Tag: siem
-
The Defensive Gap: Why Modern SOCs Are Losing Ground and How to Close It
Despite continued investments in SIEMs, threat intelligence platforms, and managed detection services, many Security Operations Centers (SOCs) remain in a defensive position. SOCs are reactive, overstretched, and underprepared. High-profile breaches continue to grab headlines, but they are only what is visible. The reality is that SOC teams are overwhelmed by alert fatigue, organizational friction, and..…
-
Security validation: The key to maximizing ROI from security investments
Every sizable organization invests heavily in firewalls, SIEMs, EDRs, and countless other technologies that form the backbone of a modern enterprise’s cyber defenses. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/14/picus-security-validation-whitepaper-investments-roi/
-
Exabeam CEO Integrates AI Agents in SIEM Push
Pete Harteveld Seeks to Strengthen Security Operations With Programmatic Approach. New Exabeam CEO Pete Harteveld emphasizes securing AI agents, minimizing tool sprawl and promoting defined security outcomes. His roadmap builds on recent success and aims to deliver programmatic SIEM and UEBA innovations to improve analyst efficiency and benchmarking. First seen on govinfosecurity.com Jump to article:…
-
The role of Artificial Intelligence in today’s cybersecurity landscape
AI is transforming cybersecurity”, from detecting phishing and insider threats to accelerating response. See how Waziuh, the open-source XDR and SIEM, integrates AI to turn raw security data into actionable insights and smarter threat hunting. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/the-role-of-artificial-intelligence-in-todays-cybersecurity-landscape/
-
4 ways to use time to level up your security monitoring
SIEMs excel at correlating events and firing alerts, but their ingest pipelines can get overwhelmed when scaled. And because most SIEMs rely on general-purpose log storage … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/03/security-monitoring-system/
-
4 ways to use time to level up your security monitoring
SIEMs excel at correlating events and firing alerts, but their ingest pipelines can get overwhelmed when scaled. And because most SIEMs rely on general-purpose log storage … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/03/security-monitoring-system/
-
Aembit Introduces CrowdStrike Next-Gen SIEM Support
3 min readYou can now correlate workload and agentic AI activity with broader enterprise telemetry, closing gaps before attackers exploit them First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/aembit-introduces-crowdstrike-next-gen-siem-support/
-
IBM’s Suja Viswesan On The Future Of QRadar SIEM And The Post-Quantum Security ‘Journey’
Comparisons abound between the looming shift in encryption required for quantum computing and the circa-1990s preparations for Y2K, but that analogy is only partly right, according to IBM security software leader Suja Viswesan. First seen on crn.com Jump to article: www.crn.com/news/security/2025/ibm-s-suja-viswesan-on-the-future-of-qradar-siem-and-the-post-quantum-security-journey
-
Agentic AI in IT security: Where expectations meet reality
Tags: ai, api, automation, cloud, compliance, control, credentials, crowdstrike, cybersecurity, data, detection, finance, framework, gartner, google, governance, infrastructure, injection, metric, phishing, RedTeam, risk, service, siem, skills, soar, soc, software, strategy, technology, threat, tool, trainingIntegration approaches: Add-on vs. standalone: The first decision regarding AI agents is whether to layer them onto existing platforms or to implement standalone frameworks. The add-on model treats agents as extensions to security information and event management (SIEM), security orchestration, automation and response (SOAR), or other security tools, providing quick wins with minimal disruption. Standalone…
-
Agentic AI in IT security: Where expectations meet reality
Tags: ai, api, automation, cloud, compliance, control, credentials, crowdstrike, cybersecurity, data, detection, finance, framework, gartner, google, governance, infrastructure, injection, metric, phishing, RedTeam, risk, service, siem, skills, soar, soc, software, strategy, technology, threat, tool, trainingIntegration approaches: Add-on vs. standalone: The first decision regarding AI agents is whether to layer them onto existing platforms or to implement standalone frameworks. The add-on model treats agents as extensions to security information and event management (SIEM), security orchestration, automation and response (SOAR), or other security tools, providing quick wins with minimal disruption. Standalone…
-
Identity Resilience: Rubrik erweitert Integration mit CrowdStrike Falcon
Durch die Integration von Rubrik Security Cloud in Falcon Fusion SOAR, Next-Gen SIEM, Falcon Threat Intelligence und Charlotte AI können Sicherheitsteams den Prozess der Untersuchung und Reaktion vereinfachen First seen on infopoint-security.de Jump to article: www.infopoint-security.de/identity-resilience-rubrik-erweitert-integration-mit-crowdstrike-falcon/a42157/
-
Identity Resilience: Rubrik erweitert Integration mit CrowdStrike Falcon
Durch die Integration von Rubrik Security Cloud in Falcon Fusion SOAR, Next-Gen SIEM, Falcon Threat Intelligence und Charlotte AI können Sicherheitsteams den Prozess der Untersuchung und Reaktion vereinfachen First seen on infopoint-security.de Jump to article: www.infopoint-security.de/identity-resilience-rubrik-erweitert-integration-mit-crowdstrike-falcon/a42157/
-
Exabeam ‘Reinventing’ MSSP Model In SIEM Partner Push: Channel Chief
Exabeam is seeking to accelerate its work with the channel around the massive SIEM opportunity, including with a new commercial model for MSSPs and enhanced incentives for VARs launching in January, Global Channel Chief Craig Patterson told CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2025/exabeam-reinventing-mssp-model-in-siem-partner-push-channel-chief
-
Anton’s Security Blog Quarterly Q3 2025
Tags: ai, automation, breach, ciso, cloud, cyber, defense, detection, edr, google, governance, guide, metric, office, RedTeam, risk, siem, soc, software, supply-chain, threat, vulnerability, vulnerability-management, zero-trustAmazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my posts from Google Cloud blog, Google Cloud community blog, and our Cloud Security Podcast (subscribe on Spotify). Gemini for docs based on this blog Top 10 posts with the most…
-
CSO Awards winners highlight security innovation and transformation
Tags: ai, attack, automation, awareness, best-practice, business, ciso, cloud, compliance, conference, control, cyber, cybersecurity, data, defense, detection, finance, flaw, framework, governance, group, guide, infrastructure, intelligence, login, malicious, metric, mitre, network, penetration-testing, phishing, privacy, programming, risk, risk-management, service, siem, skills, soc, software, technology, threat, tool, training, update, vulnerability, vulnerability-managementFSU tackles third-party risk with tighter vendor management program: Organization: Florida State UniversityProject: Third-Party Risk Management ProgramSecurity leader: Bill Hunkapiller, CISOOfficials at Florida State University wanted to ensure that data shared with outside entities was well protected. To achieve that, CISO Bill Hunkapiller and his team revamped its third-party risk management program so that the…
-
Vega Secures $65M to Scale SecOps, Take On Traditional SIEMs
Funding Supports Threat Hunting, Natural Language to Replace Legacy Detection. Vega aims to replace patchwork AI integrations with an analytics layer that enables real-time, natural language detection across distributed data. Backed by Accel, the company will double headcount, improve detection tuning and reduce false positives without a SIEM rip-and-replace required. First seen on govinfosecurity.com Jump…
-
CrowdStrike CEO George Kurtz On ‘Incredible’ SIEM Advantage Vs. Network-Focused Vendors
CrowdStrike’s surging momentum in areas such as Next-Gen SIEM and massive traction on platform consolidation show that the vendor’s “pace of innovation” is stronger than ever, CrowdStrike Co-founder and CEO George Kurtz said Wednesday. First seen on crn.com Jump to article: www.crn.com/news/security/2025/crowdstrike-ceo-george-kurtz-on-incredible-siem-advantage-vs-network-focused-vendors
-
Where CISOs need to see Splunk go next
Tags: ai, api, automation, cisco, ciso, cloud, communications, compliance, conference, crowdstrike, cybersecurity, data, data-breach, detection, finance, framework, google, incident response, intelligence, jobs, metric, microsoft, open-source, RedTeam, resilience, risk, router, siem, soar, strategy, tactics, threat, tool, vulnerabilityResilience resides at the confluence of security and observability: There was also a clear message around resilience, the ability to maintain availability and recover quickly from any IT or security event.From a Cisco/Splunk perspective, this means a more tightly coupled relationship between security and observability.I’m reminded of a chat I had with the chief risk…
-
Wir beseitigen die traditionellen Kompromisse, die SIEM-Plattformen plagen!
Im Interview spricht Andy Grolnick, CEO vom SIEM-Sicherheitsanbieter Graylog, über den Mangel an Security-Spezialisten, welche Funktionen SIEM-Plattformen zwingend haben sollten und wie Unternehmen sich bis Ende des Jahres verbessern können. Erzählen Sie uns etwas mehr über Graylog. Was unterscheidet das Unternehmen von anderen IT-Sicherheitsanbietern? Wir beseitigen die traditionellen Kompromisse, die SIEM-Plattformen plagen; das ist… First…
-
News alert: Seraphic integrates with CrowdStrike Marketplace, extends SIEM protection to browsers
Las Vegas, Sept. 16, 2025, CyberNewswire, Seraphic today announced at Fal.Con 2025 that its Secure Enterprise Browser (SEB) solution is now available for purchase in the CrowdStrike Marketplace, a one-stop destination for the world-class ecosystem of CrowdStrike-compatible security… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/news-alert-seraphic-integrates-with-crowdstrike-marketplace-extends-siem-protection-to-browsers/
-
Seceon Unveils aiCompliance CMX360: Instantly Achieve 60-80% Readiness Across 20+ Global Frameworks
Seceon Inc., an award-winning cybersecurity leader trusted by 700+ partners and 9,000+ customers worldwide, today announced aiCompliance CMX360, the industry’s first security-native compliance platform that leverages existing security telemetry to deliver immediate compliance value. Unlike traditional platforms that build evidence from scratch, CMX360 achieves 60-80% framework completion instantly by transforming years of accumulated SIEM data…
-
CrowdStrike CEO George Kurtz: ‘Huge Service Opportunity’ Ahead For Partners
CrowdStrike is looking to accelerate opportunities for partners to deliver services across its Falcon security platform, with a special focus on fast-growing products including Next-Gen SIEM and identity security, CrowdStrike Co-founder and CEO George Kurtz said Monday. First seen on crn.com Jump to article: www.crn.com/news/security/2025/crowdstrike-ceo-george-kurtz-huge-service-opportunity-ahead-for-partners
-
CrowdStrike CEO George Kurtz: ‘Huge Service Opportunity’ Ahead For Partners
CrowdStrike is looking to accelerate opportunities for partners to deliver services across its Falcon security platform, with a special focus on fast-growing products including Next-Gen SIEM and identity security, CrowdStrike Co-founder and CEO George Kurtz said Monday. First seen on crn.com Jump to article: www.crn.com/news/security/2025/crowdstrike-ceo-george-kurtz-huge-service-opportunity-ahead-for-partners
-
The Gravity of Process: Why New Tech Never Fixes Broken Process and Can AI Change It?
Tags: advisory, ai, api, best-practice, business, cybersecurity, data, flaw, grc, incident response, risk, siem, soar, soc, technology, threat, tool, trainingLet’s tackle the age old question: can new technology fix broken or missing processes? And then let’s add: does AI and AI agents change the answer you would give? Gemini illustration based on this blog This is the question which I recently debated with some friends, with a few AIs and with myself. The context was of…