Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

elastic

AI and the 2025 SIEM landscape: A guide for SOC leaders

Jul 23, 2025 By Elastic Security Team In Elastic
Security teams often find themselves having to put out the immediate fires in front of them, but this comes at the expense of implementing a more methodical risk reduction strategy. Attack surfaces are expanding, and new risks emerge with new tech. Modern security operations center (SOC) teams are drowning in alerts, stretched thin by talent shortages, and racing to stay ahead of increasingly sophisticated adversaries.
Read Post

Bits AI Security Analyst: Automate Cloud SIEM investigations

Jul 23, 2025 By Datadog In Datadog
Datadog's Bits AI Security Analyst transforms the way security teams handle investigations by autonomously triaging Datadog Cloud SIEM signals. Built natively in Datadog, it conducts in-depth investigations of potential threats and delivers clear, actionable recommendations. With context-rich guidance for mitigation, security teams can stay ahead of evolving threats with greater efficiency and precision.
View Video
elastic

AI is cybersecurity's biggest threat

Jul 23, 2025 By Mandy Andress In Elastic
It’s also its greatest defense The biggest threat in our rapidly evolving cybersecurity landscape is artificial intelligence (AI).1 It’s also our greatest defense. Cybersecurity is a high-stakes game where everything is on the line and decisions have to be made fast. For years, cybersecurity strategy has been about increasing visibility to make informed decisions from vast amounts of data.
Read Post
sumologic

Model Context Protocol (MCP) vs Model Control Plane (MoCoP): Why your AI security is screwed if you only have one

Jul 22, 2025 By David Girvin In Sumo Logic
If you’re building AI systems with agents, plugins, and orchestration layers and you’re only thinking about how to route traffic, you’re halfway to being pwned. Everyone’s rushing to build a Model Context Protocol (MCP) — and that’s great. But almost no one’s talking about MoCoP — the Model Control Plane, which is just as important and arguably where the riskiest stuff happens. (Also, side note, who the hell keeps making these damn acronyms so confusing?
Read Post
graylog

5 Ways CISOs Can Use Selective Retrieval to Optimize Data Lakes

Jul 17, 2025 By The Graylog Team In Graylog
Data lakes have evolved. Once treated as passive storage archives, they’re now becoming active components of enterprise risk management. The driver? Selective retrieval — the ability to park large data volumes in cold storage and later retrieve targeted slices for forensic or compliance needs. This shift matters. According to 2025 data from Cybersecurity Insights Group, 73% of enterprises report that SIEM ingestion costs are limiting their real-time analysis capacity.
Read Post

Assess your SIEM's Capabilities

Jul 17, 2025 By Sumo Logic, Inc. In Sumo Logic
The SIEM landscape is undergoing rapid and profound changes, driven by the rise of new threats and innovative technologies. For you, security analysts and engineers, this means reassessing whether your current SIEM solutions are still up to the task. Waiting until after a breach to evaluate your SIEM can lead to disastrous consequences. This webinar provides a clear, no-nonsense roadmap to help you critically evaluate your SIEM, ensuring your security operations are adequate and exceptional.
View Video
elastic

Day in the life of an SOC leader

Jul 17, 2025 By Elastic Security Team In Elastic
A security operations center (SOC) leader is the point person for an organization’s security operations. They run a team of security analysts, engineers, and other specialists. But what exactly do they do on a day-to-day basis? As the person managing the organization’s cybersecurity hub, the SOC leader has to navigate all the complexities that come with it.
Read Post
CrowdStrike

CrowdStrike Named a Leader in the 2025 GigaOm SIEM Radar Report

Jul 16, 2025 By Vicky Ngo-Lam In CrowdStrike
CrowdStrike is proud to be named a Leader and Fast Mover in the 2025 GigaOm Radar for Security Information and Event Management (SIEM). This recognition positions CrowdStrike Falcon Next-Gen SIEM as the core of the AI-native SOC and future of security operations. CrowdStrike earned perfect 5/5 scores in key areas including Attack Surface Coverage, LLM-Based Co-Pilot and Agents, Automation, and Threat Research Units.
Read Post
sumologic

Enhance your cloud security visibility with the updated AWS CloudTrail app

Jul 16, 2025 By Adam White In Sumo Logic
For organizations operating in the cloud, visibility is everything. You need a reliable source of truth to answer “who did what, when, and where,” whether you’re investigating a security incident, chasing compliance goals, or monitoring operational activity. Enter the Sumo Logic CloudTrail App, your go-to solution for transforming raw AWS CloudTrail logs into meaningful, actionable insights.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.