Tag: threat detection
194 articles
OpenAI Model Aids in Detection of Insider Threat
Meet the AI-powered insider threat detection model that's helping companies like OpenAI catch security threats - in this case, an engineer allegedly hiding a recording device in a conference room. By flagging suspicious activity, AI can be a game-changer in the fight against sophisticated security threats.
AI Decision Models Transform Alert Triage in Cybersecurity
The game-changing arrival of decision-only AI models is revolutionizing alert triage in cybersecurity, particularly with a staggering 25 million alerts triaged across a vendor's customer base in 2025. This is ushering in a new era of operational efficiency with models like Jev, OpenAI Decisions, and cribl-decision leading the charge.
AI Augments SOC Analyst Capacity, Raises Skill Development Concerns
As AI takes on more tasks, security operations center (SOC) analysts are gaining a boost in capacity and more time to tackle complex work - but this shift also raises important questions about skill development and trust in AI. With nearly half of respondents citing greater capacity as a top impact of AI, it's clear that analysts are getting a productivity lift.
Identity Telemetry Bolsters Defense Against Escalating Threats
As organizations expand their cloud presence and connect with more external accounts, traditional identity controls - like periodic reviews and static role definitions - simply aren't enough to keep pace with escalating threats. A proactive approach requires continuous, real-time awareness that only a unified platform with identity governance and event-level telemetry can provide.
Researchers Intercept AliExpress Phishing Domains Before Activation
EfficientIP Research Labs swooped in to stop a phishing scam, intercepting 10 AliExpress domains before they could be used to trick unsuspecting victims. The domains, tracked from June 9 to July 2, were part of a sophisticated phishing operation that was thankfully shut down before activation.
Network Security Integrates Mainstream
The network is the ultimate security game-changer, providing a rich source of intelligence and a strategic defense point where every user, device, and threat can be identified, verified, and contained. By leveraging its visibility and enforcement capabilities, the network can transform from passive plumbing to a proactive security powerhouse.
Security Teams Struggle to Connect Dots in Cross-Environment Attacks
Attacks are getting more complex, with 43% of incidents spreading across four or more environments - and in some cases, as many as eight. Security teams struggle to piece together these cross-environment attacks, making it crucial to connect the dots between disparate signals.
CISA Promotes Decoys to Detect Breaches
Want to catch cyber attackers in the act? Planting decoy files, accounts, and credentials inside your network can expose machine-driven threats and help you detect breaches before they cause harm.
Defense Cyber Spending Poised to Double by 2031
Get ready for a surge in defense cyber spending - it's expected to nearly double from $14.99 billion in 2026 to a whopping $28.75 billion by 2031. This dramatic growth is driven by increasing threats, a reliance on connected tech, and a new focus on cyber warfare capabilities.
AI Adoption Overwhelms Security Operations with Rising False Alerts
The surge in AI adoption is sending shockwaves through security operations, with AI-related alerts skyrocketing 685% in just a few months - and overwhelming teams with false alarms. This tidal wave of activity is clogging up systems, with nearly 73,000 AI-related alerts pouring in out of 16.9 million total SOC alerts.
Securing Enterprise AI Requires Lifecycle Approach
The AI revolution is here, with nearly a third of organizations already leveraging AI for threat detection and incident response, and 63% expecting full integration by 2027 - but a staggering 73% of IT security leaders admit their organization wouldn't be ready for a major cyberattack. As AI adoption accelerates, the gap between usage and security readiness is growing alarmingly.
Security Leaders Warn of Evolving Insider Threats
Insiders pose a uniquely potent threat because they already have the keys to the kingdom - and traditional defenses often miss the mark by relying on alerts that don't account for the devastating impact of trusted accounts gone rogue. To stay ahead, defenders must validate their readiness against insider threats by asking tough questions about access, escalation, and lateral movement.
CISA Red Team Tests Expose Organizational Vulnerabilities
CISA's red team tests revealed some eye-opening vulnerabilities, with the team slipping past security operations centers undetected, gaining access to workstations, escalating privileges, and moving freely between systems. This simulated cyber attack exposed weaknesses in critical infrastructure organizations, highlighting areas for improvement in detecting and responding to threats.
AI-Powered SOCs Disrupt Traditional Alert Queue Model
The traditional Security Operations Center (SOC) model is broken, relying on an outdated alert queue that leaves most threats uninvestigated. AI-powered SOCs are changing the game with a new architecture that uses software agents to transform the queue into a continuous investigation engine.
AI Platforms Shine in SOCs with Clear Roles
Discover how AI platforms are revolutionizing Security Operations Centers (SOCs) by taking on high-level roles and freeing teams to focus on critical threats. By integrating with existing security tools, these platforms enable teams to efficiently sift through millions of alerts and catch potential threats that might otherwise fly under the radar.
Kaspersky's Network Anomaly Detection Exposes Stealthy Attacks
Stay one step ahead of sneaky attackers with Network Anomaly Detection, a powerful tool that uncovers stealthy threats like Kerberoasting and DNS tunneling that often evade signature-based security tools. By spotting unusual network activity, you can shut down hidden attacks before they cause damage.
Okta Bolsters Identity Security with Permiso Acquisition
Okta is taking identity security to the next level with its acquisition of Permiso Security, bringing together cutting-edge threat detection and response capabilities with its existing identity stack to provide unparalleled protection. This game-changing move will enable Okta to spot and respond to risks that emerge after users, machines, or AI-driven agents have authenticated.
SIEM Gaps Expose 40% of Attacks
A whopping 40% of attacks slip through undetected due to glaring gaps in Security Information and Event Management (SIEM) systems, leaving organizations alarmingly exposed.
Microsoft Unveils AI-Powered Security Tools to Counter Emerging Threats
Microsoft is fighting back against emerging threats with AI-powered security tools, leveraging the power of agentic AI to help defenders stay one step ahead. By deploying specialized "red, blue, and green" agents, the company's new Project Perception system continuously identifies, evaluates, and reduces security risks.
Microsoft Unveils AI-Powered Cybersecurity Tools in Heated Market
Microsoft just launched Project Perception, an AI-powered security platform that supercharges cyber defense by merging multiple components into a continuously learning system that can reason, prioritize, and act at lightning-fast machine speed. This game-changing tech combines human oversight with powerful automation to revolutionize the way we fight cyber threats.
NVIDIA Launches Open Secure AI Alliance to Share Threat-Detecting Tech
Join the Open Secure AI Alliance, a groundbreaking coalition of 37 industry leaders, as they revolutionize AI security by sharing cutting-edge threat-detecting technologies and collaborative defense strategies. Together, they're breaking down silos to safeguard the future of AI and software development.
Microsoft Unveils AI-Powered Security Model to Outperform Rivals
Microsoft just unveiled a game-changing AI-powered security model that has achieved a remarkable 95.95 percent success rate in identifying vulnerabilities, leaving the competition in the dust. This innovative model, combined with the MDASH harness, is poised to revolutionize bug hunting and cybersecurity.
Evaluating AI in Security Operations Requires New Framework
When evaluating AI in security operations, it's crucial to determine if it can deliver accurate verdicts across various scenarios and attack surfaces - and surprisingly, verdict quality only improves dramatically once a certain threshold of relevant data, such as identity and context, is reached. Below that threshold, no amount of fine-tuning can compensate.
SANS Warns of AI Governance Gap as Security Teams' Confidence Eroding
Despite a significant surge in AI adoption, with 78% of organizations now using AI in their cybersecurity strategy, a growing number are facing a harsh reality: 63% report major gaps in threat detection and response. This alarming trend highlights a pressing need for better AI governance to bridge the confidence gap.