Topic: threat detection

  • Boost Cyber Resilience: Proactive Wazuh Strategies

    Boost Cyber Resilience: Proactive Wazuh Strategies

    Cyber resilience is a proactive strategy that enables organizations to anticipate, withstand, respond to, and recover from attacks with minimal operational impact, moving beyond traditional reactive security models. The Wazuh security platform provides unified visibility, early threat detection, ...

    Read More »
  • Secure Your Microsoft 365 & Hybrid Identity with Cayosoft Guardian

    Secure Your Microsoft 365 & Hybrid Identity with Cayosoft Guardian

    Cayosoft Guardian Protector offers free, real-time threat detection and monitoring for Microsoft hybrid identity environments, including Active Directory and Entra ID, to defend against ransomware and insider threats without licensing costs. It provides comprehensive visibility and immediate aler...

    Read More »
  • ManageEngine Reduces SOC Alert Fatigue with Reengineered Detection

    ManageEngine Reduces SOC Alert Fatigue with Reengineered Detection

    Security operations centers are overwhelmed by excessive alerts, making it difficult to distinguish critical threats from irrelevant noise. ManageEngine's Log360 introduces a reengineered detection system that reduces false positives and improves threat coverage with over 1,500 prebuilt, continuo...

    Read More »
  • Network Logs Reveal What Cloud Logs Miss

    Network Logs Reveal What Cloud Logs Miss

    Cloud adoption has introduced new security vulnerabilities, such as dynamic infrastructure and multi-cloud architectures, creating blind spots that require network traffic visibility for comprehensive defense. Network telemetry provides a consistent, provider-agnostic data source for threat detec...

    Read More »
  • Illumio's AI Agent Slashes Alert Fatigue, Speeds Threat Response

    Illumio's AI Agent Slashes Alert Fatigue, Speeds Threat Response

    Illumio's Insights Agent tackles alert fatigue by providing real-time, tailored alerts and one-click remediation recommendations, helping security teams prioritize and neutralize threats efficiently. The system delivers persona-based AI guidance, offering role-specific risk assessments and action...

    Read More »
  • Flowmon ADS 12.5: Effortless Threat Detection Made Simple

    Flowmon ADS 12.5: Effortless Threat Detection Made Simple

    Progress Software has launched Flowmon ADS 12.5, an AI-powered anomaly detection system designed to simplify threat identification and provide enhanced network visibility for organizations. The solution addresses challenges like alert fatigue and resource constraints, especially for midsize busin...

    Read More »
  • ManageEngine Log360 Update Cuts SOC Alert Fatigue

    ManageEngine Log360 Update Cuts SOC Alert Fatigue

    Security operations centers are overwhelmed by excessive data and false alerts, which often obscure critical threats. ManageEngine's Log360 update introduces smarter threat detection, filtering out irrelevant alerts and reducing false positives by up to 90%. The platform includes a centralized de...

    Read More »
  • Illumio's AI Agent Automates Threat Detection and Containment

    Illumio's AI Agent Automates Threat Detection and Containment

    Illumio's Insights Agent is an AI-driven tool that provides real-time threat detection and one-click containment to help security teams respond faster and reduce alert fatigue. The Agent uses role-aware intelligence to deliver personalized threat insights and automated remediation steps, tailored...

    Read More »
  • Uncover Malicious OAuth Apps in Microsoft 365 with Cazadora

    Uncover Malicious OAuth Apps in Microsoft 365 with Cazadora

    Auditing OAuth applications in Microsoft 365 is critical due to the high risk of malicious apps, which can severely compromise security. Use an open-source script to identify suspicious apps by checking for indicators like mimicry of user names, generic names, or anomalous reply URLs. Huntress re...

    Read More »
  • AI Security: Outsmart Evolving Cyber Threats

    AI Security: Outsmart Evolving Cyber Threats

    Organizations face increasingly sophisticated cyber threats that require proactive, AI-enhanced security measures to anticipate and block novel attacks before they cause damage. AI-powered systems revolutionize security workflows by processing vast datasets to eliminate false positives, highlight...

    Read More »
  • 4 Time-Saving Strategies to Boost Security Monitoring

    4 Time-Saving Strategies to Boost Security Monitoring

    Traditional SIEM systems face challenges with data latency, storage costs, and processing overhead, making it difficult to balance comprehensive security visibility with budget constraints. Time series data approaches enable faster anomaly detection and long-term threat hunting by providing immed...

    Read More »
  • Secure Your AI with Allama: Open-Source Automation

    Secure Your AI with Allama: Open-Source Automation

    Allama is an open-source security automation platform that uses visual workflows to integrate with over 80 tools, including SIEMs and ticketing systems, for unified threat detection and response. Its core strength lies in AI-powered agents that analyze threats, enable automated actions like conta...

    Read More »
  • AI in Security: Adoption Lags Behind the Hype

    AI in Security: Adoption Lags Behind the Hype

    Security leaders widely adopt AI/ML (96%) and value it for reducing alert fatigue and improving detection, but its actual use is often less sophisticated than marketed. Current AI applications are primarily tactical, focusing on core threat detection and automated response, rather than the deep, ...

    Read More »
  • Top Cybersecurity Jobs Hiring Now: January 2026

    Top Cybersecurity Jobs Hiring Now: January 2026

    The global cybersecurity job market is experiencing high demand for specialized roles, with key positions including Chief Information Security Officers (CISOs), Cyber Defence Specialists, and various types of Security Engineers and Analysts across countries like Australia, France, and the UAE. Sp...

    Read More »
  • Secure Your Future: Building Trust in AI Security

    Secure Your Future: Building Trust in AI Security

    AI integration in cybersecurity enables proactive threat detection and faster responses by analyzing large datasets beyond human capabilities. The growth of machine-generated data is driving adoption of federated analytics and edge-based detection to manage information without centralized storage...

    Read More »
  • Adform ad script hacked to steal cryptocurrency

    Adform ad script hacked to steal cryptocurrency

    Adform, a major European adtech provider, suffered a supply-chain attack that injected crypto-stealing code into its tracking script, which swapped copied or displayed cryptocurrency wallet addresses on websites using its platform to redirect funds to attackers. Security researcher Kevin Beaumont...

    Read More »
  • SECNAP CloudJacket MXDR: Unified SOC, SIEM & NDR Security

    SECNAP CloudJacket MXDR: Unified SOC, SIEM & NDR Security

    SECNAP has launched CloudJacket MXDR, a next-generation managed cybersecurity platform that integrates network detection and response (NDR) with other security functions into a unified system for comprehensive protection. The solution combines AI-assisted monitoring with human-led analysis in a 2...

    Read More »
  • Akira Ransomware Hijacks Victim's Remote Management Tool

    Akira Ransomware Hijacks Victim's Remote Management Tool

    Hackers used the trusted Datto RMM tool and a Living Off The Land strategy to deploy Akira ransomware, disguising their actions as normal IT operations to avoid detection. The attack was halted by Barracuda Managed XDR, which detected the encryption activity and immediately isolated the compromis...

    Read More »
  • Okta acquires AI security startup Permiso for roughly $200M

    Okta acquires AI security startup Permiso for roughly $200M

    Okta has acquired AI-focused identity security startup Permiso Security for just under $200 million in an almost all-cash deal, expected to close in the third quarter of fiscal 2027. The acquisition reflects the identity management industry's shift toward continuous monitoring of users, applicati...

    Read More »
  • Qumulo NeuralProtect AI stops ransomware before encryption

    Qumulo NeuralProtect AI stops ransomware before encryption

    Qumulo NeuralProtect is a new ransomware resilience solution that detects and stops threats before encryption, corruption, or data loss occurs. Deeply integrated into the Qumulo Data Platform, it uses advanced analytics to identify suspicious activity in real time and prevent data locking or dest...

    Read More »