Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

Oct 21, 2026 By Amit Serper In CrowdStrike
Two critical memory-corruption remote code execution (RCE) vulnerabilities, collectively dubbed PHP2Shell, have been disclosed in core PHP, the underlying engine powering a vast portion of the web. The CrowdStrike Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of both vulnerabilities.
Read Post
Zenity

Building the Business Case for Agentic AI Security Investment

Oct 21, 2026 By Rock Lambros In Zenity
Security investment decisions are always, at some level, conversations about risk quantification: how much exposure does the organization actually carry, what does it cost to reduce that exposure, and what's the cost of not acting at all. For agentic AI security, these questions are answerable once the right measurement is in place.
Read Post
CloudCasa

Protecting sovereign AI with CloudCasa and SUSE AI Factory

Oct 21, 2026 By CloudCasa In CloudCasa
A production AI service accumulates data that your team needs to recover: documents, embeddings, vector indexes, application settings, and conversation history. Once a retrieval-augmented generation (RAG) pipeline connects a model to your organization’s information, those dependencies become part of the service you operate. SUSE and CloudCasa by Catalogic are working together to protect that state in SUSE AI Factory.
Read Post

The Data Center Episode: Power, Water & Local Impact | Attempted Intelligence Ep. 2

Oct 21, 2026 By KnowBe4 | Securing Humans & Agents In KnowBe4
How much power and water do AI data centers actually consume—and what does their growth mean for local communities? In Episode 2 of Attempted Intelligence, hosts Harlan Parrott (VP of AI Innovation at KnowBe4) and Matt Duren (SVP of Engineering for AI & Data) go head-to-head in a friendly debate over the environmental and economic realities of AI infrastructure. A coin flip assigns their positions as they tackle the viral claims surrounding AI energy consumption, local water usage, and the trade-offs facing local governments.
View Video
aikido

What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

Oct 21, 2026 By Willem Delbare In Aikido
Two critical remote code execution vulnerabilities have been found in PHP itself. Treat all versions as affected. ‍The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both have a CVSS v4.0 score of 9.2. The PHP security team will release fixes on October 21, 2026, at 16:00 CEST / 10:00 EDT / 07:00 PT. If you run PHP anywhere in your stack, please stay tuned for workarounds and patches. Be prepared to take action.
Read Post
Featured Post
How do you prepare leaders for a security crisis?

How do you prepare leaders for a security crisis?

Oct 21, 2026 By Peter Connolly, founder and CEO, Toro Solutions In SecuritySenses
Toro Solutions and Insignia Crisis Management recently brought together people experienced in security, crisis management, communications and resilience to discuss how to prepare leaders for a serious security crisis. Most organisations work to prevent serious security incidents and plan how to respond. But a plan can only take you so far. People must make decisions quickly, with incomplete information, while the situation is still changing.
Read Post
The Benefits of Segmenting Visitor Wireless Access from Corporate Networks

The Benefits of Segmenting Visitor Wireless Access from Corporate Networks

Oct 21, 2026 By SecuritySenses In SecuritySenses
Convenient internet access is available to visitors through guest Wi-Fi without granting them entry into internal systems. Risks to digital safety are present when guests utilize the same infrastructure as corporate computers and servers. Partitioning these connections is a method to safeguard private data and ensure consistent connection speeds. Network isolation is a functional component of a security plan for organizations that host clients or contractors.
Read Post
When the Breach Already Happened: Choosing a Security Team That Earns Its Keep

When the Breach Already Happened: Choosing a Security Team That Earns Its Keep

Oct 21, 2026 By SecuritySenses In SecuritySenses
Managed cybersecurity services turn a scattered pile of security tools into one accountable team that watches your systems while your own staff sleeps, ships product, or simply steps away from the desk. The promise is quiet but powerful. Someone competent is always on duty, confirmed threats get contained in minutes rather than days, and the monthly bill lands well below the cost of staffing three analyst shifts yourself.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.