threat detection news
10 stories
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains
Osavul, a company specializing in hybrid risk intelligence, has announced it secured $10 million in Series A funding. The investment round was led by 33N Ventures, with the stated purpose of advancing Osavul's capabilities in detecting hostile intentions across both cyber and physical domains.
The MFA Identity Trap: When Authentication Creates a False Sense of Security
A recent report highlights a critical security vulnerability termed the "MFA Identity Trap," where organizations mistakenly equate identity verification, authentication, and threat detection. This conflation reportedly fosters a false sense of security, allowing systems to authenticate malicious actors rather than preventing their access. The report emphasizes the necessity of clearly…
Rapid7 and Licencias OnLine Partner for Latin American Cybersecurity
Rapid7, a cybersecurity solutions provider, has announced a new strategic distribution partnership with Licencias OnLine (LOL) to expand its reach across Latin America. The collaboration aims to provide organizations in the region with enhanced cybersecurity operations platforms and support as they navigate increasing digital transformation, cloud adoption, and the integration of artificial…
Microsoft Named Leader in Enterprise MDR/MXDR Report
Microsoft has been identified as a leader in the 2026 IDC MarketScape report focusing on Managed Detection and Response (MDR) and Managed Extended Detection and Response (MXDR) services tailored for enterprise clients. The report underscores the evolving landscape of cyber threats, particularly noting the emergence of AI-driven attack methodologies, and emphasizes the critical role of…
AI Coding Tools Trigger Endpoint Security Rules
AI-powered coding assistants are causing a stir by inadvertently triggering endpoint security software. Tools such as Cursor, Claude Code, and OpenAI Codex have been observed to set off behavioral detection rules, which are designed to flag malicious activity.
Operationalizing Day Minus Seven: The Cloud-Native ROC
The cybersecurity landscape is rapidly changing with the advent of advanced AI models, leading to an era dubbed 'Day Minus Seven.' In this new paradigm, AI can discover, chain, and exploit vulnerabilities at speeds that outpace traditional security workflows. The primary challenge for security teams is no longer identifying vulnerabilities but rather discerning which exposures are genuine,…
Blackpoint AI SOC Agent autonomously contains identity-based attacks
Blackpoint Cyber has launched its AI SOC Agent, a new feature designed for autonomous response to identity-based threats. This capability, now generally available, aims to detect and contain attacks targeting Microsoft 365 and Google Workspace accounts with minimal human intervention. The system operates on an AI and human hybrid model, with the AI component acting on threats it identifies…
Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects
Kaspersky's analysis of its 2025 compromise assessment engagements reveals a significant number of undetected threats, with many persisting for months or even years. These assessments, which examine networks for signs of compromise, found that a substantial portion of incidents were missed by existing security tools and processes.
5 Myths About AI in the SOC Security Teams Need to Rethink
Security operations teams are increasingly adopting artificial intelligence, but common assumptions about its role are being challenged by real-world application. A recent discussion at the Rapid7 Global Cybersecurity Summit highlighted five prevalent myths surrounding AI in the Security Operations Center (SOC) and offered a more nuanced perspective on its practical value.
Azure AD Graph Activity Logs: Ingestion and threat detection to close the visibility gap
Azure AD Graph activity logs are now accessible within Elastic, enabling threat detection capabilities for security teams. Previously, this specific stream of telemetry was largely unavailable to customers for nearly a decade. Microsoft Graph Activity Logs, the newer interface, became generally available in April 2024, but the legacy graph.windows.net surface, frequently targeted by adversary…