2026 By SecuritySenses In SecuritySenses
In January 2025, NIST's Center for AI Standards and Innovation published red team results that should have changed how enterprises test autonomous systems. Against an AI agent operating in simulated workspace, travel, Slack and banking environments, the strongest previously known hijacking attack succeeded 11% of the time. The strongest new attack developed by the red team succeeded 81% of the time. The model had not changed. The evaluation had.
Read Post
signmycode

What Is ML-KEM? Guide to NIST's Post-Quantum Key Encapsulation Mechanism

Sep 14, 2026 By SignMyCode In SignMyCode
Quantum computers are likely to render the current public-key cryptography used for protecting modern internet traffic, digital signatures, and encryption useless. In response, NIST has developed ML-KEM as the main post-quantum key encapsulation method. The guide below will introduce the concept of ML-KEM, how it functions, in which projects it is used, and how organisations can implement it.
Read Post
When Reading Apps Handle Sensitive Documents: A Practical Privacy Checklist

When Reading Apps Handle Sensitive Documents: A Practical Privacy Checklist

Aug 21, 2026 By CastReader Editorial Team In SecuritySenses
Read-aloud and AI explanation tools can make difficult material easier to use. Before opening a confidential PDF, however, users should understand where the text goes, what the app stores and which permissions it really needs.
Read Post
vanta

NIST SP 800-161: A guide to C-SCRM practices

Aug 12, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.