Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

harness

Harness Named a Leader in SecureIQLab's Cloud WAAP v5.0 CyberRisk Validation Report

Sep 11, 2026 By Christine Ferrusi Ross In Harness
In the August 2026 SecureIQLab Cloud WAAP v5.0 CyberRisk Validation Comparative Report, Harness Web Application & API Protection (WAAP) was named a Leader. The analysis involves actual lab testing across 12 leading Cloud WAAP vendors and shows scores for each criterion evaluated — and we're thrilled to be one of just six vendors to earn Leader status, and one of only five to meet both of SecureIQLab's "Secure by Design" and "Secure by Default" criteria.
Read Post
Most healthcare IT compliance guidance is written for a hospital system's IT department, and a fifteen-provider practice doesn't have one

Most healthcare IT compliance guidance is written for a hospital system's IT department, and a fifteen-provider practice doesn't have one

Sep 11, 2026 By OpsMatters In OpsMatters
Search for HIPAA compliance guidance and the advice is remarkably consistent: assign a compliance officer, establish a formal risk management committee, implement a documented change control process, maintain a dedicated security team that reviews access logs on a regular cycle. Sound advice, all of it. It also describes an organizational structure most healthcare practices don't have and aren't going to build.
Read Post
observiq

Redact PII at the edge - and still be able to search for it

Sep 10, 2026 By Austin Sabel &Adnan Rahic In ObservIQ
Ask a platform team why their application logs aren't in their observability backend and you'll often get a one-sentence answer: And, that's where the conversation ends. The logs stay in a silo. Or, they don't get collected at all. The team loses the troubleshooting signal, and nobody revisits the decision because the alternative looks like a compliance violation. Application logs in healthcare, aviation, insurance, and retail are full of personal information that should not be stored in plain text.
Read Post
gitkraken

Run More Internal Hackathons

Sep 10, 2026 By Chris Griffing In GitKraken
Internal hackathons are a powerful way to let your teams explore ideas and work together on something fun besides the same old stuff for work. Maybe they want to build something brand new, maybe they want to knock out things that are on the backlog that never get prioritized, or maybe they want to work on something fun but completely unrelated to work.
Read Post
motadata

The Essential Eight: Patching Applications and Operating Systems at Maturity Level Two

Sep 9, 2026 By Poonam Lalani In Motadata
Why do so many patching programs pass every internal check and still come back from an Essential Eight assessment rated at Maturity Level One? The answer is rarely speed. Teams that miss the mark are usually patching their servers, browsers, and office suites on schedule, then losing the rating on the fifty applications nobody put on a list. Maturity Level Two is where the Essential Eight stops asking how fast you patch and starts asking how much you can see.
Read Post

SBOMs are easy for one project, monumental at scale

Sep 9, 2026 By Cloudsmith In Cloudsmith
Think of an SBOM as your ingredient list. A common language describing everything that goes into a piece of software, every dependency and version, in one place. This video covers why SBOMs have gone from niche to mandatory, and why they're harder to pull off than the concept suggests: The concept is simple. Operationalizing it across a large, diverse tech stack is where it gets hard.
View Video
tigera

AI Agents on Kubernetes 101: From Laptop Script to Production Pod

Sep 8, 2026 By Alister Baroi In Tigera
In short, this is a beginner’s guide to deploying an AI agent on Kubernetes. You will containerize an agent, store its API key as a Kubernetes secret, write a deployment with health probes and resource limits, expose it with a service, and lock down its network egress, in that order, with a working manifest at every step. On a local kind cluster the whole walkthrough takes about an hour.
Read Post
motadata

PCI DSS Requirement 10: Logging and Monitoring in v4.0.1

Sep 8, 2026 By Ramya Shah In Motadata
Version 4.0 renumbered PCI DSS Requirement 10 from end to end, and the Council retired v3.2.1 on 31 March 2024. Sub-requirement numbers written before then mostly point somewhere else now. Four more Requirement 10 rules changed status on 31 March 2025, automated log review among them. Checking your numbering against v4.0.1 costs an afternoon and saves a finding. In this blog, you will: PCI DSS Requirement 10 covers audit logging and monitoring across the cardholder data environment.
Read Post
Why Most Security Firms Miss Their Incident Prevention Window

Why Most Security Firms Miss Their Incident Prevention Window

Sep 7, 2026 By OpsMatters In OpsMatters
Security operations managers face a critical paradox: their teams are designed to respond to incidents, but the incidents that matter most are the ones that never happen. The difference between a security firm that prevents problems and one that merely responds to them comes down to a single, often-overlooked factor: whether they can see what their guards are actually doing in real time. When operators lack live visibility into patrol locations, guard status, and emerging threats, they're always one step behind.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.