Tag: soc
-
Qualys ROCon: From SOC To Roc, Evolving To Agentic Risk Surface Management
Global sales SVP at Qualys Shawn O’Brien kicked off the company’s Qualys ROCon 2025 event this week in Houston, Texas. Driving straight into an opening keynote to explain what ROCon means today (remember that Qualys traditionally used the term Qualys Security Conference QSC, as the nametag for its symposia and conferences), O’Brien said that.. First…
-
58% of CISOs are boosting AI security budgets
Tags: ai, ciso, conference, control, cybersecurity, data, defense, identity, incident response, india, intelligence, risk, soc, strategy, technology, threat, tool, vulnerabilityFoundryThe takeaway: AI in cybersecurity has reached an inflection point. Whether it’s accelerating incident response, tightening identity management, or simplifying complex threat analysis, enterprises are betting big that AI-enabled tools will be essential for staying secure in an era of AI-enabled attacks.Hear more at the CSO Conference & Awards, October 2022 at the Grand Hyatt…
-
The Defensive Gap: Why Modern SOCs Are Losing Ground and How to Close It
Despite continued investments in SIEMs, threat intelligence platforms, and managed detection services, many Security Operations Centers (SOCs) remain in a defensive position. SOCs are reactive, overstretched, and underprepared. High-profile breaches continue to grab headlines, but they are only what is visible. The reality is that SOC teams are overwhelmed by alert fatigue, organizational friction, and..…
-
Sans 2025 SOC Survey – 42 Prozent der SOCs sind ohne Daten-Strategie
First seen on security-insider.de Jump to article: www.security-insider.de/effektive-strategien-fuer-verwaltung-analyse-von-soc-daten-fehlen-a-d543f6b159491ca9fed0c649ce401a45/
-
How Top SOCs Stay UpDate on Current Threat Landscape
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings. First seen on hackread.com Jump to article: hackread.com/how-top-socs-up-to-date-current-threat-landscape/
-
How Top SOCs Stay UpDate on Current Threat Landscape
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings. First seen on hackread.com Jump to article: hackread.com/how-top-socs-up-to-date-current-threat-landscape/
-
How Top SOCs Stay UpDate on Current Threat Landscape
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings. First seen on hackread.com Jump to article: hackread.com/how-top-socs-up-to-date-current-threat-landscape/
-
Gladinet file sharing zero-day brings patched flaw back from the dead
What to do: All versions of CentreStack and Triofox file sharing servers up to and including 16.7.10368.56560 are vulnerable to CVE-2025-11371.The bad news is that Gladinet has yet to issue a patch for this, which means that for the time being the best customers can do is to apply the recommended mitigation.Luckily, according to Huntress,…
-
KI im SOC – 6 Tipps für die Einführung von KI-Agenten
First seen on security-insider.de Jump to article: www.security-insider.de/multi-agenten-systeme-soc-tipps-a-83ecec807e4199bf1cb622108c70fb20/
-
The AI SOC Stack of 2026: What Sets Top-Tier Platforms Apart?
The SOC of 2026 will no longer be a human-only battlefield. As organizations scale and threats evolve in sophistication and velocity, a new generation of AI-powered agents is reshaping how Security Operations Centers (SOCs) detect, respond, and adapt.But not all AI SOC platforms are created equal.From prompt-dependent copilots to autonomous, multi-agent systems, the current market…
-
Your SOC is tired, AI isn’t
Security teams have discussed AI in the SOC for years, but solid evidence of its impact has been limited. A recent benchmark study by Dropzone puts measurable evidence behind … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/10/dropzone-report-soc-analysts-using-ai/
-
Realm.Security Redefines Security Data Pipelines with AI, Raises $15M to Accelerate Next-Gen SOC Operations
Realm.Security, the company pioneering an AI-native Security Data Pipeline Platform (SDPP), today announced a $15 million Series A funding round led by Jump Capital, with participation from Glasswing Ventures and Accomplice. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/realm-security-redefines-security-data-pipelines-with-ai-raises-15m-to-accelerate-next-gen-soc-operations/
-
Realm.Security Redefines Security Data Pipelines with AI, Raises $15M to Accelerate Next-Gen SOC Operations
Realm.Security, the company pioneering an AI-native Security Data Pipeline Platform (SDPP), today announced a $15 million Series A funding round led by Jump Capital, with participation from Glasswing Ventures and Accomplice. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/realm-security-redefines-security-data-pipelines-with-ai-raises-15m-to-accelerate-next-gen-soc-operations/
-
Realm.Security Redefines Security Data Pipelines with AI, Raises $15M to Accelerate Next-Gen SOC Operations
Realm.Security, the company pioneering an AI-native Security Data Pipeline Platform (SDPP), today announced a $15 million Series A funding round led by Jump Capital, with participation from Glasswing Ventures and Accomplice. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/realm-security-redefines-security-data-pipelines-with-ai-raises-15m-to-accelerate-next-gen-soc-operations/
-
Why SOCs Are Turning to Autonomous Security Operations: It’s Time Automation Worked For You
SOCs use D3’s Morpheus AI to investigate, triage, and respond in seconds. See how it adds 20-100 analyst equivalents. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/why-socs-are-turning-to-autonomous-security-operations-its-time-automation-worked-for-you/
-
How to Close Threat Detection Gaps: Your SOC’s Action Plan
Running a SOC often feels like drowning in alerts. Every morning, dashboards light up with thousands of signals; some urgent, many irrelevant. The job is to find the real threats fast enough to keep cases from piling up, prevent analyst burnout, and maintain client or leadership confidence.The toughest challenges, however, aren’t the alerts that can…
-
Empower Your SOC Teams with Efficient NHIDR
How Can Non-Human Identities Revolutionize Cybersecurity? Where cyber threats increasingly target machine identities, how can organizations adapt their security strategies to manage these Non-Human Identities (NHIs) effectively? NHIs serve as the backbone for robust cybersecurity, enhancing the security posture of diverse sectors like financial services, healthcare, travel, and DevOps. For organizations utilizing cloud environments, effective……
-
Stop Alert Chaos: Context Is the Key to Effective Incident Response
The Problem: Legacy SOCs and Endless Alert NoiseEvery SOC leader knows the feeling: hundreds of alerts pouring in, dashboards lighting up like a slot machine, analysts scrambling to keep pace. The harder they try to scale people or buy new tools, the faster the chaos multiplies. The problem is not just volume; it is the…
-
New Spear-Phishing Attack Deploys DarkCloud Malware to Steal Keystrokes and Credentials
Tags: attack, credentials, cyber, detection, intelligence, malware, phishing, soc, spear-phishing, threatAdversaries don’t work 95 and neither do we. At eSentire, our 24/7 SOCs are staffed with elite threat hunters and cyber analysts who hunt, investigate, contain and respond to threats within minutes. Backed by threat intelligence, tactical threat response and advanced threat analytics from our Threat Response Unit (TRU), eSentire delivers rapid detection and disruption…
-
The State of AI in the SOC 2025 – Insights from Recent Study
Security leaders are embracing AI for triage, detection engineering, and threat hunting as alert volumes and burnout hit breaking points.A comprehensive survey of 282 security leaders at companies across industries reveals a stark reality facing modern Security Operations Centers: alert volumes have reached unsustainable levels, forcing teams to leave critical threats uninvestigated. You can First…
-
Agentic AI in IT security: Where expectations meet reality
Tags: ai, api, automation, cloud, compliance, control, credentials, crowdstrike, cybersecurity, data, detection, finance, framework, gartner, google, governance, infrastructure, injection, metric, phishing, RedTeam, risk, service, siem, skills, soar, soc, software, strategy, technology, threat, tool, trainingIntegration approaches: Add-on vs. standalone: The first decision regarding AI agents is whether to layer them onto existing platforms or to implement standalone frameworks. The add-on model treats agents as extensions to security information and event management (SIEM), security orchestration, automation and response (SOAR), or other security tools, providing quick wins with minimal disruption. Standalone…
-
Agentic AI in IT security: Where expectations meet reality
Tags: ai, api, automation, cloud, compliance, control, credentials, crowdstrike, cybersecurity, data, detection, finance, framework, gartner, google, governance, infrastructure, injection, metric, phishing, RedTeam, risk, service, siem, skills, soar, soc, software, strategy, technology, threat, tool, trainingIntegration approaches: Add-on vs. standalone: The first decision regarding AI agents is whether to layer them onto existing platforms or to implement standalone frameworks. The add-on model treats agents as extensions to security information and event management (SIEM), security orchestration, automation and response (SOAR), or other security tools, providing quick wins with minimal disruption. Standalone…
-
Cyberbit Buys RangeForce to Bolster AI-Driven Cyber Training
Deal Strengthens Cyber Ranges By Uniting AI-Driven Content and Live-Fire Exercises. Cyberbit acquired RangeForce, uniting two leading cyber range platforms to accelerate AI-enabled simulation training for SOC and incident response teams. The combined entity aims to deliver a unified user interface, deeper content catalog and improved cyber readiness metrics for security leaders. First seen on…
-
Cybersecurity Snapshot: CISA Highlights Vulnerability Management Importance in Breach Analysis, as Orgs Are Urged To Patch Cisco Zero-Days
Tags: 2fa, access, advisory, api, attack, authentication, breach, business, cisa, cisco, cloud, control, credentials, crime, cve, cyber, cybersecurity, data, defense, endpoint, exploit, fido, finance, firewall, framework, github, grc, guide, identity, incident response, infrastructure, Internet, ISO-27001, kev, law, lessons-learned, malicious, malware, mfa, mitigation, monitoring, network, open-source, phishing, privacy, ransomware, risk, saas, scam, security-incident, service, soc, software, supply-chain, tactics, threat, update, vpn, vulnerability, vulnerability-management, worm, zero-dayCISA’s takeaways of an agency hack include a call for timely vulnerability patching. Plus, Cisco zero-day bugs are under attack, patch now. Meanwhile, the CSA issued a framework for SaaS security. And get the latest on the npm breach, the ransomware attack that disrupted air travel and more! Here are six things you need to…
-
How agentic AI is changing the SOC
In this Help Net Security video, David Norlin, CTO of Lumifi, explores the role of agentic AI in the security operations center (SOC). He explains what agentic AI is, how it … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/26/agentic-ai-in-cybersecurity-video/
-
Thales Named a Leader in the Data Security Posture Management Market
Tags: access, ai, attack, breach, cloud, compliance, container, control, cybersecurity, data, data-breach, defense, detection, encryption, finance, GDPR, google, Hardware, identity, intelligence, law, microsoft, monitoring, network, office, privacy, regulation, resilience, risk, soc, software, strategy, technology, threat, toolThales Named a Leader in the Data Security Posture Management Market madhav Thu, 09/25/2025 – 06:15 Most breaches begin with the same blind spot: organizations don’t know precisely what data they hold, or how exposed it is. Value and risk sit side by side. Data Security Todd Moore – Global VP of Data Security Products…
-
Evolved PXA Stealer wraps PureRAT in multi-layer obfuscation
Telegram and the Vietnamese infrastructure led to attribution: Metadata within exfiltrated ZIP archives pointed to @LoneNone, a Telegram handle previously associated with PXA Stealer. That same alias had appeared in earlier Cisco and SentinelOne reporting, and Validin also tied PureRAT infrastructure to Vietnamese actors, researchers noted.James Northey, SOC analyst and lead author of the report,…
-
Building a stronger SOC through AI augmentation
In this Help Net Security interview, Tim Bramble, Director of Threat Detection and Response at OpenText, discusses how SOC teams are gaining value from AI in detecting and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/24/tim-bramble-opentext-ai-soc-value/