LIVE · cybersecurity feed
Live wire
ransomware

More alerts are making your team slower, and an outcome-based SOC fixes that

--- Source 2 --- Rapid7 Unveils AI-Powered SOC Platform to Combat Alert Fatigue and Accelerate Threat Response

ZeroDay News ·

Source: Help Net Security

--- Source 2 --- Rapid7 Unveils AI-Powered SOC Platform to Combat Alert Fatigue and Accelerate Threat Response

BOSTON, MA – July 18, 2026 – Rapid7, a leading provider of security analytics and automation, today announced the launch of its new Prophet Agentic AI SOC Platform. Designed to address the growing challenges of alert fatigue and slow response times in security operations centers (SOCs), the Prophet platform leverages artificial intelligence to streamline alert triage and investigation.

The company highlighted that the sheer volume of security alerts often overwhelms human analysts, leading to missed threats and extended dwell times. Traditional SOC models, focused on generating more alerts, inadvertently make security teams slower. Rapid7’s Prophet platform aims to reverse this trend by employing detection engineering, intelligent tuning, and AI-driven automation to augment, rather than replace, human expertise.

A key feature of the Prophet platform is its ability to provide unified visibility across both cloud and on-premises environments. This comprehensive view is critical for detecting sophisticated attacks that often span hybrid infrastructures. Rapid7 emphasized that modern attackers frequently utilize stolen credentials and legitimate tools like PowerShell, making traditional signature-based detection less effective. The platform is engineered to identify such stealthy tactics and accelerate containment.

Rapid7 cited examples of rapid attack progression, noting that ransomware groups can move from initial access to payload deployment in under three hours. They also described an incident where attackers exploited a help desk to reset a privileged cloud account, exposing thousands of passwords within a mere three minutes. The Prophet platform is designed to counter such rapid incursions by focusing on key performance indicators like reduced dwell time and faster containment speed.

In addition to the platform, Rapid7 continues to advocate for managed detection and response (MDR) services. These services provide organizations with access to human security experts who can act as an extension of their internal teams, offering capabilities such as session revocation, entry point blocking, and rapid threat neutralization. The Prophet Agentic AI SOC Platform is available immediately.

ransomwarebreachmalwarepatchcloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ransomware

FBI Arrests Founder of Ransomware Negotiation Firm

Federal agents have arrested a Canadian cybersecurity professional in Pennsylvania, linking him to an ongoing investigation into the ShinyHunters hacking group. Edward Dubrovsky, co-founder of the Canadian firm CyberSteward, was taken into custody on October 8, facing charges of conspiracy to threaten to impair the confidentiality of information with intent to extort money, and interference…

security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…