Tag: soc
-
Authentication is broken: Here’s how security leaders can actually fix it
Tags: access, attack, authentication, backup, business, communications, control, credentials, cryptography, data, exploit, fido, firmware, Hardware, healthcare, identity, login, mfa, microsoft, okta, passkey, privacy, resilience, risk, soc, technology, update, windowsSector snapshots: Where it breaks (and why that matters): Healthcare. Clinicians need tap and go speed with zero tolerance for downtime. One large hospital attempted to pair advanced HID SEOS credentials, which use privacy-preserving randomized IDs, with a clinical SSO platform that expects static IDs for user recognition. This architectural mismatch forced a choice between…
-
7 ways to improve your business resilience with backup and recovery
Tags: attack, automation, backup, business, cloud, compliance, control, cyber, data, dns, HIPAA, identity, malware, metric, network, PCI, ransomware, resilience, risk, service, soc, threat, vulnerability2. Ensure off-site backup copies : Local backups are fast, but they are also vulnerable to the same physical disasters and ransomware attacks that hit your primary servers. If your production environment and your backups are on the same network segment without air-gapping, a single compromise becomes a total extinction event. The Fix: Adopt a 3-2-1 strategy (3 total copies of data, 2 different media…
-
5 Steps to break free from alert fatigue and build resilient security operations
2. Prioritize outcomes over ticket volume : Stop focusing on how many alerts are cleared. This may be a metric for a better understanding of where automation or headcount are necessary but prioritize outcomes. Instead, the right questions are: How quickly did you contain a threat? Did we disrupt business operations or keep recovery swift and effective? A practical, outcome-driven SOC measures: Dwell time: How long before a threat was neutralized? Mean Time to Contain: How quickly…
-
6 critical mistakes that undermine cyber resilience (and how to fix them)
Tags: attack, automation, backup, best-practice, business, compliance, cyber, cybersecurity, data, detection, edr, endpoint, guide, identity, intelligence, malware, metric, network, ransomware, resilience, risk, soc, strategy, threat, tool, update, vulnerabilityGuide to Managing Strong Personalities During a Cybercrisis. Mistake 2: Fragmented asset and risk views: Fragmented asset and risk views make it difficult for teams to understand what is actually in their environment and where the most pressing exposures reside. When devices, configurations, and identity data live in separate tools or are maintained inconsistently, gaps…
-
6 metrics IT leaders can’t afford to ignore for business resilience
Tags: access, attack, automation, awareness, backup, business, cloud, compliance, credentials, cyber, cybersecurity, data, detection, endpoint, identity, incident response, metric, monitoring, network, resilience, risk, soar, soc, theft, threat, tool, update, vulnerability2. Mean time to respond (MTTR): From triage to containment : It’s not enough to spot threats”, you have to contain them fast. MTTR tracks how quickly your team can isolate and neutralize incidents. Integrated SOAR (Security Orchestration, Automation, and Response) workflows now drive a 500% year-over-year increase in orchestrated alert response actions, according to our latest SOC report. The difference? Teams leveraging automation have moved from after-the-fact…
-
5 critical steps to achieve business resilience in cybersecurity
Tags: access, ai, attack, authentication, automation, backup, breach, business, communications, control, credentials, cybersecurity, data, defense, detection, endpoint, identity, malicious, mfa, msp, password, ransomware, resilience, soc, threat, tool, updateLooking for end-to-end coverage of your environment? Check out N-able Unified Security Solutions. 2. Transition from manual to automated response : SOC teams can’t keep up with the flood of alerts”, N-able handled 2 alerts per minute on average in 2025. That’s why automation and Security Orchestration, Automation and Response (SOAR) saw a 500% YoY surge”, almost one in four responses are now…
-
12 Agentic AI Startups To Watch In 2026
Agentic AI startups to watch in 2026 include early-stage vendors that showcased tools for agentic identity security, AI agent governance and agentic SOC platforms at RSAC. First seen on crn.com Jump to article: www.crn.com/news/security/2026/12-agentic-ai-startups-to-watch-in-2026
-
12 cyber industry trends revealed at RSAC 2026
Tags: access, ai, application-security, authentication, awareness, business, ciso, cloud, control, cyber, cybersecurity, data, deep-fake, defense, detection, edr, endpoint, firewall, gartner, governance, identity, infrastructure, insurance, metric, microsoft, monitoring, mssp, phishing, programming, risk, risk-management, service, siem, skills, soc, software, startup, technology, threat, tool, trainingLegacy security vendors have the inside track on AI, for now: As far as AI technology consumption for cybersecurity, most CISOs I spoke with were open-minded while leaning toward their existing vendors, at least in the short term. This may buy legacy security vendors a bit, but not much time.Remember what happened in the cloud…
-
The SOC Analyst Was Never Meant to Be a Ticket Processor. Autonomous Triage Proves It.
71% of SOC analysts report burnout and 67% of alerts go uninvestigated. The triage model is broken. Here’s how AI-autonomous platforms are transforming the analyst role from reactive ticket processor to strategic security advisor. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/the-soc-analyst-was-never-meant-to-be-a-ticket-processor-autonomous-triage-proves-it/
-
The $250K Single Point of Failure Hiding in Every SOC
One architect, 200 static playbooks, zero backup plan. The real consolidation problem isn’t tool count, it’s architectural dependency. Here’s what replaces it. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/the-250k-single-point-of-failure-hiding-in-every-soc/
-
5 Questions That Expose Whether an “Agentic SOC” Actually Works in Production
Agentic SOC is the hottest label in cybersecurity AI. Before you evaluate any platform using it, ask these five questions, and understand why architecture matters more than the name. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/5-questions-that-expose-whether-an-agentic-soc-actually-works-in-production/
-
5 Questions That Expose Whether an “Agentic SOC” Actually Works in Production
Agentic SOC is the hottest label in cybersecurity AI. Before you evaluate any platform using it, ask these five questions, and understand why architecture matters more than the name. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/5-questions-that-expose-whether-an-agentic-soc-actually-works-in-production/
-
Arctic Wolf CEO Nick Schneider On Delivering ‘Superior’ Security With New Agentic SOC Platform
The debut by Arctic Wolf of what it’s calling the “world’s largest agentic SOC” (Security Operations Center) will deliver massive opportunities for MSPs and other partners as the company aims for rapid delivery of improved security outcomes using AI agents, CEO Nick Schneider tells CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2026/arctic-wolf-ceo-nick-schneider-on-delivering-superior-security-with-new-agentic-soc-platform
-
9 ways CISOs can combat AI hallucinations
Tags: access, ai, breach, ciso, compliance, control, corporate, cybersecurity, data, defense, encryption, flaw, framework, GDPR, governance, identity, metric, penetration-testing, regulation, risk, soc, tool, trainingTreat AI outputs as drafts, not finished products: One of the biggest risks is over-trusting AI, according to security experts. Coté says her organization changed its policy so AI-generated content cannot go straight into compliance documentation without a human review.”The moment your team starts treating an AI-generated answer as a finished work product, you have…
-
AI SOC Firm Tenex Raises $250M to Drive Faster Response
Founder and CEO Eric Foster Wants to Reduce Dwell Time and Scale Engineering Teams. Tenex plans to use its $250 million Series B funding to expand its AI-driven SOC platform and hire hundreds of engineers. The company aims to improve alert coverage, automate response and reduce attacker dwell time while maintaining human oversight for complex…
-
Beyond Alert Fatigue: What European SOCs Actually Struggle With
Results from a Survey among SOC professionals from the region on what is the state of AI in SecOps in Europe First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/beyond-alert-fatigue-what-european-socs-actually-struggle-with/
-
How to Evaluate AI SOC Agents: 7 Questions Gartner Says You Should Be Asking
AI SOC agents can reduce alert fatigue, but most teams fail to measure real outcomes. Prophet Security breaks down Gartner’s questions for evaluating AI SOC agents and separating real impact from hype. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/how-to-evaluate-ai-soc-agents-7-questions-gartner-says-you-should-be-asking/
-
3 SOC Process Fixes That Unlock Tier 1 Productivity
What is really slowing Tier 1 down: the threat itself or the process around it? In many SOCs, the biggest delays do not come from the threat alone. They come from fragmented workflows, manual triage steps, and limited visibility early in the investigation. Fixing those process gaps can help Tier 1 move faster, reduce unnecessary…
-
GPT Can’t Trace an Attack Chain. A Purpose-Built Cybersecurity LLM Can.
A purpose-built cybersecurity LLM is trained on security data from the ground up, not a general-purpose model with a security prompt. Here’s why the architecture matters for SOC operations. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/gpt-cant-trace-an-attack-chain-a-purpose-built-cybersecurity-llm-can/
-
Arctic Wolf und Wiz helfen gemeinsam Unternehmen Cloud-Bedrohungen zu verstehen und abzuschwächen
Arctic Wolf und Wiz (nun Teil von Google-Cloud) geben eine Partnerschaft bekannt, die eine neue Integration zwischen Wiz und der <> umfasst. Die Partnerschaft folgt auf die jüngsten Ankündigungen von Arctic Wolf zur Einführung des sofort einsatzbereiten Aurora-Agentic-SOC sowie der Aurora-Superintelligence-Platform, die Unternehmen dabei unterstützen, vertrauenswürdige KI in Security-Operations zu operationalisieren. […] First seen on…
-
AI SOC vendors are selling a future that production deployments haven’t reached yet
Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/26/future-ai-soc-vendor-claims/
-
Seceon Wins Four Global InfoSec Awards at RSA 2026 and Launches ADMP and SeraAI 2.0 Autonomous SOC
Open Threat Management platform sweeps four award categories at RSA Conference while announcing ADMP and SeraAI 2.0. SAN FRANCISCO, March 24, 2026 /PRNewswire/, Seceon Inc., developer of the Open Threat Management (OTM) Platform, today announced four wins at Global InfoSec Awards 2026, presented at RSA Conference. The awards span MSSP enablement, critical infrastructure protection, First…
-
Inside RSA 2026: Security Leaders Grapple With AI’s Growing Role and Risks
RSA Conference 2026 spotlights AI in cybersecurity, from SOC automation to governance challenges, as experts weigh trust, control, and risk. The post Inside RSA 2026: Security Leaders Grapple With AI’s Growing Role and Risks appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-rsa-conference-2026-ai-cybersecurity-soc-governance/
-
Obfuscated VBS and PNG Loaders Power New Open Directory Malware Campaign with RAT Payloads
A sophisticated, multi-stage delivery framework leveraging obfuscated Visual Basic Script (VBS) files, fileless PowerShell loaders, and payloads hidden within PNG images. The activity was initially detected by LevelBlue’s Managed Detection and Response (MDR) SOC through a SentinelOne alert involving a suspicious VBS file. The file, identified as Name_File.vbs, was located in a public downloads directory…
-
The Best AI SOC Platforms 2026: Comprehensive Comparison Guide
Comprehensive guide to the best AI SOC platforms in 2026. Compare autonomous SOC solutions, pricing, integrations, and key differentiators. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/the-best-ai-soc-platforms-2026-comprehensive-comparison-guide/
-
Sumo Logic Expands Dojo AI With SOC Analyst Agent That Recommends Actions, Not Just Alerts
Sumo Logic is pushing its Dojo AI platform further into decision territory at RSAC 2026, announcing expanded AI agent capabilities that go beyond surfacing context to actually recommending what analysts should do next. The company’s new SOC Analyst Agent, now in preview, addresses a gap that has frustrated security teams for years: traditional SIEMs are..…
-
AiStrike Launches Continuous Detection Engineering to Fix Alert Noise at the Source
Alert fatigue is a persistent problem in security operations, but AiStrike is framing it as a symptom of a deeper issue: poor detection quality. At RSAC 2026, the company announced Continuous Detection Engineering, a capability designed to shift SOC teams from reactive alert triage toward ongoing, intelligence-driven detection optimization. The company’s own analysis across enterprise..…