soc news
7 stories
Wazuh Integrates AI to Improve Security Operations Center Workflows
Wazuh has announced the integration of Artificial Intelligence (AI) into its platform, a move designed to enhance Security Operations Center (SOC) workflows. This development reflects a broader industry trend where AI is increasingly adopted for its capabilities in automation and data analysis, now being applied to cybersecurity to support more rapid decision-making and the identification of…
Inside the Modern SOC: The Identity Front Door
Attackers are increasingly leveraging compromised identities to gain initial access to enterprise environments, with identity weaknesses playing a role in nearly 90% of incidents investigated by Unit 42, a cybersecurity research and incident response team. This trend is highlighted in the 2026 Unit 42 Global Incident Response Report, which also indicates that 65% of initial access activities…
Machine Speed, Human Judgement: How AI Changed the SOC in 2026
The operations of Security Operations Centers (SOCs) have undergone a fundamental transformation, largely driven by the integration of artificial intelligence into investigative workflows. This shift enables analysts to operate with machine-like speed while focusing their expertise on critical decision-making.
What Working the Cisco Live SOC Taught Me About AI, Detection, and Response
Working within the live Security Operations Center (SOC) at Cisco Live AMER provided valuable insights into the practical application of AI, detection, and response technologies, according to a product manager's recent account. The SOC at the event functions as a real-time security operation, integrating analysts, telemetry, detection mechanisms, and response workflows across the conference…
Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3
Elastic's security team has developed an "agentic" Security Operations Center (SOC) that automates alert investigation, significantly reducing the time it takes to triage security alerts. This new system can process alerts in under three minutes, a drastic improvement from the previous 30-minute manual triage time. The approach leverages Elastic's native technology stack, including Elastic…
5 Myths About AI in the SOC Security Teams Need to Rethink
Security operations teams are increasingly adopting artificial intelligence, but common assumptions about its role are being challenged by real-world application. A recent discussion at the Rapid7 Global Cybersecurity Summit highlighted five prevalent myths surrounding AI in the Security Operations Center (SOC) and offered a more nuanced perspective on its practical value.
From API key to live threat detections in minutes: how Elastic Security ingests Google Threat Intelligence
Elastic Security now offers native integration with Google Threat Intelligence (GTI), allowing security teams to ingest known malicious indicators and leverage AI-driven workflows for real-time alert enrichment and investigation. This integration aims to streamline the process from initial setup to live threat detection within minutes.