Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

certkit

Public mTLS client-auth certificates stop renewing in October

Jul 27, 2026 By Todd H. Gardner In CertKit
Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.
Read Post
tigera

Why eBPF Is Useful for Watching and Sandboxing AI Agents

Jul 27, 2026 By Peter Kelly In Tigera
Most of our runtime security habits were built for deterministic workloads. A service does what its code says: review the code, sign the image, and its behavior is bounded. Agents are different. An agent’s behavior emerges from a model reasoning over whatever lands in its context window, and some of that context comes from places we don’t fully control — a retrieved document, a tool’s output, a user’s prompt.
Read Post

Supply chain hit: the first hours are about "am I affected?"

Jul 27, 2026 By Cloudsmith In Cloudsmith
The first two to three hours after a supply chain compromise aren't about remediation – they're about figuring out whether you're affected at all. That requires two things: a feed of compromised packages you can cross-reference against what you're using, and an audit trail showing which developers pulled which packages and when. Teams that can answer "are we affected?" in 30 minutes have that data pre-built into their platform. Teams that don't are still piecing it together at hour three. Protect your supply chain with Cloudsmith.
View Video
Tier 1 SOC Automation Options Explained

Tier 1 SOC Automation Options Explained

Jul 27, 2026 By OpsMatters In OpsMatters
In 2026, like in every other year, tier 1 is the front line of the SOC. It's where alerts land, where triage happens, and where most of the repetitive work lives. Unsurprisingly, it is also where automation is moving fastest. There is a lot of skepticism around how much of tier 1 can be reliably automated. If you want to see some, just have a look on Reddit or other forums. But there is definitely a growing market and capability for AI-enabled tools to learn, guide and automate tier 1 workflows.
Read Post
How Network on Chip Encryption Protects Sensitive Data Between Processing Elements

How Network on Chip Encryption Protects Sensitive Data Between Processing Elements

Jul 26, 2026 By OpsMatters In OpsMatters
Modern systems on chip combine multiple processors, memory controllers and hardware components into one device. Because these parts exchange large volumes of information, the security of internal communication is a primary concern for the system. Using encryption within the communication fabric is a method to lower the risk that unauthorized parties will access data while it moves between components.
Read Post
tigera

Migrate First, Modernize Later: A Leadership Guide to Converging VMs and Containers to Run AI Workloads

Jul 24, 2026 By Pervez Sikora In Tigera
Every so often the ground under enterprise IT moves. It’s moving now. Across industries, organizations are consolidating fragmented infrastructure onto a single, self-hosted platform capable of running both containers and virtual machines side by side. The motivation is simple: simplify operations, lower cost and reallocate resources & budget to AI initiatives. Kubernetes is emerging as the primary platform for many of these workloads.
Read Post
nexthink

How Claude Mythos Changes the Future of Vulnerability Management: Fixing, Not Finding

Jul 24, 2026 By Nexthink In Nexthink
Anthropic’s Claude Mythos shows how AI is making vulnerability discovery nearly infinite. Endpoint remediation is where IT teams win or lose. In April 2026, Anthropic introduced Claude Mythos Preview, an AI model that autonomously discovered thousands of previously unknown vulnerabilities across every major operating system and web browser. By late May, the running total had passed 23,000 potential findings, and the vast majority were still unpatched.
Read Post
tigera

What Happens to a VM's IP When It Moves During Migration?

Jul 23, 2026 By Dillon Barry In Tigera
A KubeVirt VM runs inside a pod. That is the trick that lets Kubernetes schedule a VM like any other workload. It also means the VM and the pod have different lifecycles. The VM is long-lived and has a stable identity. The pod is disposable. When the VM reboots, gets evicted, or live-migrates, the pod underneath is destroyed and a new one is created.
Read Post
dns spy

Send DNS Spy Alerts to Your SIEM: Introducing Webhook Alerts

Jul 23, 2026 By DNS Spy In DNS Spy
Enterprise teams can now add a Webhook alert channel that POSTs every DNS Spy alert — DNS record changes, domain outages, security check failures, WHOIS updates, phishing look-alike detections — to any HTTPS endpoint as structured JSON. Requests are optionally HMAC-signed, every delivery is logged and retried, and a Send Test button verifies your integration end to end.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.