Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike

What Makes a Good Security Agent? 5 Lessons from the AgentWorks Hackathon

Nov 2, 2026 By Lucia Stanham In CrowdStrike
Every security team is being told to adopt AI. Far fewer have been shown what "good" looks like in practice. Turnkey agents handle common, well-defined security tasks, but no two security teams operate the same way. Each has its own data, playbooks, escalation paths, and risk tolerances; unique context that no vendor can anticipate in a packaged solution.
Read Post
forward

How much AI risk is acceptable? The compromise infrastructure leaders shouldn't have to make

Nov 2, 2026 By Forward Networks In Forward
Spend any time with senior infrastructure and IT leaders right now and one conversation keeps coming up. The business wants AI, and increasingly it wants agentic AI: systems that don’t just recommend an action but take it. Boards have seen the productivity numbers. Competitors are announcing pilots. The pressure to move is real. At the same time, those same leaders own the risk register. They answer to regulators, auditors, and, when something goes wrong, the front page.
Read Post
WatchGuard

How Long Can a Misconfiguration Go Undetected?

Nov 2, 2026 By Mick McCarter In WatchGuard
Cloud applications are constantly evolving to accommodate new users, tools, and ways of working. However, every adjustment can also alter who has access to resources and what they can do with them. A misconfiguration occurs when an active setting fails to meet established security criteria. It can grant more access than necessary, keep an insecure protocol enabled, allow certain actions for too many users, or open a pathway for information to leave the organization.
Read Post
Zenity

Introducing HAMMER, the Homegrown Agent Maturity Model for Execution & Risk

Nov 2, 2026 By Dan Levy In Zenity
The Homegrown Agent Maturity Model for Execution & Risk (HAMMER): is a five-level framework with seven domains for security teams to locate where they stand on securing homegrown agents, then make the case for what they need to advance. The most powerful AI agents in your enterprise may be ones you never bought. Your own teams are building them by wiring models, tools, and data into software that acts on its own, often with little security approval or oversight.
Read Post
astra

Vibe Coding Security Under Test: 100+ Vulnerabilities Across Four AI-Built Apps

Nov 2, 2026 By Ephrim Holyson In Astra
Vibe-coding platforms let you go from prompt to a deployed app in a single session, a pace that outpaces the review cycles most teams built for slower releases. With Lovable nearing 8 million users by late 2025, and Replit past 50 million by April 2026, we wanted to answer a sharper question than “is vibe coding safe?” Does the platform generating the code change the outcome, and does one security prompt give you the same security everywhere?
Read Post
certkit

How long does it take to replace every certificate after a CA distrust?

Nov 2, 2026 By Todd H. Gardner In CertKit
Last week we moved every certificate in one of our products to a new CA in 10 minutes. It was six certificates and 18 deployments. I said issuance was the part that slows down, because most CAs limit how fast you can order, and then I waved it off. A reader did the math for me. Some organizations run 30,000 certificates, they claimed, and that’s common at MSPs, telcos, and government agencies. Google Trust Services takes 100 orders an hour by default.
Read Post
How Layered Cybersecurity Stops Ransomware and Data Breaches in Mid-Sized Businesses

How Layered Cybersecurity Stops Ransomware and Data Breaches in Mid-Sized Businesses

Nov 2, 2026 By SecuritySenses In SecuritySenses
A layered cybersecurity strategy protects mid-sized businesses by building multiple overlapping defenses, ensuring that if hackers breach one layer, another stops them before data is stolen or encrypted. Single-point solutions fail against modern cyber extortion, leaving growing organizations severely vulnerable. Today, threat actors aggressively target smaller companies that lack enterprise-grade defenses. In fact, an alarming 88% of SMB breaches involve ransomware, making small businesses more than twice as likely to face an attack compared to large enterprises.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.