automation news
16 stories
Companies Have Six Months to Prepare for Automated Attacks
A recent report indicates that advanced artificial intelligence models have achieved the capability to execute complete system compromises autonomously, without requiring human intervention. This development represents a significant escalation in the threat landscape, with organizations advised to prepare for such automated attacks within a six-month timeframe.
Wazuh Integrates AI to Improve Security Operations Center Workflows
Wazuh has announced the integration of Artificial Intelligence (AI) into its platform, a move designed to enhance Security Operations Center (SOC) workflows. This development reflects a broader industry trend where AI is increasingly adopted for its capabilities in automation and data analysis, now being applied to cybersecurity to support more rapid decision-making and the identification of…
GitLab 19.3 helps enterprises scale agentic development securely
GitLab has released version 19.3 of its platform, introducing updates designed to enhance control and security for enterprises adopting agentic software development. Key features include the integration of the GitLab Duo Agent Platform into GitLab Dedicated environments, a new Secrets Manager, and tools for bulk SAST vulnerability remediation.
New infosec products of the week: August 21, 2026
Several cybersecurity vendors have announced new product releases and enhancements this week, focusing on areas such as AI security, DDoS protection, security automation, and network segmentation. F5 Networks, Intezer, Netscout, and Tufin have all introduced updates to their respective platforms.
Intezer Introduces Native Automation for Security Response Workflows
Intezer has introduced Workflows, a new native automation and response builder integrated directly into its platform, aiming to streamline security operations by eliminating the need for separate Security Orchestration, Automation, and Response (SOAR) systems. The company announced the feature on August 19, 2026, positioning it as a way for security teams to create and customize response…
Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits
A Chinese threat actor has reportedly leveraged large language models (LLMs), including DeepSeek AI's Hermes Agent, to automate and accelerate vulnerability exploitation campaigns against internet-exposed infrastructure in Asia. The actor, known by the aliases 'knaithe' and 'KnYuan' and believed to be based in Zhuhai, China, is described as an opportunistic exploit operator and binary security…
Blind Trust in AI Creates Cybersecurity Risks
A recent report highlights a growing cybersecurity concern stemming from an overreliance on artificial intelligence models, specifically when these models are granted both interpretive and executive authority without human intervention. The core issue identified is the absence of critical human oversight in the loop, which can pave the way for unintended security vulnerabilities and potential…
Summer Staffing Shortages Expose IT Security Risks
Cybersecurity experts are warning that organizations face heightened risks during summer months due to reduced IT staffing levels, creating opportunities for threat actors. Data indicates a significant increase in cyberattacks during holiday periods, with summer being particularly vulnerable as security teams operate with diminished capacity.
Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target
A threat actor utilized agentic artificial intelligence to compromise an Amazon Web Services (AWS) cloud environment within 72 hours, a task that would typically take weeks, according to a report by the security vendor Sygnia. The attack, aimed at extortion, leveraged familiar cloud infrastructure exploitation techniques but at an accelerated pace due to AI assistance.
Machine Speed, Human Judgement: How AI Changed the SOC in 2026
The operations of Security Operations Centers (SOCs) have undergone a fundamental transformation, largely driven by the integration of artificial intelligence into investigative workflows. This shift enables analysts to operate with machine-like speed while focusing their expertise on critical decision-making.
Qualys Joins Cisco Cloud Control Studio as a Launch Partner to Bring Risk Intelligence to Agentic Operations
Qualys has announced its participation as a launch partner in Cisco Cloud Control Studio, a new platform designed for agentic IT and security operations. This collaboration aims to integrate Qualys' risk intelligence directly into Cisco's operational workflows, allowing joint customers to manage and remediate vulnerabilities more efficiently. The integration was unveiled at Cisco Live Las…
Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3
Elastic's security team has developed an "agentic" Security Operations Center (SOC) that automates alert investigation, significantly reducing the time it takes to triage security alerts. This new system can process alerts in under three minutes, a drastic improvement from the previous 30-minute manual triage time. The approach leverages Elastic's native technology stack, including Elastic…
5 Myths About AI in the SOC Security Teams Need to Rethink
Security operations teams are increasingly adopting artificial intelligence, but common assumptions about its role are being challenged by real-world application. A recent discussion at the Rapid7 Global Cybersecurity Summit highlighted five prevalent myths surrounding AI in the Security Operations Center (SOC) and offered a more nuanced perspective on its practical value.
OpenClaw: risks for the users and how to mitigate them
OpenClaw, an AI agent ecosystem formerly known as Clawdbot and Moltbot, presents significant security risks to users and organizations due to vulnerabilities and the widespread distribution of malicious extensions. The platform's popularity stems from its flexibility and ability to automate complex tasks using natural language instructions without requiring programming knowledge. This ease of…
From vulnerability report to CVE draft in minutes: how Elastic automated security advisories with AI
Elastic's InfoSec Product Security Team has developed a generative AI agent to automate the drafting of security advisories, significantly reducing the time required to process vulnerability reports. This new system leverages Retrieval-Augmented Generation (RAG) against MITRE's Common Weakness Enumeration (CWE) and Common Attack Pattern Enumeration and Classification (CAPEC) catalogs, which…
AI Could Revolutionize Cybersecurity Analysis and Defense
Cybersecurity is entering a new era, moving beyond its experimental phase due to the increasing complexity of software systems and the limitations of human analysis. This shift is being driven by the capabilities of large language models (LLMs), which offer a scalable and cost-effective way for defenders to assess, prioritize, and act on threats.