Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

fidelis security

How Can Organizations Perform Hybrid Infrastructure Risk Assessment Effectively?

Mar 23, 2026 By Fidelis Security In Fidelis Security
Most organizations didn’t design their infrastructure to become hybrid. It happened gradually. A few workloads moved to the cloud first. Development teams adopted new services. Meanwhile, some systems stayed exactly where they were — inside internal data centers — because moving them wasn’t practical. Over time the environment expanded. Now many organizations run applications across cloud platforms, private infrastructure, and on-premise systems at the same time.
Read Post
sophos

The global CISO landscape: A leadership gap too large to ignore

Mar 23, 2026 By Sophos In Sophos
The global CISO landscape: A leadership gap too large to ignore Why the world needs scalable security leadership — and MSPs and MSSPs are key to delivery The 2026 CISO Report, published by Cybersecurity Ventures in partnership with Sophos, highlights a critical imbalance in global cybersecurity leadership. Despite decades of progress and near-universal CISO adoption in Fortune 500 and Global 2000 organizations, there are still only 35,000 CISOs worldwide serving an estimated 359 million businesses.
Read Post

Your AI Isn't Broken... Your Data Is #shorts #ai

Mar 23, 2026 By Protecto In Protecto
Your AI works perfectly during testing… but suddenly fails in production. Why? The problem usually isn’t the model — it’s the data. Synthetic data looks clean and structured. But real-world data is messy: typos, missing values, broken formats, and unexpected edge cases. When AI models train only on synthetic datasets, they never learn how to handle real-world complexity. In this video, we explain why synthetic data can break AI systems and how using real production data safely can make AI more reliable.
View Video
sophos

Oracle vulnerability (CVE-2026-21992) impacts core products

Mar 23, 2026 By Sophos Counter Threat Unit Research Team In Sophos
On March 20, 2026, Oracle disclosed a critical (CVSS score of 9.8) vulnerability (CVE-2026-21992) impacting two Oracle Fusion Middleware components: Oracle Identity Manager and Oracle Web Services Manager. An unauthenticated attacker could exploit the vulnerability to obtain network access via HTTP and remotely execute code. Critical functions of the products are exposed due to the lack of network-level authentication. As of this publication, there are no reports of active exploitation.
Read Post
sophos

NICKEL ALLEY strategy: Fake it 'til you make it

Mar 23, 2026 By Sophos Counter Threat Unit Research Team In Sophos
Counter Threat Unit (CTU) researchers continue to investigate trends in Contagious Interview campaign activity conducted by NICKEL ALLEY, a threat group operating on behalf of the North Korean government. The group notoriously targets professionals in the technology sector by advertising fake job opportunities, deceiving prospective candidates through a fake job interview process, and ultimately delivering malware.
Read Post
wallarm

CISO Spotlight: Dimitris Georgiou on Building Security that Serves People First

Mar 23, 2026 By Wallarm In Wallarm
Dimitris Georgiou has been a self-professed computer geek since the early 80s. At university, he studied the convergence of educational technology with computer science as part of his psychology MA – finding, to his disbelief, that systems were perilously insecure. Since then, he’s always worked in and around cybersecurity.
Read Post

AI vs AI: Securing the Expanding Cyber Attack Surface | Mr. Anirban Mukherji at ET Studios

Mar 23, 2026 By miniOrange In miniOrange
In this exclusive interview byte at ET Studios, Our Founder & CEO Mr. Anirban Mukherji discusses how increasing enterprise connectivity through cloud applications, third-party integrations, and remote work is exploding the enterprise cyber attack surface making identity security and access control more critical than ever. He dives into key threats like traditional ransomware, zero-day supply chain attacks, hyper-personalized AI phishing, and systemic incidents.
View Video
CrowdStrike

Falcon Next-Gen SIEM Supports Third-Party EDR Tools, Starting with Microsoft Defender

Mar 23, 2026 By Paola Miranda In CrowdStrike
CrowdStrike is expanding CrowdStrike Falcon Next-Gen SIEM to support third-party endpoint detection and response (EDR) solutions — beginning with Microsoft Defender — with no Falcon sensor required. This evolution will enable organizations to modernize their SOC without replacing existing endpoint agents. Adversaries are moving faster than ever, exploiting cross-domain gaps across endpoint, identity, network, and cloud.
Read Post
CrowdStrike

New CrowdStrike Innovations Secure AI Agents and Govern Shadow AI Across Endpoints, SaaS, and Cloud

Mar 23, 2026 By John Gamble In CrowdStrike
As organizations race to adopt new AI tools, deploy AI agents, and build AI-powered software, they create new attack surfaces that traditional security controls were never designed to protect. A key example is the prompt and agentic interaction layer, which faces novel threats like indirect prompt injection and agentic tool chain attacks.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.