Tag: soc
-
AiStrike Launches Continuous Detection Engineering to Fix Alert Noise at the Source
Alert fatigue is a persistent problem in security operations, but AiStrike is framing it as a symptom of a deeper issue: poor detection quality. At RSAC 2026, the company announced Continuous Detection Engineering, a capability designed to shift SOC teams from reactive alert triage toward ongoing, intelligence-driven detection optimization. The company’s own analysis across enterprise..…
-
Arctic Wolf kündigt weltweit größtes kommerzielles AgenticOperations-Center an
Arctic Wolf, ein weltweit führender Anbieter von Security-Operations-Lösungen, gibt sowohl die Eröffnung des Aurora-Agentic-SOC als auch die Verfügbarkeit von Aurora-Superintelligence-Platform bekannt. Die neue Plattform soll die Einführung von KI im Bereich der Cybersicherheit beschleunigen. Dazu trägt auch die Einführung des neuen Agentic-SOC bei, welches das SOC-Betriebsmodell neu definiert, indem es KI agentengesteuert in den Mittelpunkt…
-
Cisco Ships Zero Trust for AI Agents, Self-Service Red Teaming, and Agentic SOC Tools at RSAC 2026
Cisco announced a broad set of security products at RSAC 2026 Monday aimed at securing the growing use of AI agents in enterprise environments. The announcements span identity management, pre-deployment testing, open-source tooling, and SOC automation. The centerpiece is Zero Trust Access for AI agents, which extends Cisco’s existing access control model to cover agentic..…
-
Arctic Wolf Launches Aurora Agentic SOC, Claims World’s Largest Commercial Agentic SOC
Arctic Wolf launched the Aurora Agentic SOC at RSAC 2026, billing it as the world’s largest commercial agentic Security Operations Center. The announcement represents a significant platform rebuild for the company, shifting from a human-led model to one that puts AI agents at the center of SOC operations while keeping human experts involved for oversight..…
-
AI in the SOC: What Could Go Wrong?
Two cybersecurity leaders tested out AI in their respective SOCs for six months, and here’s what they learned. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/ai-soc-go-wrong
-
SOC 2 penetration testing requirements
For organisations pursuing SOC 2, demonstrating effective security controls is central to the audit process. While the framework does not prescribe specific technologies or testing frequencies, it does require evidence that risks are identified, assessed, and mitigated through appropriate controls. This is where SOC 2 penetration testing becomes particularly relevant. For many SaaS providers and”¦…
-
Amazon Lost 6.3 Million Orders to Vibe Coding. Your SOC Is Next.
Amazon mandated AI coding tools and suffered a 6-hour outage costing 6.3 million orders. The same AI quality crisis now emerging in SOC operations. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/amazon-lost-6-3-million-orders-to-vibe-coding-your-soc-is-next/
-
How Dropzone AI Is Bringing A ‘Software-Only’ Approach To Agentic SOC: CEO
Dropzone AI is finding strong traction with MSSPs for its technology that brings a fully AI-powered approach to dealing with alert overload in the SOC (Security Operations Center), according to Dropzone Founder and CEO Edward Wu. First seen on crn.com Jump to article: www.crn.com/news/security/2026/how-dropzone-ai-is-bringing-a-software-only-approach-to-agentic-soc-ceo
-
How Dropzone AI Is Bringing A ‘Software-Only’ Approach To Agentic SOC: CEO
Dropzone AI is finding strong traction with MSSPs for its technology that brings a fully AI-powered approach to dealing with alert overload in the SOC (Security Operations Center), according to Dropzone Founder and CEO Edward Wu. First seen on crn.com Jump to article: www.crn.com/news/security/2026/how-dropzone-ai-is-bringing-a-software-only-approach-to-agentic-soc-ceo
-
Anton’s Security Blog Quarterly Q1 2026
Tags: ai, automation, breach, ciso, cloud, control, defense, detection, framework, google, governance, infrastructure, mandiant, metric, RedTeam, risk, service, siem, soc, software, supply-chain, threat, update, vulnerability, vulnerability-managementMy Anton’s Security Blog (And Podcast!) Quarterly this covers both Anton on Security and my posts from Google Cloud blog, Google Cloud community blog, and our Cloud Security Podcast (subscribe on Spotify, now with VIDEO). Gemini image for this Top 10 posts with the most lifetime views (excluding paper announcement blogs): Anton’s Alert Fatigue: The Study [A.C.”Š”,…
-
Anton’s Security Blog Quarterly Q1 2026
Tags: ai, automation, breach, ciso, cloud, control, defense, detection, framework, google, governance, infrastructure, mandiant, metric, RedTeam, risk, service, siem, soc, software, supply-chain, threat, update, vulnerability, vulnerability-managementMy Anton’s Security Blog (And Podcast!) Quarterly this covers both Anton on Security and my posts from Google Cloud blog, Google Cloud community blog, and our Cloud Security Podcast (subscribe on Spotify, now with VIDEO). Gemini image for this Top 10 posts with the most lifetime views (excluding paper announcement blogs): Anton’s Alert Fatigue: The Study [A.C.”Š”,…
-
Anton’s Security Blog Quarterly Q1 2026
Tags: ai, automation, breach, ciso, cloud, control, defense, detection, framework, google, governance, infrastructure, mandiant, metric, RedTeam, risk, service, siem, soc, software, supply-chain, threat, update, vulnerability, vulnerability-managementMy Anton’s Security Blog (And Podcast!) Quarterly this covers both Anton on Security and my posts from Google Cloud blog, Google Cloud community blog, and our Cloud Security Podcast (subscribe on Spotify, now with VIDEO). Gemini image for this Top 10 posts with the most lifetime views (excluding paper announcement blogs): Anton’s Alert Fatigue: The Study [A.C.”Š”,…
-
SIEM Is Not Dead. It Just Stopped Moving Fast Enough.
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming important again. The short version is simple: SIEM is not dead. Calling it obsolete makes for good marketing, but it is not a……
-
SIEM Is Not Dead. It Just Stopped Moving Fast Enough.
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming important again. The short version is simple: SIEM is not dead. Calling it obsolete makes for good marketing, but it is not a……
-
Tool-Overload überfordert SOC-Analysten – Zeitfaktor entscheidet über Schadensbegrenzung bei Cyberangriffen
First seen on security-insider.de Jump to article: www.security-insider.de/siem-soar-mttd-mttr-reaktionszeit-cyberangriffe-a-7d51eb9bae2d7023401cc78811a73c1d/
-
Tool-Overload überfordert SOC-Analysten – Zeitfaktor entscheidet über Schadensbegrenzung bei Cyberangriffen
First seen on security-insider.de Jump to article: www.security-insider.de/siem-soar-mttd-mttr-reaktionszeit-cyberangriffe-a-7d51eb9bae2d7023401cc78811a73c1d/
-
5 key priorities for your RSAC 2026 agenda
Tags: ai, api, attack, automation, ciso, compliance, conference, cybersecurity, data, detection, framework, governance, identity, infrastructure, injection, LLM, risk, service, soc, threat, tool, trainingEnable AI adoption fast enough to stay competitive.Secure the enterprise against a threat landscape that AI itself is creating.These are not sequential problems, unfortunately; they are parallel ones. I’d argue that RSAC 2026 is your best opportunity this year as a security leader to close the knowledge gap. AI prioritised Learning Framework: RSAC can be…
-
Horabot Returns in Mexico, Spreading via Phishing and Email Worm Attacks
Horabot has resurfaced in Mexico with a more complex, multi”‘stage kill chain that blends fake CAPTCHA lures, living-off-the-land scripting, and an email worm”‘style spreader to deliver a Latin American banking trojan. In this installment of the SOC Files series, our MDR team dissected a targeted Horabot campaign that we hunted a few months ago, after…
-
Agentic AI in the SOC: The Governance Layer you Need Before You Let Automation Execute
Guidance for SOC leaders on safely enabling agentic AI execution”, require policy-driven guardrails, human-approval gates, blast-radius limits, auditability, and rollback to prevent automation from becoming operational risk. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/agentic-ai-in-the-soc-the-governance-layer-you-need-before-you-let-automation-execute/
-
Can advanced AI make SOC teams more relaxed
How Do Non-Human Identities Influence Cloud Security Management? Have you ever wondered how organizations can efficiently protect their cloud while dealing with the complexities of machine identities? Non-Human Identities (NHIs) address the modern challenge of safeguarding dynamic digital environments through a comprehensive approach. This concept is gaining traction in industries like financial services, healthcare, and……
-
Can advanced AI make SOC teams more relaxed
How Do Non-Human Identities Influence Cloud Security Management? Have you ever wondered how organizations can efficiently protect their cloud while dealing with the complexities of machine identities? Non-Human Identities (NHIs) address the modern challenge of safeguarding dynamic digital environments through a comprehensive approach. This concept is gaining traction in industries like financial services, healthcare, and……
-
Can advanced AI make SOC teams more relaxed
How Do Non-Human Identities Influence Cloud Security Management? Have you ever wondered how organizations can efficiently protect their cloud while dealing with the complexities of machine identities? Non-Human Identities (NHIs) address the modern challenge of safeguarding dynamic digital environments through a comprehensive approach. This concept is gaining traction in industries like financial services, healthcare, and……
-
Realm.Security Rolls Out AI-Ready Security Data for the Modern SOC Ahead of RSA Conference
Realm.Security launches Data Enrichments and Privacy Guard, injecting real-time threat context into security pipelines and automating PII redaction to keep SOC teams faster, leaner, and compliance-ready. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/realm-security-rolls-out-ai-ready-security-data-for-the-modern-soc-ahead-of-rsa-conference/
-
Realm.Security Rolls Out AI-Ready Security Data for the Modern SOC Ahead of RSA Conference
Realm.Security launches Data Enrichments and Privacy Guard, injecting real-time threat context into security pipelines and automating PII redaction to keep SOC teams faster, leaner, and compliance-ready. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/realm-security-rolls-out-ai-ready-security-data-for-the-modern-soc-ahead-of-rsa-conference-2/
-
Understanding SOC 2 Controls for SaaS Providers
For SaaS providers, trust is a core part of the offering. Customers rely on software platforms to process data, support business operations, and integrate with wider technology ecosystems. As a result, demonstrating effective security and governance controls using frameworks like SOC 2 has become an increasingly important requirement when selling to enterprise customers. SOC 2″¦…
-
AI in the SOC: Why Explainability is the New Security Control
AI is transforming the SOC, but without explainability analysts can’t trust it. Why transparency is becoming a critical security control. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/ai-in-the-soc-why-explainability-is-the-new-security-control/
-
Interview mit Andreas Gaetje, CISO bei Körber – KI im SOC: Effizienz steigt, Autonomie bleibt begrenzt
First seen on security-insider.de Jump to article: www.security-insider.de/ki-agenten-im-soc-triage-schwachstellen-priorisieren-a-b55b412fb0c1c5a2bcc3aae96282bb54/
-
New infosec products of the week: March 13, 2026
Here’s a look at the most interesting products from the past week, featuring releases from Binary Defense, Mend.io, OPSWAT, Singulr AI, SOC Prime, Terra Security, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/13/new-infosec-products-of-the-week-march-13-2026/
-
Building Trust in AI SOC Analyst Solutions: A UK and EU CISO Perspective
Tags: access, ai, best-practice, ciso, control, data, endpoint, framework, GDPR, governance, incident response, international, metric, nis-2, privacy, risk, socBy Brett Candon, VP International at Dropzone AI Trust has always been critical in security operations, but in the UK and Europe it carries significant regulatory weight. GDPR, NIS2 and similar related data”‘protection frameworks shape far more than legal risk, they directly influence architectural decisions, supplier selection, and how security data can be accessed, processed…
-
Top AI SOC Analyst Platforms in 2026
The world is adapting to the concept of agentic AI: agents that can operate in your network with human instruction and direction, and cut the time needed to do menial tasks. Within the SOC, a number of new tools and platforms are now vying for attention with a range of offerings for different sized users.…