Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

Monitor Claude activity in Elastic Security

The agentic security operations platform As more people across an organization start using Claude, security and compliance teams end up asking the same questions they ask about any other system: Who’s using it? How are they signing in? Who’s changing the configuration? Claude’s Compliance API answers all of that. It tracks more than 300 event types across Claude Enterprise, Claude Team, and Claude Platform, and every event arrives with the actor, a timestamp, and where it came from.

EU data sovereignty and security operations: how Sumo Logic solves both at once

EU organizations in finance, healthcare, telco, and government face a real tension: keep the business running or satisfy an ever-growing stack of data regulations. Most end up choosing one over the other. Sumo Logic and AWS just changed that. At Infosecurity Europe 2026, Bill Peterson, Senior Director of Product Marketing at Sumo Logic, sat down with Sean Martin from ITSPmagazine to break down Sumo Logic's integration with the AWS European Sovereign Cloud — and what it means for security and operations teams operating in the EU. In this interview, Bill covers.

SIEM on Cloud: Modernizing Threat Detection for 2026

Your team already knows the pattern. The on-prem SIEM is still running, but it's become a bottleneck instead of a force multiplier. Cloud logs arrive late or in partial form. SaaS activity sits in separate consoles. Endpoint and identity events don't line up cleanly. Analysts burn time pivoting across tools, then still end up asking whether the alert is real. That's why the conversation around SIEM on cloud has changed. It's no longer about chasing a newer deployment model.

Compliance work is overdue for a new approach

Compliance has traditionally lived in dashboards, spreadsheets, screenshots, audit packets, and point-in-time reviews. Security teams know the reality is more dynamic. The evidence auditors need is often buried across identity providers, endpoints, cloud platforms, network controls, vulnerability scanners, alerts, and custom application logs — all generating live operational telemetry that static tools struggle to keep up with.

Why Audit Readiness Accelerates Revenue

At 3am, you wake up in a cold sweat from a nightmare. The dream? You showed up to test for your most difficult class without having studied. Unprepared, your dream self sat in an uncomfortable desk, staring at a piece of paper and panicking. In the corporate world, an audit can induce the same sense of anxiety and distress.

Your Audit-Ready PCI DSS Compliance Checklist for 2026

Analysts summarized by the PCI Security Standards Council found that breaches in scope for PCI frequently involved card data. Teams already know the risk. The hard part is proving, month after month, that the controls around that data stayed in place and kept working. That is why many PCI DSS audits stall in the same places: scattered evidence, undocumented scope changes, firewall rules that drifted after a change window, and logs that exist but were never centralized.

Securing the Agentic Enterprise with Behavioral Analytics and AI Visibility

By mid-2026, the question is no longer whether AI belongs in the enterprise. It’s already embedded in daily work, supporting research, development, customer engagement, and operations. AI agents now act on behalf of employees, automate decisions, and interact directly with enterprise data and systems. This shift creates a new security challenge.

File Integrity Monitoring: A Guide for Modern Security

You probably already have endpoint alerts, firewall logs, cloud audit trails, vulnerability scans, and a queue full of tickets tied to expected changes. Yet one of the most common blind spots is still simple file drift on important systems. A web server config changes outside the maintenance window. A startup script gets altered so malware survives a reboot. A registry key flips on a server nobody thought to watch closely.

Unlock Compliance Management Solutions for 2026

You can usually tell when a compliance program is still running on audit season logic. Three weeks before an assessment, Slack fills with evidence requests. Security exports screenshots from cloud consoles. IT pulls user lists from IAM. HR scrambles to prove termination workflows. Someone opens the spreadsheet nobody has touched since the last audit and starts guessing which controls still map to which systems.

Monitor Claude Enterprise activity with Datadog Cloud SIEM

As Claude adoption expands across enterprises and workflows, security and compliance teams need to understand who is using Claude Enterprise, how it is accessed, and how it is administered and configured across the organization. The Claude Compliance API gives organizations access to valuable activity data that supports security monitoring, investigations, and governance initiatives.