detection and response

Mean Time to Exploit Has Gone Negative. Security Strategy Has to Change.

Mean Time to Exploit Has Gone Negative. Security Strategy Has to Change.

| | AI in Cybersecurity, Breach, cisa, detection and response, Mean Time to Exploit, Vulnerability Management, zero-day
Mandiant's M-Trends 2026 report puts estimated mean time to exploit at negative seven days. That number should reset how security leaders think about vulnerability management. It means exploitation is now routinely occurring ...
Security, Decoded: Insights from Suzu Labs
RSAC 2026 Innovation Sandbox | Humanix: People-Oriented Social Engineering Attack Detection and Response

RSAC 2026 Innovation Sandbox | Humanix: People-Oriented Social Engineering Attack Detection and Response

| | Blog, detection and response, Innovation Sandbox, rsac, social engineering
Company Profile Humanix (see Figure 1) is a cybersecurity company focusing on human-centric threat detection and response, dedicated to protecting enterprises from social engineering attacks against “people”, headquartered in the San Francisco ...
NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.
vulnerabilities, root cause, Microsoft Storm-1152 fake accounts CaaS

The Seam in Cybersecurity Defenses That Nation-States Keep Exploiting

| | Behavioral Monitoring, Cybersecurity Best Practices, cybersecurity gaps, detection and response, enterprise security, Incident Response, Malware Detection, Notepad++ breach, runtime behavior, runtime telemetry, Security Strategies, software-vulnerabilities, state-sponsored attacks, Supply Chain Attacks, threat actors, Vulnerability Management
The Notepad++ supply chain compromise is the latest proof that sophisticated adversaries are deliberately targeting the gap between two disciplines: Vulnerability management and detection and response.  ...
Security Boulevard
Modern SecOps: What an AI-ready SOC actually means with Anton Chuvakin

Beyond “Is Your SOC AI Ready?” Plan the Journey!

| | AI-SOC, detection and response, opsec, security-operation-center, SOC
You read the “AI-ready SOC pillars” blog, but you still see a lot of this:Bungled AI SOC transitionHow do we do better?Let’s go through all 5 pillars aka readiness dimensions and see what we ...
Stories by Anton Chuvakin on Medium
Anton’s Alert Fatigue: The Study

Anton’s Alert Fatigue: The Study

| | detection and response, secops, security operations, security-operation-center, SOC
Mention “alert fatigue” to a SOC analyst. They would immediately recognize what you are talking about. Now, take your time machine to 2002. Find a SOC analyst (much fewer of those around, ...
Stories by Anton Chuvakin on Medium
detection, campaigns, threat, HEAT, managed detection and response, Apache ActiveMQ, vulnerability, Aqua Cham, threat, elGang APT Meltdown Spectre Threat Detection

Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response

| | Cloud-native, detection and response, DevSecOps
As security teams level up to support the cloud-native transition, three major issues keep impeding detection and response in the cloud ...
Security Boulevard
HPE Infuses AI Into Network Detection and Response Platform

HPE Infuses AI Into Network Detection and Response Platform

| | detection and response, HPE, NDR, ZTNA
Hewlett Packard Enterprise (HPE) this week at the Black Hat USA 2024 conference extended its network detection and response (NDR) capabilities that make use of artificial intelligence (AI) models to enable behavioral ...
Security Boulevard
Frameworks for DE-Friendly CTI (Part 5)

Frameworks for DE-Friendly CTI (Part 5)

| | detection and response, detection-engineering, security operations, SOC, threat detection
This blog series was written jointly with Amine Besson, Principal Cyber Engineer, Behemoth CyberDefence and one more anonymous collaborator.In this blog (#5 in the series), we will build a quick “framework-lite” for ...
Stories by Anton Chuvakin on Medium
Threat-informed or Threat-owned? Classic Practices Will Probably Save You!

Threat-informed or Threat-owned? Classic Practices Will Probably Save You!

| | Cybersecurity, detection and response, threat detection
So, if you are too busy to read our amazing (duh!) new blog “Revisiting Traditional Security Advice for Modern Threats”, here are the key ideas from it.At some point, a “pre-owned” (compromised before ...
Stories by Anton Chuvakin on Medium
New Report “State of Cloud Threat Detection and Response”

New Report “State of Cloud Threat Detection and Response”

| | Cloud Security, cloud-detection, detection and response
Cloud D&R Report (2023)One of the mysteries of detection and response (D&R) is about how companies really approach D&R in the public cloud. So we did a survey focused on this, and we ...
Stories by Anton Chuvakin on Medium
Load more