LIVE · cybersecurity feed
Live wire
ransomware

More alerts are making your team slower, and an outcome-based SOC fixes that

In this Help Net Security video, Thom Langford, EMEA CTO, Rapid7, explains why piling on more security alerts makes a SOC slower to respond. Attackers log in with stolen credentials and use trusted tools like PowerShell instead of custom malware. He shares a case where attackers called a help desk, reset a privileged cloud account, and exposed thousands of passwords in three minutes. Ransomware gr

zeroday.news · 12d ago

--- Source 2 --- Rapid7 Unveils AI-Powered SOC Platform to Combat Alert Fatigue and Accelerate Threat Response

BOSTON, MA – July 18, 2026 – Rapid7, a leading provider of security analytics and automation, today announced the launch of its new Prophet Agentic AI SOC Platform. Designed to address the growing challenges of alert fatigue and slow response times in security operations centers (SOCs), the Prophet platform leverages artificial intelligence to streamline alert triage and investigation.

The company highlighted that the sheer volume of security alerts often overwhelms human analysts, leading to missed threats and extended dwell times. Traditional SOC models, focused on generating more alerts, inadvertently make security teams slower. Rapid7’s Prophet platform aims to reverse this trend by employing detection engineering, intelligent tuning, and AI-driven automation to augment, rather than replace, human expertise.

A key feature of the Prophet platform is its ability to provide unified visibility across both cloud and on-premises environments. This comprehensive view is critical for detecting sophisticated attacks that often span hybrid infrastructures. Rapid7 emphasized that modern attackers frequently utilize stolen credentials and legitimate tools like PowerShell, making traditional signature-based detection less effective. The platform is engineered to identify such stealthy tactics and accelerate containment.

Rapid7 cited examples of rapid attack progression, noting that ransomware groups can move from initial access to payload deployment in under three hours. They also described an incident where attackers exploited a help desk to reset a privileged cloud account, exposing thousands of passwords within a mere three minutes. The Prophet platform is designed to counter such rapid incursions by focusing on key performance indicators like reduced dwell time and faster containment speed.

In addition to the platform, Rapid7 continues to advocate for managed detection and response (MDR) services. These services provide organizations with access to human security experts who can act as an extension of their internal teams, offering capabilities such as session revocation, entry point blocking, and rapid threat neutralization. The Prophet Agentic AI SOC Platform is available immediately.

ransomwarebreachmalwarepatchcloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

vulnerabilitycritical

Rails patches critical Active Storage flaw with RCE potential

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]

malware

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group also known as APT29 and Cozy Bear. Since early May 2026, Storm-2945 has been manipulating DNS […]

CVE-2026-48449critical

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enterprise marketing automation platform. The flaw is caused by incorrect authorization and could allow attackers to execute […]

security

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments appeared first on SecurityWeek.

vulnerabilitycritical

Ruby on Rails Patches Critical Vulnerability

The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek.