Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

veracode

Who Authorized That Tool Call?

Aug 12, 2026 By Chris Wysopal In Veracode
Veracode I have been going to Black Hat for more than 25 years, and I have spent many of those years on the Review Board. New technologies keep changing the shape of the systems we secure. The questions I find myself asking stay remarkably familiar. Where does untrusted data enter? What authority does a component have? Which boundary controls a sensitive operation? How do we know that control worked?
Read Post
exabeam

Why Autonomy Breaks Traditional Security Operations Workflows

Aug 12, 2026 By Exabeam In Exabeam
Autonomy breaks traditional security operations workflows because AI agents can act continuously and independently inside approved environments. When activity is initiated and executed without a human in the loop, event-by-event review and short correlation windows fail to capture progression, intent, and accumulated risk.
Read Post

A New Voice in InfoSec. What Nobody Tells You About Breaking Into the Industry

Aug 12, 2026 By Razorwire Cybersecurity In Razorthorn
What does it actually look like to break into InfoSec from the outside, with no technical background, no industry contacts and no idea what half the acronyms mean? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I'm Jim and in this interview episode, I'm joined by Irina Sordiya, a GRC and compliance professional based in Montreal who came into information security from a finance background.
View Video

The Risk Mindset That Will Get You Hired in Cybersecurity #GRC #risk #jobs

Aug 12, 2026 By Razorwire Cybersecurity In Razorthorn
GRC cybersecurity careers rely on far more than knowing policies, frameworks and technical terminology. Risk thinking, communication, trust and the ability to work with different stakeholders sit at the centre of a career spanning security auditing, compliance and AI governance.
View Video
cyberhaven

AI Security vs. Traditional Data Security: Key Differences

Aug 12, 2026 By Cyberhaven In Cyberhaven
Every security architecture review this year eventually lands on the same question: does the existing data security stack already cover AI, or does AI security need its own budget line? The instinct to treat this as one more tool to evaluate and buy is understandable. It is also the wrong framework for modern data security. Traditional data security and AI security answer different questions about the same data. One assumes data stays inside known applications and moves through known channels.
Read Post

AI Agents & Cybersecurity: Why AI Agents Are New Trust Boundaries | A10 Networks

Aug 12, 2026 By A10 Networks In A10 Networks
AI Agents & Cybersecurity: Why AI Agents Are New Trust Boundaries AI agents are more than just another virtual machine—they are autonomous entities delegated with power, introducing entirely new trust boundaries into modern network architectures. In this discussion, A10's Arjoyita Roy and Jamison Utter discuss why traditional security controls fall short when managing AI agents and why cybersecurity professionals must design new security perimeters and controls around these evolving AI workloads.
View Video
acronis

How to detect and govern shadow AI in your organization

Aug 12, 2026 By Acronis In Acronis
To detect and govern shadow AI, organizations need to discover which AI tools employees are using, understand who is using them and why, then turn that visibility into an enforceable AI app policy. The goal is not only to find unsanctioned AI use, but to control which GenAI and AI-enabled apps are allowed, blocked or monitored across the organization.
Read Post
miniorange

Best DLP Tools in 2026: Top 14 DLP Vendors Compared

Aug 12, 2026 By Stutee Raja In miniOrange
Your data leaks in ways you don't expect. A developer pastes source code into ChatGPT. A finance employee emails a payroll spreadsheet to a personal inbox. A salesperson uploads a client list to a personal Google Drive before their last day. All of these are breaches, rather, potential breaches. That's exactly why data loss prevention (DLP) tools exist. But picking the right one? That's where it gets complicated.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.