Tag: soc
-
SOC 2 + AI Controls: Strengthen Reports with Risk Audits
In 2026, organizations integrating artificial intelligence into core operations face a critical gap: traditional SOC 2 audits often overlook the unique risks introduced by AI systems, leaving reports incomplete and compliance efforts vulnerable to regulatory scrutiny. By expanding SOC 2 assessments with dedicated AI controls and integrated risk audits, firms can produce stronger, more defensible”¦…
-
NIST Frameworks and SOC 2 Reporting via Continuum GRC Services
As organizations navigate an increasingly complex regulatory environment in 2026, integrating NIST frameworks with SOC 2 reporting offers a strategic advantage that reduces audit fatigue while strengthening overall governance, risk, and compliance postures. Continuum GRC enables this interoperability through unified control mapping that aligns NIST SP 800-53, NIST SP 800-171 Rev 3, and CMMC 2.0″¦…
-
Definition SOC – Was ist ein Security Operations Center?
Tags: socFirst seen on security-insider.de Jump to article: www.security-insider.de/was-ist-ein-security-operations-center-soc-a-f0f5aea695442be9e776970c5eee3e3a/
-
A hollowed out data layer is making CISOs fly blind into AI attacks
The security industry is currently transitioning to an era where both offense and defense are AI-led, and every SOC operates at machine speed. However, what most CISOs have … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/18/siem-data-blind-spots-mapping/
-
Agentic AI for Cyber Defenders: What Security Teams Built at Black Hat USA 2026
Tags: ai, automation, conference, control, credentials, cve, cyber, cybersecurity, data, data-breach, defense, detection, exploit, flaw, group, iam, intelligence, ISO-27001, mitigation, network, nvidia, offense, open-source, RedTeam, risk, skills, soc, technology, threat, tool, usa, vulnerabilityAgentic AI armed attackers first, but it also put real building power in defenders’ hands. Here’s what security practitioners built in two days at Black Hat USA 2026, and how the CyberAgents Exchange keeps that work compounding long after the event. Key takeaways Building defensive cybersecurity tooling no longer requires a developer. Agentic tooling drove…
-
MSSPs get a better starting point for agentic SOC investigations
First seen on scworld.com Jump to article: www.scworld.com/news/mssps-get-a-better-starting-point-for-agentic-soc-investigations
-
SOC 2 + SSO Checklist for Legal Tech SaaS Selling to Law Firms
A SOC 2 SSO checklist for legal tech SaaS: map CC6 criteria to SAML and SCIM controls, gather evidence, and pass law firm security reviews faster. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/soc-2-sso-checklist-for-legal-tech-saas-selling-to-law-firms/
-
Kali365 Exploits Microsoft Device Login to Access US Corporate Data
Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks. First seen on hackread.com Jump to article: hackread.com/kali365-exploit-microsoft-device-login-access-us-data/
-
The Best Agentic SOC for Microsoft Sentinel in 2026 (and Where Security Copilot Fits)
The 8 best agentic SOC platforms for Microsoft Sentinel in 2026, compared. What Security Copilot’s agents do today, GA versus preview, and where the gap is. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/the-best-agentic-soc-for-microsoft-sentinel-in-2026-and-where-security-copilot-fits/
-
FOMO in the SOC: Where AI Platforms like Claude Actually Fit
AI is moving incredibly fast, and every security leader is feeling the pressure to keep up.AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation has evolved from whether AI belongs in the SOC, to where each type of AI delivers…
-
MSSP Market News: AI security platforms take on more of the SOC ahead of Black Hat 2026
First seen on scworld.com Jump to article: www.scworld.com/news/mssp-market-news-ai-security-platforms-take-on-more-of-the-soc-ahead-of-black-hat-2026
-
Two Tools, Two Bills: The Consolidation Hiding In Your SOC Budget
Most SOCs pay two bills, a SOAR and an alert-automation tool, to do one job. Here is the cleanest consolidation in the 2026 stack, and how the math works. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/07/two-tools-two-bills-the-consolidation-hiding-in-your-soc-budget/
-
AI-Enhanced, Human-Validated: The New Standard for Public Sector SOCs
The false choice Somewhere between the vendor pitch and the budget meeting, public sector security teams are being handed a choice. Keep doing everything by hand, and accept that you will always be slower than the people attacking you. Or hand the keys to an AI, and accept that you won’t always know what […]…
-
Cryptominer Abuses Linux PAM to Hide From SOC Analysts
Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/
-
7AI Launches First Formal Channel Program To Drive Agentic SOC With Partners
7AI unveiled its first formal channel program as the startup looks to double down on scaling through partners”, building on existing strong demand for its agentic SOC (Security Operations Center) platform, the company told CRN exclusively. First seen on crn.com Jump to article: www.crn.com/news/security/2026/7ai-launches-first-formal-channel-program-to-drive-agentic-soc-with-partners
-
Intezer’s Org Brain brings continuous learning to the SOC
Tags: socFirst seen on scworld.com Jump to article: www.scworld.com/news/intezers-org-brain-brings-continuous-learning-to-the-soc
-
Why Modern SOCs Need Multi-Layered Detections
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing defenses. Most intrusions now bypass endpoint and malware-based detection entirely.The CrowdStrike Global Threat Report estimates around 79% of attacks are malware-free, as threat actors rely on First seen on thehackernews.com…
-
An AI SOC Evaluation Guide for Security Leaders
Choosing an AI SOC platform requires understanding how it will perform in your own environment, not just during an evaluation. Prophet Security shares a practical framework for assessing AI SOC solutions, including how to validate accuracy, operating models, long-term reliability, and production readiness. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/an-ai-soc-evaluation-guide-for-security-leaders/
-
More alerts are making your team slower, and an outcome-based SOC fixes that
In this Help Net Security video, Thom Langford, EMEA CTO, Rapid7, explains why piling on more security alerts makes a SOC slower to respond. Attackers log in with stolen … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/20/outcome-based-soc-video/
-
Attackers Distribute Password Attacks Across Fictional OAuth Apps to Evade SOC Alerts
Attackers are increasingly abusing spoofed OAuth application identifiers to enumerate Microsoft Entra ID accounts, test credentials, and fragment authentication activity across hundreds of thousands or millions of fictional applications. The technique exploits how Entra ID processes the client_id parameter in OAuth authentication requests. Every registered OAuth application is assigned a globally unique application identifier, and…
-
ANY.RUN Integrates Threat Intelligence and Interactive Sandbox to Streamline SOC Workflows
Security Operations Centers (SOCs) often encounter challenges that go beyond just managing alert volume. Each alert necessitates that analysts validate indicators, investigate behaviors, assess scope, decide on escalation paths, and create detections to prevent future occurrences. When these tasks rely on separate tools, crucial evidence can be lost during transitions, leading analysts to enrich the…
-
Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations
Torrance, California, USA, July 13th, 2026, CyberNewswire Criminal IP, the cyber threat intelligence search engine and attack surface management platform, today announced a new partnership and integration with Torq, the established agentic security operations leader. The partnership integrates Criminal IP’s decision-ready threat intelligence with the Torq AI SOC Platform that helps security teams triage, investigate,…
-
Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations
Torrance, California, USA, 13th July 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/torq-and-criminal-ip-partner-to-deliver-decision-ready-threat-intelligence-for-autonomous-soc-operations/
-
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as we mapped…
-
Agentic MXDR can handle most SOC investigations autonomously: CyberProof
Tags: socFirst seen on scworld.com Jump to article: www.scworld.com/news/agentic-mxdr-can-handle-most-soc-investigations-autonomously-cyberproof
-
How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions
Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors are all saying the same thing. But behind the identical label sit very different products, from chat assistants bolted onto a legacy SIEM to agent platforms that run detection, triage, investigation, and response on their own data…
-
How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions
Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors are all saying the same thing. But behind the identical label sit very different products, from chat assistants bolted onto a legacy SIEM to agent platforms that run detection, triage, investigation, and response on their own data…
-
QBS adds Dropzone AI to bolster security portfolio
Distributor gains exclusive status across EMEA for the AI-driven SOC solution specialist First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366645321/QBS-adds-Dropzone-AI-to-bolster-security-portfolio
-
KI-Agenten im SOC: Alle haben Amnesie
Warum die nächste Stufe der Sicherheitsautomatisierung am Gedächtnis scheitert. Adaptiert von einem Artikel von Nash Borges, Vice President of Engineering and Data Science, Sophos. Die nächste Stufe der Sicherheitsautomatisierung scheitert aktuell an einem überraschend simplen Hindernis: Erinnerung. Wie sich das anfühlt, zeigt ein Film. In Christopher Nolans Memento aus dem Jahr 2000 leidet… First seen…
-
SentinelOne brings Purple AI agentic investigation Into the SOC
First seen on scworld.com Jump to article: www.scworld.com/news/sentinelone-brings-purple-ai-agentic-investigation-into-the-soc