Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs
ANY.RUN says US SOCs are slowed by alert overload, tool sprawl, and evasive phishing.
ANY.RUN published an analysis of five operational bottlenecks in US security operations centers, citing 2026 industry surveys. SOCs reportedly handle 2,566 alerts a day on average, 52% of organizations saw higher volume, 46% cited understaffing, and 36% of alerts are still triaged manually. FBI figures cited include 191,561 phishing and spoofing complaints in 2025 and about $3.05 billion in business-email-compromise losses. The piece describes evasive phishing tactics and promotes ANY.RUN's interactive sandbox and threat-intelligence lookup, claiming 20% less Tier-1 time and 30% fewer escalations.