Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

nucleus

How AI Changes Exposure Management: From Static Findings to Continuous Risk Decisions

Sep 15, 2026 By Rob Gibson In Nucleus
Every security team knows the feeling. The quarterly vulnerability scan completes. The report lands, with thousands of findings, color-coded by CVSS severity, neatly timestamped. And the moment it’s printed, it’s already out of date. That is the fundamental flaw at the heart of traditional exposure management: it is built around a point in time.
Read Post
Arctic Wolf

We Need to Pace AI Development. We Can't Pace AI Defense

Sep 15, 2026 By Dan Schiappa In Arctic Wolf
Anthropic CEO Dario Amodei published an essay this month called “We Must Pace the Frontier.” His argument is straightforward, calling out the reality that AI capabilities are advancing faster than the industry’s ability to align and safeguard them, and frontier labs need to slow the rate of capability growth long enough for safety work, alignment, and interpretability to catch up. He points to two developments behind his concern.
Read Post
Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Sep 15, 2026 By SecuritySenses In SecuritySenses
In January 2025, NIST's Center for AI Standards and Innovation published red team results that should have changed how enterprises test autonomous systems. Against an AI agent operating in simulated workspace, travel, Slack and banking environments, the strongest previously known hijacking attack succeeded 11% of the time. The strongest new attack developed by the red team succeeded 81% of the time. The model had not changed. The evaluation had.
Read Post
Ranked: The 10 Best AI SEO Agencies for 2026

Ranked: The 10 Best AI SEO Agencies for 2026

Sep 15, 2026 By SecuritySenses In SecuritySenses
SEO is having a bit of a moment. Getting onto page one of Google still matters, of course, but that is no longer the whole picture. Brands now also need to think about whether they are being mentioned in AI-generated answers, summaries, recommendations, and conversational search results. That is where AI SEO comes in. The strongest agencies in 2026 are not throwing traditional SEO out the window. They are combining the fundamentals that still work with newer strategies built around AI search visibility, authority, brand mentions, and genuinely useful content.
Read Post
sophos

Devil's advocate? Uncensored Luciferus AI service advertised underground

Sep 14, 2026 By Sophos Counter Threat Unit Research Team In Sophos
On August 24, 2026, Counter Threat Unit (CTU) researchers observed an Exploit underground forum persona named “Optimus_Prime” advertising an uncensored AI subscription service named Luciferus. The persona joined Exploit on April 18, and their profile displays a “coding / coder” activity label. As of September 4, the persona has published 21 posts on the forum.
Read Post

Does an agent have more access than you do?

Sep 14, 2026 By Teleport In Teleport
70% of organizations give AI more access than a human in the same role would get. Not surprising when it is common for a team to click “always” when an agent asks to be allowed once or always allowed. That means the agent holds that access in perpetuity and turns into agent over-provisioning. Makes you wonder: Does an agent have more access to your organization's stack than it should and more access than the people who deploy them?
View Video
Zenity

Introducing Guardian Agents: Meet Blue Agent, Your AI Security Analyst

Sep 14, 2026 By Tomer Teller In Zenity
AI agents are moving into production faster than security teams can govern them. And unlike traditional applications, agents continuously make decisions, invoke tools, access data, and take actions. Every one of those interactions creates security context that needs to be understood. At enterprise scale, asking analysts to manually evaluate every finding becomes impossible.
Read Post
knowbe4

Warning: "Slop Squatting" Directs AI Users to Phishing Pages

Sep 14, 2026 By KnowBe4 Team In KnowBe4
Threat actors are increasingly leveraging AI hallucinations to plant phishing links and other malicious content in AI output, IEEE Spectrum reports. Large language models (LLMs) sometimes fabricate information, including web domains, when answering users’ questions. Attackers are registering these hallucinated web domains to host phishing pages.
Read Post
kovrr

Evidence for One AI Framework Does Not Count for the Next

Sep 14, 2026 By Kovrr In Kovrr
An organization assembles an evidence package for one AI framework, passes, and discovers that almost none of it transfers to the next instrument applying to the same system. The frameworks agree on the principles and disagree on what proves them. Three frameworks defining risk differently is the same problem one layer earlier. ‍ The common response is to look for a crosswalk and treat the mapping as a reuse plan.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.