Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

Enterprise Strategy Group: Best Practices for Securing Your Gen AI Journey

Many organizations that have historically been managing their security and network strategies independently from one another are looking to simplify and integrate their solution into a unified solution. In this instance, the value of a SASE solution is clear - but rolling out an effective implementation can be a challenge. This is where an MSSP can step in and provide the expertise to outline a proven strategy to move into a SASE solution that meets the customer where they are.

WAAP Sprawl: Simplifying Web and API Security in a Fragmented World

As API usage surges and application environments evolve, organizations are increasingly relying on a mix of WAFs, DDoS protection, API security, and bot management tools, often from different vendors. While many have coverage across key areas, this fragmented approach leads to what we call WAAP sprawl: multiple tools, multiple vendors, and increased complexity. Can organizations effectively manage all of this?

Falcon Next-Gen SIEM: Accelerate Security Analytics with Persisted Aggregations

See how CrowdStrike Falcon Next-Gen SIEM accelerates security analytics with persisted aggregations. Learn how security teams can pre-compute event counts by vendor and dataset, automatically schedule calculations, and store aggregated metrics independently of raw telemetry to reduce repetitive processing and improve query efficiency.

From Integration to Innovation

How can healthcare organizations integrate cybersecurity programs following a merger while staying ahead of evolving threats? In this session at the Exabeam Security Intelligence Summit in Chicago, Kish Dill and Rich Durost discuss how Froedtert and ThedaCare navigated the challenges of combining their cybersecurity programs following their merger. They explore the complexities of securing healthcare environments, addressing emerging risks from AI agents, and building a stronger, more unified approach to cybersecurity.

The Next Insider Threat

How are AI agents changing the insider threat landscape, and what can organizations do to manage the risks? In this session at the 2026 Exabeam Security Intelligence Summit in Chicago, John Nowotny explores how autonomous AI agents are introducing new security challenges as they gain access to sensitive data and greater independence across business systems. The session examines why understanding agent behavior is critical to detecting emerging threats and how organizations can adapt existing security programs to strengthen governance, visibility, and response.

Mind The Gap: Bridging the gap between knowing what to do and doing it to drive successful outcomes

Why do organizations struggle to turn knowledge into action and achieve consistent results? In this session at the Exabeam Security Intelligence Summit in Chicago, Kish Dill examines the gap between knowing what to do and successfully executing it. Learn how to overcome barriers to progress, build a culture where challenges are openly discussed, reward meaningful action, and measure the processes that drive continuous improvement.

How Human is AI?

How do AI agents behave when they collaborate, take shortcuts, and push beyond established boundaries? In this session at the Exabeam Security Intelligence Summit in Chicago, John Nowotny examines the reported OpenAI–Hugging Face incident to explore how autonomous AI agents can exhibit behaviors similar to human insider threats. Learn practical strategies for managing AI-related risks through stronger monitoring, access controls, and incident response.

Scaling cyber protection for US critical infrastructure: How Elastic supports the Community Cyber Resilience Foundation

Over recent years, US critical infrastructure has become a primary target for coordinated cyber attacks. Small water, gas, and electric utilities have faced serious risk from cyber attacks while dealing with limited budgets, staff, and forensic expertise, leaving them further exposed. Advancements in AI have made the cyber threat landscape even more challenging. AI has become an enabler of cyber attacks, rather than a solitary perpetrator.

SIEM or XDR? Yes

Same logs, two places, overlapping outcomes. It's time to rethink the SIEM vs. XDR question. In my last blog, I asked where XDR fits into the SIEM-less conversation. To answer that, start with the endpoint. If every threat could be stopped there, there would be less need for detection and response products such as endpoint detection and response (EDR). But attackers got better at evading even the most robust endpoint security, for example by abusing dual-use tools in living-off-the-land (LOTL) attacks.