Tag: soc
-
BSidesSF 2025: One SOC, The Whole SOC, and Nothing But The SOC, So Help Me
Creator, Author and Presenter: Carson Zimmerman Our deep appreciation to Security BSides – San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the organization’s YouTube…
-
Munich Reinsurance unites global security teams to boost resilience, cut costs
Tags: access, best-practice, business, cloud, conference, cyber, cybersecurity, defense, detection, edr, group, incident response, intelligence, jobs, lessons-learned, metric, network, resilience, risk, siem, skills, soc, strategy, tactics, threat, toolConsolidate functions into one incident response team, one threat intelligence team, and one threat-hunting team serving all Munich brands around the clock.Improve team capabilities by blending the strongest skills of each team into more mature, well-rounded functions.Reduce redundancies in responsibilities, tools, and processes to cut costs.To reach these goals, Munich deployed various tactics, including:Combining best…
-
How Exposure Management Has Helped Tenable Reduce Risk and Align with the Business
Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In the second of a two-part blog series, Tenable CSO Robert Huber shares how exposure management has helped him reduce risk and better align with the business. You can read the entire Exposure…
-
How Exposure Management Has Helped Tenable Reduce Risk and Align with the Business
Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In the second of a two-part blog series, Tenable CSO Robert Huber shares how exposure management has helped him reduce risk and better align with the business. You can read the entire Exposure…
-
How AI is reshaping cybersecurity operations
Tags: access, ai, attack, business, ciso, cloud, control, cyber, cybersecurity, data, defense, detection, encryption, finance, gartner, governance, guide, hacker, infrastructure, intelligence, jobs, malware, microsoft, monitoring, phishing, regulation, resilience, risk, sans, service, skills, soc, strategy, supply-chain, technology, threat, tool, training, updateBecause AI can perform tasks at speeds that supersede human capacity, it exponentially scales the amount of work that a cybersecurity function can do, says Rob T. Lee, chief of research for AI and emerging threats and head of faculty at SANS Institute.Moreover, AI excels at doing repetitive tasks near perfectly every time, so it…
-
AI To Handle 60% of SOC Work By 2028. It Had Better Be Robust.
If you’re trying to separate real AI-SOC capability from hype, you’ll love this: we’re making the 2025 AI SOC Market Landscape report available as a download. Produced by Software Analyst Cyber Research (SACR), it’s the most comprehensive snapshot of this emerging category. It features 13 vendors, architectural guidance, risk frameworks, implementation roadmaps, and a capabilities……
-
Empower Your SOC Team with Enhanced NHI Management
Could You Revolutionize Your Cybersecurity Strategy with NHI Management? Raising the bar in cybersecurity defense has become a critical concern for organizations operating. One area that has gained traction in this regard is Non-Human Identities (NHIs) and Secrets Management. This innovative approach enables companies to prioritize security without compromising the agility and flexibility that modern……
-
Google spins up agentic SOC to speed up incident management
Google Cloud elaborates on its vision for securing artificial intelligence unveiling new protections and capabilities across its product suite. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366629693/Google-spins-up-agentic-SOC-to-speed-up-incident-management
-
7 signs it’s time for a managed security service provider
Tags: access, best-practice, breach, business, ciso, compliance, cyber, cybersecurity, data, data-breach, defense, detection, edr, incident, incident response, intelligence, mitigation, monitoring, mssp, ransomware, risk, service, siem, soc, software, supply-chain, threat, tool, update, vulnerability, vulnerability-management2. Your security team is wasting time addressing and evaluating alerts: When your SOC team is ignoring 300 daily alerts and manually triaging what should be automated, that’s your cue to consider an MSSP, says Toby Basalla, founder and principal data consultant at data consulting firm Synthelize.When confusion reigns, who in the SOC team knows…
-
Agentic AI promises a cybersecurity revolution, with asterisks
Tags: ai, api, authentication, ceo, ciso, cloud, control, cybersecurity, data, endpoint, infrastructure, jobs, LLM, open-source, openai, risk, service, soc, software, supply-chain, technology, tool, update, vulnerabilityTrust, transparency, and moving slowly are crucial: Like all technologies, and perhaps more dramatically than most, agentic AI carries both risks and benefits. One obvious risk of AI agents is that, like most LLM models, they will hallucinate or make errors that could cause problems.”If you want to remove or give agency to a platform…
-
How security teams are putting AI to work right now
AI is moving from proof-of-concept into everyday security operations. In many SOCs, it is now used to cut down alert noise, guide analysts during investigations, and speed up … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/18/ai-in-security-operations/
-
Empowering SOC Teams with Advanced NHIDR Solutions
Can Non-Human Identity and Data Rights Solutions Revolutionize Your Cybersecurity Protocol? Non-Human Identities (NHIs) are proving to be fundamental. When data breaches escalate both in frequency and impact, a renewed focus has shifted towards robust security measures where NHIs and Secrets Security Management take center stage. NHI management has emerged as a crucial, yet underrepresented……
-
Empower Teams with Effective IAM Strategies
Why is Secure NHI Management Critical for Successful Team Empowerment? How often does secure Non-Human Identity (NHI) management come to mind? Considering the increasing reliance on cloud-based solutions across industries, including healthcare, finance, and travel, it’s clear that cybersecurity should play a significant part in empowering teams. For DevOps and SOC teams, especially, the task……
-
Elastic AI SOC Engine (EASE) bekämpft Alarmmüdigkeit und beschleunigt Analysen
Mit agentenlosen Integrationen und der Elastic Attack Discovery hilft EASE, Alarme automatisch zu korrelieren, Prioritäten zu setzen und so versteckte Angriffe schneller zu erkennen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/elastic-ai-soc-engine-ease-bekaempft-alarmmuedigkeit-und-beschleunigt-analysen/a41658/
-
Elastic AI SOC Engine (EASE) bekämpft Alarmmüdigkeit und beschleunigt Analysen
Mit agentenlosen Integrationen und der Elastic Attack Discovery hilft EASE, Alarme automatisch zu korrelieren, Prioritäten zu setzen und so versteckte Angriffe schneller zu erkennen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/elastic-ai-soc-engine-ease-bekaempft-alarmmuedigkeit-und-beschleunigt-analysen/a41658/
-
BSidesSF 2025: AI’s Bitter Lesson For SOCs: Let Machines Be Machines
Creators/Authors/Presenters: Jackie Bow, Peter Sanford Our deep appreciation to Security BSides – San Francisco and the Creators/Authors/Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the organization’s YouTube channel. Additionally, the organization…
-
ReVault! When your SoC turns against you”¦ deep dive edition
Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/revault-when-your-soc-turns-against-you-2/
-
Stop Chasing AI Agents. Build a Persistent, Autonomous SOC Instead
AI agents promise automation but deliver chaos. Morpheus gives your SOC a persistent, auditable core, resolving alerts faster, with fewer escalations and no sprawl. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/stop-chasing-ai-agents-build-a-persistent-autonomous-soc-instead/
-
Stop Chasing AI Agents. Build a Persistent, Autonomous SOC Instead
AI agents promise automation but deliver chaos. Morpheus gives your SOC a persistent, auditable core, resolving alerts faster, with fewer escalations and no sprawl. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/stop-chasing-ai-agents-build-a-persistent-autonomous-soc-instead/
-
13 Produkt-Highlights der Black Hat USA
Tags: access, ai, api, application-security, business, chatgpt, cisco, cloud, compliance, credentials, crowdstrike, cybersecurity, data, detection, google, governance, Hardware, identity, leak, LLM, malware, marketplace, microsoft, monitoring, network, openai, phishing, risk, saas, service, soc, threat, tool, usa, vulnerability, zero-trustDas Mandalay Bay Convention Center wird zur Black Hat USA zum Cybersecurity-Hub 2025 lag der Fokus dabei insbesondere auf Agentic und Generative AI.Zur Black-Hat-Konferenz haben sich auch 2025 Tausende von Sicherheitsexperten in Las Vegas zusammengefunden, um sich über die neuesten Entwicklungen im Bereich Cybersecurity zu informieren und auszutauschen. Der thematische Fokus lag dabei in erster…
-
New infosec products of the week: August 8, 2025
Here’s a look at the most interesting products from the past week, featuring releases from Black Kite, Descope, Elastic, ExtraHop, LastPass, and Riverbed. Elastic AI SOC … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/08/new-infosec-products-of-the-week-august-8-2025/
-
Black Hat 2025 Recap: A look at new offerings announced at the show
Tags: access, ai, api, application-security, automation, chatgpt, cisco, cloud, compliance, control, crowdstrike, dark-web, data, detection, google, governance, group, identity, intelligence, LLM, malware, microsoft, monitoring, network, openai, password, risk, saas, service, soc, software, threat, tool, vulnerability, zero-trustSnyk secures AI from inception: Snyk’s new platform capability, Secure at Inception, includes real-time security scanning that begins at the moment of code generation or execution. It offers visibility into generative AI, agentic, and model context protocol (MCP) components in software, and also features a new, experimental scanner for detecting AI-specific MCP vulnerabilities.Secure AI Inception…
-
Could agentic AI save us from the cybercrisis?
Many hands make light work in the SOC First seen on theregister.com Jump to article: www.theregister.com/2025/08/07/could_agentic_ai_save/
-
Project Ire: Microsoft’s autonomous AI agent that can reverse engineer malware
Tags: ai, attack, ceo, cloud, compliance, computing, control, cybersecurity, defense, detection, exploit, finance, governance, government, healthcare, infrastructure, LLM, malicious, malware, microsoft, programming, risk, service, siem, soar, soc, software, threat, tool, trainingReal-world testing: In real-world tests on 4,000 “hard-target” files that had stumped automated tools, Project Ire flagged 9 malicious files out of 10 files correctly, and a low 4% false positive rate.This makes Project Ire suitable for organizations that operate in high-risk, high-volume, and time-sensitive environments where traditional human-based threat triage is insufficient.Rawat added that…
-
Buzzword-Dschungel – MDR oder SOC was brauchen Unternehmen wirklich?
Tags: socFirst seen on security-insider.de Jump to article: www.security-insider.de/managed-detection-response-cyberbedrohungen-a-6aada605d80cc692358255c8ca1d6dd3/
-
BSidesSF 2025: Third-Party Risk Management: SOC 2s, Security Questionnaires, And Psychosis
Creator/Author/Presenter: Eleanor Mount Our deep appreciation to Security BSides – San Francisco and the Creators/Authors/Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the organization’s YouTube channel. Additionally, the organization is welcoming…
-
A Day in the Life of A SOC Operations Manager Prioritizing High-Risk Incidents to Improve SOC Efficiency
A Day in the Life of A SOC Operations Manager – Prioritizing High-Risk Incidents to Improve SOC Efficiency madhav Tue, 08/05/2025 – 05:14 Imagine the pulse of a Security Operations Center (SOC) where analysts, managers, and leaders navigate a whirlwind of incidents daily, with the stakes higher than ever. Picture them faced with an avalanche…
-
ReVault! When your SoC turns against you”¦
Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/revault-when-your-soc-turns-against-you/