Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Featured Post
Why Smarter Factories Can Create Greater Operational Risk

Why Smarter Factories Can Create Greater Operational Risk

Oct 19, 2026 By Sean Tilley, Senior Director of Sales for EMEA In 11:11 Systems
The manufacturing industry has undergone a remarkable transition. Factories that once relied on largely isolated systems and manual processes have evolved into highly connected environments, where cloud platforms, industrial technologies, data and third-party services work together to keep production moving. The benefits are clear, with greater connectivity helping manufacturers to increase efficiency and productivity, while better access to data gives teams the insights that they need to optimise operations and make faster, more informed decisions.
Read Post
bright security

Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding

Oct 19, 2026 By Bright Security
Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, memory exhaustion and memory-safety bugs in security-critical code without a running application. In its first open source research run, it found High or Critical issues in 45% of the projects tested, and in its first month of availability it produced ten published findings in eight projects, including the Crystal standard library, htop and RIOT OS.
Read Post
cycognito

Behind the graph: The art of target selection for AI pentesting

Oct 19, 2026 By Dima Potekhin In CyCognito
When planning a pentest, the list usually starts with the crown jewels: the applications and data stores you’ve classified as most critical. But a large external attack surface can contain thousands of assets. Some can expose sensitive data or provide access to critical systems, even if they’ve never made it onto your pentest shortlist. AI makes it possible to investigate more of that surface, but each investigation consumes compute and tokens.
Read Post
cyberhaven

Data Lineage for AI Agents: Takeaways From MIT Technology Review

Oct 19, 2026 By Cyberhaven In Cyberhaven
Security teams built their controls around people, applications, devices, and networks. AI agents operate across all four at once. An agent can pull records from Salesforce, combine them with financial data, summarize the result with a language model, and post it to Slack, with no person touching any step. Each action may look permitted on its own, which means the risk sits in the sequence, and most tools can’t see the sequence.
Read Post
kovrr

What an AI Agent Registry Should Record

Oct 19, 2026 By Kovrr In Kovrr
Seven fields carry an agent registry, and they split into two kinds. Some a person has to state, because the answer exists only in somebody's intention. The rest can be read from systems that already hold them. ‍ Which kind each field belongs to decides whether the registry drifts. Typing an observable value creates a record that was accurate on the day somebody typed it, and recording a declared value is the only way to capture it at all. ‍
Read Post
netwrix

What is remote code execution (RCE)? How AI speeds up exploitation and how to limit the damage

Oct 19, 2026 By Jarosław Bogalecki In Netwrix
Remote code execution (RCE) lets an attacker run commands on a system they don't own, usually through a flaw in a web application, CMS, VPN portal, or API. A successful exploit inherits the permissions of the vulnerable service, and many services run with far more access than they need. AI shortens the time from a disclosed flaw to a working exploit and lets attackers test thousands of exposed systems at once. A remote code execution flaw turns a vulnerable server into someone else's computer.
Read Post
nucleus

There's Something Missing in the Discussion About AI in Vulnerability Management

Oct 19, 2026 By John Morton In Nucleus
The platform determines what is known. AI helps determine what it means. Technology solution providers across virtually every industry are racing to add AI, in some fashion, to their offerings. Vulnerability management providers aren’t immune, either. They’re racing just as fast as the rest of them, sometimes faster. These vendors are embedding copilots, assistants, and agents powered by technologies like Anthropic Claude, OpenAI GPT, and Google Gemini.
Read Post
teleport

5 Lessons from Watching an AI Agent Swarm Self-Organize

Oct 19, 2026 By Ben Arent In Teleport
This summer, we launched Identity Security for AI. That post described an upcoming wave of attacks and security challenges unique to Large Language Models (LLMs) and agentic workflows. As the traditional MITRE ATT&CK framework reached its limits, Google DeepMind published TRAIT&R, a taxonomy of rogue AI tactics and routines closely modeled after MITRE ATT&CK.
Read Post
cyberhaven

AI Agent Intent Drift and the Case for Data Lineage

Oct 19, 2026 By Franklin Nguyen In Cyberhaven
An AI support agent picks up a customer case, signs in with valid credentials, works on it in only approved systems, and closes it. I would reasonably predict that if someone were to review this workflow, it would likely come back clean, with no policy rule violation. But if we were to take a closer look, we might find that the agent did more than just close the case.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.