Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Secure AI for the real world

Jun 24, 2026 By Tines In Tines
AI makes building look easy. That’s the trap. Without a secure, well-designed foundation, workflows break, costs spike, and systems grow fragile. CTOs and CISOs from leading organizations discuss what breaks without a secure foundation, and how to build AI systems that hold up at scale. This session goes deep on the real-world tradeoffs between speed, risk, and trust.
View Video
vanta

Vanta's agent development principles

Jun 24, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
vanta

Common controls framework (CCF): Step-by-step implementation guide

Jun 24, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
exabeam

Why Short Correlation Windows Miss Insider Risk

Jun 24, 2026 By Exabeam In Exabeam
Short correlation windows miss insider risk because misuse develops gradually, often over longer periods than detection models track. Short correlation windows miss insider risk because misuse often spans longer periods than detection models track. When context resets at fixed intervals, small behavioral changes fail to accumulate into visible risk. When context resets at fixed intervals, behavior is evaluated in disconnected segments.
Read Post

Ep. 64 - The Mythos Hype Index: What AI Really Did to the Zero-Day Curve

Jun 24, 2026 By SafeBreach In SafeBreach
Every CISO is asking it: now that frontier models like Claude Mythos and ChatGPT 5.5 have real offensive cyber capability, are zero days surging? Host Tova Dvorin and SafeBreach offensive engineer Adrian Culley dig into the mid-2026 data—GTIG, Mandiant M-Trends, Rapid7, AISI—and find the curve moved in shape, not volume. Inside: the two AI "firsts" (Big Sleep and a 2FA-bypass exploit), why commercial spyware explains the rebound, the negative-seven-day time-to-exploit, and why defender deployment is the real bottleneck.
View Video
protecto

How to Build Privacy-First AI Systems in 2026

Jun 24, 2026 By Mariyam Jameela In Protecto
Your RAG pipeline goes live on a Monday. By Friday, a customer query is surfacing another user’s account number in a response. Privacy-first AI stops that before the data reaches any model. More than half of organizations have already experienced an AI-related security incident, according to Check Point’s 2026 Cloud Security Report, and most don’t catch it until an audit forces the issue. Start with AI data privacy concepts and best practices.
Read Post
Octiga

The Top 5 M365 Security Gaps MSPs Find in New Customer Tenants

Jun 24, 2026 By Alex Araujo In Octiga
Most MSPs don’t have a security problem because they are missing tools; but because the tools they already have aren’t properly configured. Microsoft 365 includes a wide range of powerful security features designed to protect identities, data, and access. Over time, however, tenant configurations change: users are added, permissions are expanded, policies are adjusted, and temporary “duct tape” solutions become permanent.
Read Post
miniorange

Least Privilege Access for AI Agents: How to Secure Autonomous Systems in 2026

Jun 24, 2026 By Pradeep Kumar In miniOrange
AI agents are no longer just answering queries or summarizing documents. They are booking meetings, pulling customer data, triggering workflows, and even making decisions across systems. And they don’t ask for permission every time. That’s where the real problem starts. Because once an AI agent is connected to your tools, APIs, and internal systems, the question isn’t what it can do, it’s what it should be allowed to do.
Read Post
miniorange

New in miniOrange PAM: Bringing EPAM to Windows and macOS

Jun 24, 2026 By Pradeep Kumar In miniOrange
Privileged access has become significantly more complex over the last few years. Security teams are managing Windows and macOS devices, administrators rely on native tools to do their jobs, network infrastructure continues to expand, and operational technology environments are becoming increasingly interconnected. At the same time, manual approval processes and fragmented controls often create more friction than protection.
Read Post
keeper

How Keeper Protects Against Brute Force Attacks on Password Manager Device Registration

Jun 24, 2026 By Ashley D'Andrea In Keeper
Password managers are among the most helpful security tools available, offering strong password generation and encrypted credential storage. However, attackers are beginning to target password managers by exploiting the device registration flow, which is the process used to verify and approve a new device before it can access a user’s vault. By brute-forcing the One-Time Passwords (OTPs) that protect this step, attackers can register unauthorized devices and download copies of encrypted vaults.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.