Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

canonical

The "scanner report has to be green" trap

Mar 27, 2026 By Lech Sandecki In Canonical
In the modern DevSecOps world, CISOs are constantly looking for signals in the noise, and the outputs of security scanners often carry a lot of weight. A security scan that returns a “zero CVE” report often unlocks promotion to production; a single red flag can block a release. This binary view of security has birthed two diametrically opposed philosophies. On one side, we have the long-term support (LTS) approach: stay on a battle-tested version and backport specific security fixes.
Read Post

Observability and Security for the AI Era

Mar 27, 2026 By Datadog In Datadog
Datadog has always been driven by a broader vision of helping teams understand and operate complex systems. In this session, you’ll hear from Yrieix Garnier, VP of Product, and Hugo Kaczmarek, Senior Director of Product, as they share the latest updates across the Datadog product suite and discuss how that vision continues to shape the platform’s evolution and support the next generation of AI-driven applications.
View Video
Continuous Threat Exposure Management (CTEM): A Proactive Defense Strategy for Modern Cybersecurity

Continuous Threat Exposure Management (CTEM): A Proactive Defense Strategy for Modern Cybersecurity

Mar 27, 2026 By OpsMatters In OpsMatters
In today's rapidly evolving digital world, cyber threats are becoming more sophisticated, frequent, and damaging. Organizations can no longer rely solely on traditional, reactive cybersecurity methods. Instead, they must adopt a proactive approach to identify and eliminate risks before attackers exploit them. This is where Continuous Threat Exposure Management (CTEM) plays a critical role. CTEM is redefining how businesses approach cybersecurity by offering continuous visibility into vulnerabilities, threats, and risks across their entire IT environment.
Read Post
certkit

CertKit Keystore: Private keys that never leave your infrastructure

Mar 25, 2026 By Todd H. Gardner In CertKit
When you use CertKit, your private keys live in CertKit’s database, encrypted at rest. We’ve written about why the actual risk is smaller than it sounds. But some organizations have policies that prohibit storing private keys with any third party, regardless of how they’re protected. That policy isn’t going away. The Local Keystore enables those organizations to use CertKit and still keep their keys local.
Read Post
Emerging Cyber Threats Every Organization Should Know

Emerging Cyber Threats Every Organization Should Know

Mar 25, 2026 By OpsMatters In OpsMatters
Cyber threats in 2026 are evolving faster than most organizations can comfortably manage. Attackers are using automation, artificial intelligence, and scalable attack models to target businesses of every size. What used to be handled in isolation by IT teams is now a boardroom concern. A single breach can disrupt operations, damage trust, and create long-term financial consequences. Leaders are starting to recognize that cybersecurity is not just about tools but about strategy, governance, and accountability across the organization.
Read Post
speedscale

Production Data Access for Developers: RBAC and DLP

Mar 24, 2026 By Speedscale Team In Speedscale
If you run a software engineering tools team, you have almost certainly had this conversation: a developer asks for production data access to debug a real incident, and someone in the room says no. Not because the request is unreasonable (it isn’t), but because nobody wants to be the person who said yes when something goes wrong. That instinct is understandable. Production environments carry real risk. But the reflex to lock everything down has a cost that rarely gets accounted for.
Read Post
puppet

CMMC Requirements for 2026: How to Stay CMMC 2.0 Compliant & Prove Maturity at Any Level

Mar 24, 2026 By Robin Tatam In Puppet
CMMC requirements have been shifting recently, with a new version of the Cybersecurity Maturity Model Certification (CMMC 2.0) and distinct levels requiring distinct controls. Mandatory for practically any organization doing business with the US Department of Defense (DoD), CMMC is unavoidable all along the DoD’s supply chain.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.