Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

cyjax

UK vs Europe: comparing the physical threat landscape facing the rail sector

Jul 28, 2026 By CYJAX In CYJAX
Rail networks sit at the intersection of critical national infrastructure and daily public life, making them a persistent target for protest, industrial action, infrastructure crime and, in parts of Europe, suspected sabotage tied to geopolitical tensions. This analysis from CYJAX sets out the physical threat picture in the UK alongside that of the wider continent.
Read Post
Torq

Torq SOC Brain: The AI SOC That Learns, Not Just Remembers

Jul 28, 2026 By Bob Boyle In Torq
Back in June, I wrote a blog making the case that agentic triage alone isn’t an AI SOC. The way I see it, that’s like saying triage is the only responsibility of a SOC team. But as we know, the SOC’s responsibilities extend far beyond that, and these triage-only solutions don’t investigate threats, contain them, or close cases. That work is still left to the SOC team; the bottleneck is just shifting.
Read Post

TITAN AI Demo Series: What a Mature TPRM Program Looks Like with TITAN MAX

Jul 28, 2026 By SecurityScorecard In SecurityScorecard
Most Third-Party Risk Management (TPRM) programs can be compliance-driven and reactive. A mature program looks different. See what threat-informed TPRM with continuous monitoring looks like in SecurityScorecard's Demo Tuesday series. Vendor engagement drives real remediation. Your team spends time on risk decisions instead of manual busywork. TITAN MAX pairs the TITAN AI platform with SecurityScorecard's expert team to run these workflows on your behalf Continuous monitoring through a dedicated Vendor Risk Operations Center Faster questionnaire cycle times, without adding headcount.
View Video

Black Hat FOMO? Dojo AI Demo

Jul 28, 2026 By Sumo Logic, Inc. In Sumo Logic
On this episode of Masters of Data, we take you inside the Dojo AI demo we're bringing to the show floor at Black Hat. We walk through the SOC Analyst Agent, Mobot, and MCP back to back. SOC Analyst Agent triages every tier one alert down to the one that actually matters, and Mobot picks up from there, running the investigation in plain English to track down other phishing victims and lateral movement. We also show how MCP pulls that same insight into Claude or Slack. SOC leads tired of alert fatigue and analyst burnout will want the numbers here: 100% of tier one alerts triaged automatically, and 25 hours a week back per person.
View Video
tigera

MCP's Auth Hardening: What the Six New OAuth SEPs Fix, and What They Still Don't

Jul 28, 2026 By Alister Baroi In Tigera
In short, the MCP 2026-07-28 release candidate is getting attention for going stateless. The quieter story is a package of six SEPs that harden the protocol’s OAuth layer: issuer validation, credential binding, client type declaration, and cleanups around refresh tokens, scopes, and discovery. All six are worth shipping, and all six fix real failure modes. But they harden how a client authenticates to a server, and that was never the whole problem.
Read Post
1Password

1Password Credential Broker is now in public preview

Jul 28, 2026 By Jeff Malnick In 1Password
Every security team has tried to trace a credential access event back to a specific workload, and received nothing but a "service account." That service account probably had access to an entire vault, and its audit trail doesn’t tell you which repo triggered the request, which specific credential was accessed, or whether the workflow still has access. When an auditor asks, or an incident occurs, that's not a good place to be.
Read Post
UTMStack

Compliance Automation Software: A Practical Guide for 2026

Jul 28, 2026 By cesmng In UTMStack
You're staring at a spreadsheet full of screenshots, exported CSVs, and half-finished owner assignments, while the auditor wants one clean answer to a simple question, can you prove the control worked when it mattered? That's the gap compliance automation software is built to close in security programs that can't afford guesswork, especially when logs, cloud settings, identity events, and policy evidence all live in different places.
Read Post
levelblue

Day in the Life of DFIR Leader: Bringing Order to Cyber Chaos

Jul 28, 2026 By Devon Ackerman In LevelBlue
Most cyber investigations don’t begin at the beginning. Rather, they begin at the end, after systems are locked, data is exposed, and operations have already been disrupted. The outcome is visible, but the cause is not. From there, everything becomes a process of working backward on an incomplete picture. That’s the unique puzzle that keeps Devon Ackerman, Global Services Leader of Digital Forensics and Incident Response (DFIR) firmly planted in the world of chaos every day.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.