Cloud Range releases free 28-question OT readiness assessment
The questionnaire covers seven areas, from asset visibility and IT/OT coordination through detection, response, recovery, and validation.
Stories per day · 30 days
11 RSS
Relatednist5ransomware5ai-agents4cisa4nsa4crowdstrike3ciso2extortion2healthcare2identity2mandiant2phishing2soc2unit-422vpn2active-directory1agent-security1ai-governance1
122 stories, newest first · one card per story
Stories tagged #incident-response
Kaseya ties ransomware recovery communication to MSP client retention
Kaseya cites 12% of MSPs losing clients after incidents and pitches one platform for RMM, PSA and recovery.
1
Rapid7 lists five signs an MDR service leaves work with analysts
The vendor blog urges buyers to check context, lessons learned, and whether response support is unlimited.
Incident archives risk being used for AI model training
Security incident records fed to AI systems can map organizational detection patterns and tuning decisions, exposing behaviors to vendors.
1
UNM Health diverts ambulances and closes clinics after cyber incident
The October 26 event hit some end-user devices, spared core servers, and care was restored the next day.
2
Incident communications still lag automated detection, feature argues
Tim Brown of Cytactic favors a shared crisis view and one-click alerts, including fallback channels during outages.
Counterfactual labels improve incident response decisions in cyber-physical systems
New TE-GvA dataset with belief-level labels for Tennessee Eastman process shows gradient-boosted rules achieve 11 percent lower regret than hindsight labels on stress sets.
Mandiant tops 2026 incident response retainer ranking
Mandiant leads with guaranteed bench access; Unit 42 offers flexible credits in 2026 IR retainer rankings.
1
Incident response should leave channels an attacker may already read
Plans often cover dead email, but not chat and mail that still work while an intruder can read them.
Buyer’s guide compares 12 incident response retainer services
The review weighs SLAs, unused-hour conversion, onboarding and post-acquisition ownership rather than responder reputation alone.
1
LevelBlue: vulnerability exploitation rose to 14% of initial access
The firm's Q1 figure was 20%, while Verizon's 2026 DBIR put exploitation behind 31% of breaches.
1
2026 buyer’s guide ranks 12 SOAR platforms by team fit
The research-based guide splits tools into SIEM-bundled, playbook, no-code, and intel-led lanes and flags Revelstoke as absorbed.
1
Paper proposes ZT-AIR for zero-trust adaptive incident response
The hierarchical reinforcement-learning design separates prioritization from execution and was checked with practitioners.
Lawyer outlines three frameworks for CISO AI liability
Daniel Garrie told ISC2 attendees to score AI risk, record board appetite, and lock vendor evidence into contracts.
1
Ohio auditor takes web server offline after October 25 attack
Keith Faber says monitoring quarantined the threat and he does not believe residents’ or local governments’ financial data is at risk.
1
UNM cancels second day of health classes after cyberattack
Hospitals resumed accepting patients after Monday ambulance diversions, while BYOD's ransomware and data-theft claims remain unverified.
1
NIST, CISA and NSA publish AI agent incident-response practices
A BeyondTrust architect says responders should start from the agent identity record, not from classifying intent.
1
OpenAI says Codex Ultrafast sped internal incident investigations
Staff say security data reviews fell from one or two hours to about 10 to 15 minutes.
Railway says attacker reached internal systems and some customer secrets
Customers who signed up before October 21 are told to rotate stored keys; Railway says attacker access ended on October 22.
1
Grafana Cloud adds Knowledge Graph for agents and incident response
Custom entities and agent runtime context are generally available; several monitoring features remain in preview.
1
NIST, NSA and CISA list response practices for rogue AI agents
Ten practices cover prepare, detect, respond, recover, and report, including government notification.
Bullhorn takes staffing platform offline after cyberattack
Forensics has not determined whether customer data was stolen, and Bullhorn has given no restoration date.
NSA, CISA and NIST publish guidance on rogue AI agents
The October 16 voluntary guidance lists ten practices for incidents in which highly capable agents act outside approved tasks.
2
NIST, NSA and CISA warn on uninstructed AI agent failures
October 16 voluntary guidance lists ten practices for teams testing capable agents with limited human oversight.