.webp&w=828&q=75)
Criminal IP releases Splunk TI Feed app for firewall correlation
The Splunkbase app refreshes Criminal IP data every three hours and correlates it with firewall logs every 10 minutes.
Stories per day · 30 days
12 RSS
Relatedthreat-intelligence14sandbox10any-run6security-operations6ai-agents4any.run4detection-engineering4ioc4siem4agentic-ai3phishing3careers2cloud-security2criminal-ip2crowdstrike2firewall2incident-response2mdr2
138 stories, newest first · one card per story
Stories tagged #soc
Embed Security lets analysts teach its AI SOC how to investigate
Customer iSteps, NoiseIQ Memories and Detection Engineering encode local practice and suggest SIEM detection changes.
Model-based authoring builds consistent virtual SOC training exercises
A phishing-to-ransomware reference package with eight events passed reference validation and runs in a Virtual SOC prototype.
Rapid7 lists five signs an MDR service leaves work with analysts
The vendor blog urges buyers to check context, lessons learned, and whether response support is unlimited.
Corelight argues rich network data decides investigation outcomes
The partner piece says shallow connection metadata can stall analysts even when detections fire.
2026 ranking names Microsoft Security Copilot top GenAI SOC tool
Editorial scores, not lab tests, place Charlotte AI and Dropzone AI just behind Security Copilot.
1
SOC leaders should prioritize threat intelligence integration
ANY.RUN integrates threat intelligence into security workflows to enable earlier detection and reduce investigation bottlenecks.
1
Cycurion launches Habit AI-driven security operations center
Cycurion releases Habit, an AI platform that baselines environments and verifies threats before they become incidents.
Incident communications still lag automated detection, feature argues
Tim Brown of Cytactic favors a shared crisis view and one-click alerts, including fallback channels during outages.
CrowdStrike launches Agentic Security Platform
CrowdStrike integrates autonomous agents into Falcon for coordinated alert triage and red-teaming.
1
Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
Gartner report shifts analyst roles to case ownership as AI agents handle triage, with metrics moving to cases and decisions.
GenAI SOC Copilots Buyer’s Guide Evaluates 11 Options
The guide judges 11 GenAI tools for SOC use based on triage quality, grounding, and integration with existing platforms.
Wiz Red and Blue Agents enable proactive SOC security
Wiz's Red Agent finds exploitable risks pre-breach and Blue Agent investigates threats at AI speed.
StateFence Defends Blue-Team LLM Agents
StateFence preserves task state in SOC LLM agents against evidence-chain contamination from indirect prompt injections.
Post details algorithmic generation of false-positive alert filters
FP-Growth ranks field combinations from a detection rule's context and offers analysts the top three candidate filters.
Essay says SOCs are unready for autonomous offensive agents
It cites OpenAI agents attacking Hugging Face and a GLM-5.3 browser exploit built in a day.
1
2026 buyer guide reviews 12 managed security providers
The editorial verdict flags Secureworks under Sophos and urges buyers to get convergence commitments in writing.
LanG 2.0 enables energy-efficient agentic AI for security operations
LanG 2.0 improves campaign correlation to 51.81% and uses small local models at 650 times less energy than Claude Opus 5.5.
Opinion: CTF contests may offset shrinking entry-level security jobs
A Five9 engineer who won SentinelOne's Sentinels League argues CTFs still build judgment as AI crowds out junior roles.
1
Essay says AI will turn SOC analysts into Threat Operators
The piece argues juniors may lose alert-triage apprenticeships unless teams add mentorship and still teach networks, systems, and attacker techniques.
1
Richer situational awareness does not always improve SOC alert validation
On Cadets and Theia, comprehension-level context lifts Recall@5 by as much as 75 points versus Max. CSG.
ANY.RUN pitches related threat context for faster SOC triage
The vendor says related analyses draw on 16,000-plus SOC teams and a community of more than 700,000 professionals.
Exaforce argues SOCs are letting AI act sooner than expected
The author cites Invisible Technologies cutting mean time to investigate by 95 percent after adopting Exaforce, and urges evidence-backed, bounded autonomy.
ANY.RUN promotes AI sandbox features for SOC phishing analysis
A vendor demo follows an Adobe PDF link into a Microsoft OAuth phish and shows 70-plus related analyses.