Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

reach security

Ranking the top 10 SIEM platforms in 2026

Sep 25, 2026 By John Dominguez In Reach Security
Security information and event management, or SIEM, remains one of the foundational technologies in the security operations center. Gartner defines SIEM as a configurable system of record that collects, aggregates, and analyzes security event data from on-premises and cloud environments to support threat detection, investigation, and response, along with compliance requirements.
Read Post

The New CISO Ep. 151 - Sean Murphy | Complacency Kills: Why More Discomfort Might Fix Your Burnout

Sep 23, 2026 By Exabeam In Exabeam
Sean Murphy spent more than twenty years in the CISO chair and walked away from it while things were going well. In this episode of The New CISO, he returns to talk with Steve Moore about trading the operational seat for a field CISO role at F5 — and why getting too good at the job was the warning sign.
View Video

Extend Investigations with Falcon Next-Gen SIEM Federated Search and Snowflake

Sep 21, 2026 By CrowdStrike In CrowdStrike
See how CrowdStrike Falcon Next-Gen SIEM Federated Search extends investigations to security data stored in Snowflake without requiring the entire dataset to be ingested into the SIEM. In this demo, an analyst pivots from suspicious endpoint activity in Falcon to Corelight network telemetry retained in Snowflake. Using remoteTable(), the analyst searches the remote data directly from Advanced Event Search, retrieving only the context needed to investigate the affected host and understand the broader scope of the incident.
View Video
sumologic

Try Sumo Logic in minutes: see SIEM and Dojo AI agents in action

Sep 17, 2026 By Adam White In Sumo Logic
You already know the feeling. An alert fires, and you’re the one digging through logs to figure out if it matters. A query takes three tries to get right. A tool demo looked great, but you still cannot picture it running against your own environment. Before dedicating too much of your over-committed schedule to a proof of concept, you want to know one thing: does this actually work the way they say it does?
Read Post
elastic

CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next

Sep 16, 2026 By Woody Walton In Elastic
On August 20, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) published its Logging Reference Architecture (LRA), the implementation guidance federal civilian executive branch (FCEB) agencies have been waiting for since the Office of Management and Budget's Memorandum M-26-14 reset the requirements for enterprise logging.
Read Post
sumologic

Sumo Logic MCP server: bringing SIEM and log data into Claude and other AI clients

Sep 16, 2026 By Margaret Selid In Sumo Logic
More security and operations work now happens inside an AI client instead of a dedicated console. That shift creates a gap for any platform that isn’t part of the conversation. Every time an analyst needs to triage an insight or check a log, they have to leave the AI client and go open a different tool. Sumo Logic closes that gap with a Model Context Protocol (MCP) server.
Read Post
elastic

The only perfect Endpoint Prevention and Response (EPR) score in 2026 belongs to Elastic

Sep 15, 2026 By Mia LaVada In Elastic
Elastic sits at the very top of this year’s AV-Comparatives' CyberRisk Quadrant within the 2026 Endpoint Prevention and Response (EPR) test with the only protection scores at 100%, combined with both the lowest modelled operational footprint of any tested product and zero false alerts.
Read Post
sophos

The industry turned XDR and SIEM into categories. Sophos turned them into outcomes.

Sep 15, 2026 By Marlene Jones In Sophos
Sophos Next-Gen SIEM, now generally available as part of Sophos Fusion, brings security operations and compliance together through shared context. For years, the cybersecurity industry has blurred the lines between XDR and SIEM. As capabilities converged, organizations were left trying to connect separate security operations and compliance solutions, often moving the same data between different tools, workflows, and teams.
Read Post
miniorange

What Is SIEM? How It Works With DLP to Detect Data Threats

Sep 8, 2026 By Chaitali Avadhani In miniOrange
Most security teams don’t lose the fight against data breaches because they lack tools. They lose because their tools don’t talk to each other. This is exactly the loophole that SIEM and DLP were built to close, together. Security information and event management gives you visibility into what’s happening across your entire environment. At the same time, data loss prevention gives you the control to stop sensitive information from leaving in the first place.
Read Post
elastic

The security attack that hid inside your observability data

Sep 3, 2026 By Roberto Arico In Elastic
How teams are leaving value on the table and what it costs when they do It's 3:00 a.m. Your on-call engineer gets paged that the central processing unit (CPU) is at 97% on payment-processor-01. They open their observability platform, look at the metric spike, reboot the host, and close the ticket.
Read Post
sumologic

How the SOC Analyst Agent cuts investigation time from four hours to fourteen minutes

Sep 3, 2026 By Oren Shevach In Sumo Logic
MFA fatigue campaigns work on a simple bet: eventually, someone taps “approve” just to make the notifications stop. It paid off. The attacker was in. The first move was quiet — deactivate SMS authentication, a small settings change easy to miss on a busy queue, and exactly the kind of thing that buys room to work without tripping an alarm. Then came the real work: AWS credentials pulled from one system, SSH keys from another, and a slow and methodical pull of internal source code.
Read Post
elastic

Defending against AI-fueled social engineering

Sep 1, 2026 By Joe DeFever In Elastic
Social engineering has always been the softest edge of enterprise defense, and AI is sharpening adversaries’ attacks. Phishing, business email compromise, and impersonation still dominate the initial-access playbook, but AI has stripped out the cost, time, and skill barriers that once forced attackers to choose between reach and precision.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.