Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Featured Post
Organisations Don't Need a Cloud-Native Network to Adopt SASE

Organisations Don't Need a Cloud-Native Network to Adopt SASE

Jul 17, 2026 By Anthony Lobretto, SVP of Connectivity In 11:11 Systems
In a perfect world, every business would design its network from day one with the need for scalability, connectivity from anywhere and zero-trust security in mind. In the real world, of course, few organisations have this luxury. Most have entrenched technology investments in place, and overhauling them to conform with modern network access and security paradigms isn't always feasible.
Read Post
reach security

A Guide to Firewall Management: How to Set Up Proper Firewall Rules

Jul 16, 2026 By John Dominguez In Reach Security
Firewalls remain one of the most foundational controls in any security program. Nearly every organization has at least one, and in many cases, hundreds. Despite widespread deployment, firewalls are frequently a source of unintended exposure rather than protection. The reason is almost always in how firewall rules are maintained over time, not the technology itself.
Read Post

Find and Fix Risky Firewall Rules | Reach Security Demo

Jul 16, 2026 By Reach Security In Reach Security
A firewall rule set to allow any source to any destination can stay live for months. It cancels out the rules beneath it and lets traffic pass unchecked. That kind of drift sets off no alarm. It builds up between quarterly reviews, while small teams govern 50 or more firewalls and hundreds of rule changes a week. Reach Network Security Assurance finds these controls, shows how long each has been open, ties the finding to real exposure, and guides the fix.
View Video
Corelight

Cleartext is all fun and games

Jul 16, 2026 By Cody Spooner In Corelight
One of the many interesting things we stumble across in the Black Hat NOC (Network Operations Center) is the various applications exhibiting poor security hygiene. Usually it’s something in the clear that makes us chuckle before we move on to more serious matters. Sometimes it’s something more serious that requires letting an attendee know they’re leaking sensitive information.
Read Post

Episode 19 - The Cap on Inference: Proving How Network Data Quality Drives AI Security ROI

Jul 16, 2026 By Corelight In Corelight
In this episode, host Richard Bejtlich sits down with Corelight Co-founder and Chief Strategy Officer Greg Bell to unpack groundbreaking research that quantifies exactly how data quality impacts AI-driven security automation. Moving past qualitative industry hype, Greg shares hard evidence from an empirical experiment pitting leading AI agents against real-world Capture the Flag (CTF) challenges and incident response report writing. The findings reveal a dramatic truth: basic firewall and flow logs place a hard cap on inference, throttling an LLM's capacity for deep insight.
View Video
WatchGuard

Why Now Is the Time to Replace Your VPN

Jul 15, 2026 By Bill Munroe In WatchGuard
For years, the VPN has been the default answer to remote access. It solved a problem organizations faced when employees primarily worked from offices and only occasionally connected from home. That world no longer exists. Today, employees work from everywhere. Applications run across SaaS platforms, public cloud, private cloud, and on-premises environments. Security teams are expected to provide seamless access while protecting against increasingly sophisticated attacks.
Read Post
cato networks

The Agentic Attacker: One Objective, One Prompt, Forty Minutes, Domain Admin - Game Over

Jul 15, 2026 By Matan Mittelman In Cato Networks
In a controlled enterprise lab, we tested how far an agentic attack stack could go by harnessing a frontier model with an agent platform, MCP-enabled tooling, operational context, and enough autonomy to execute a complete attack path.
Read Post
SSH ProxyJump at Scale: Where It Breaks Down and What to Do Instead

SSH ProxyJump at Scale: Where It Breaks Down and What to Do Instead

Jul 15, 2026 By SecuritySenses In SecuritySenses
Most engineers meet SSH ProxyJump the same way: a single bastion host stands between the public internet and a private network, and one clean -J flag replaces a clunky chain of manual hops. For small teams managing a handful of servers, it feels like a solved problem. But infrastructure grows, teams grow, and the assumptions that made ProxyJump elegant at ten servers start to strain at ten thousand. What works cleanly in a small environment often becomes a liability in a large one, and understanding why is the first step toward finding a better approach.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.