Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

WatchGuard

The MSP Evolution: From IT Support to Cybersecurity Leadership

May 20, 2026 By Tracy Hillstrom In WatchGuard
For years, managed service providers (MSPs) have played a critical role in helping businesses maintain and support their IT environments. But today, the market is demanding something fundamentally different. Cybersecurity has become a continuous operational challenge, one that many SMB and midmarket organizations can no longer manage alone.
Read Post
cyberhaven

LLM Access Controls and Audit Logging for Security Teams: A Practitioner's Guide

May 20, 2026 By Cyberhaven In Cyberhaven
Most organizations have an acceptable use policy for AI tools. Very few have controls that actually enforce it. The gap between what the policy says and what security teams can detect is where insider risk lives when it comes to large language model (LLM) usage.
Read Post
sophos

Sophos Firewall and Synchronized Security

May 20, 2026 By Chris McCormack In Sophos
Sophos Firewall and Synchronized Security Synchronized Security is a unique capability you won’t get anywhere else. If you look at what’s required to properly secure a modern network, it breaks down into three pillars: hardening, protection, and detection and response. Or another way to look at it: being equal parts proactive and reactive - or what you need to do before, during, and after an attack.
Read Post
sophos

GitHub internal repositories breached

May 20, 2026 By Sophos X-Ops In Sophos
A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum On May 19-20, 2026, GitHub confirmed a security incident affecting its own internal systems. A threat actor self-identifying as TeamPCP, also tracked as UNC6780, compromised an employee’s developer device by way of a malicious Visual Studio Code extension and used that foothold to clone roughly 3,800 of GitHub’s internal repositories.
Read Post
Tines

Why AI-era attacks demand deterministic defense

May 20, 2026 By Thomas Kinsella In Tines
The security industry spent a good chunk of early 2026 debating whether Anthropic’s Mythos and OpenAI’s Daybreak are truly dangerous or just good marketing. It's a reasonable debate. But while we're having it, attackers are asking a different question: how do we use tools like this to move faster than defenders can respond?
Read Post
Tines

What it took to get 90% of Tines using AI workflows in production

May 20, 2026 By Blake Coolidge In Tines
Every conversation I have with CIOs and IT leaders right now starts the same way. They're not short on activity. They've got pilots running, tools deployed, teams experimenting. What they don't have is much to show for it. The data backs it up: 92% of companies are ramping AI investment right now. Only 1% consider themselves mature.
Read Post
Zenity

AI Agents, Enterprise Scale, No Compromises: Now via AWS

May 20, 2026 By Ben Kliger In Zenity
A couple of years ago, AI agent security was a niche conversation. The practitioners who took it seriously were a small group of researchers, a handful of forward-looking CISOs, and a few founders who had watched the attack surface forming in real time. The broader market hadn't caught up yet. It has now. Enterprises are deploying AI agents at scale across platforms. The productivity gains are real. The competitive pressure to adopt is real.
Read Post
Zenity

The Authorization Trap: Why Your IAM Controls Don't Cover AI Agent Risk

May 20, 2026 By Cinthia Portugal In Zenity
If there's one idea that shaped RSA 2026, it was identity. Vendor booths, keynotes, conversations. All roads led back to the same instinct: control identity, control access, control risk. That instinct is directionally correct. Identity governance is foundational. But identity answers only part of the question agentic AI is asking. Here's the part it doesn't answer: authorization tells you what an agent was permitted to do. It says nothing about whether what it actually did was appropriate.
Read Post

Govern AI agents the right way with Identity Manager by One Identity

May 20, 2026 By One Identity In One Identity
AI agents are becoming an inseparable part of identity governance, sometimes being created by other AI agents and acting proactively across platforms at machine speed — but who’s watching them? Identity Manager 10.0 by One Identity answers that question. Hear Ingrid Thorpe, director of product management for Identity Manager, explore how the solution governs agentic workflows, tackles agent-specific risks and integrates across cloud and enterprise platforms, holding non-human identities (NHIs) accountable.
View Video
indusface

How to Prevent SQL Injection Attacks (2026): 7 Proven Techniques

May 20, 2026 By Venkatesh Sundar In Indusface
Your database is one apostrophe away from a breach. SQL injection has been the most common web vulnerability for three consecutive years. The 2025 Verizon DBIR reports it contributed to 12% of all data breaches, up from 9% the year before. In December 2024, a PostgreSQL SQL injection zero-day gave state-sponsored attackers a path into the US Treasury. In 2023, a single campaign used it to steal 2 million job seeker records across 65 websites in one month. The fix has been known for two decades.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.