A new benchmark called ORQA, built by connecting O*NET occupations to trusted occupation-specific websites, found that the best large language models score only about 58-62% on occupation-level profes…
A developer introduced SENTINEL-RL, an open reference architecture for agentic security operations center (SOC) investigation that decouples semantic reasoning from topological graph operations into t…
Elastic reports that AI-enabled cyber attacks are outpacing state and local government defenses, with phishing campaigns achieving click-through rates 4.5 times higher than traditional methods and lat…
A developer outlines five methods for encoding tacit knowledge into security operations center (SOC) AI agents, emphasizing that the hardest problem is capturing the intuitive judgment of senior analy…
Attackers using AI can move from initial access to full domain control in less than a minute, while LLM-generated phishing campaigns achieve click-through rates 4.5 times higher than traditional metho…
A developer provides ten ChatGPT prompts tailored for L1 SOC analysts to assist with alert triage, threat analysis, and documentation. The prompts cover scenarios such as security alert summarisation,…
Huntress partnered with UK channel marketplace Giacom to give managed service providers on Giacom's Cloud Market platform direct access to Huntress's Agentic Security Platform and AI-centric SOC. The …
Google SecOps integrates Censys Internet intelligence to provide real-time context about IPs, web properties, and certificates, enabling faster triage and more accurate investigations for AI-enabled s…
Security leaders are racing to govern AI agents before production deployment, but most lack a clear stack. A new framework identifies four essential primitives: an identity-aware proxy for real-time a…
The article describes the successful end-to-end test of SHENRON, a non-executable adversarial simulation framework that generates inert telemetry patterns to test detection systems without running act…
The article explains that traditional centralized Security Operations Centers (SOCs) are failing due to latency and data volume, necessitating a shift to distributed, autonomous systems. It introduces…