Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What the Black Hat NOC taught me about MCP & agentic SOCs (Chapter 2 of 4)

The first time an MCP (Model Context Protocol) server felt real to me, it wasn't because of a clean demo. It was because of the noise. TL;DR: The harness matters more than the protocol, and the evidence matters more than both. MCP earns its keep when it shortens the path from a good security question to trustworthy evidence, and almost everything interesting about making that work happens in the harness wrapped around the model. In this series, I will cover how to build an MCP for an AI SOC.

AWS Summit 2026: Autonomous Security Is Here. Turning It Into Outcomes Requires a New Operating Model

At the recent AWS Summits in New York and Toronto, Arctic Wolf was present to hear AWS introduce a set of security capabilities built to run continuously and act at machine speed. New approaches to vulnerability management, deeper integration of security into development workflows, and expanded context through knowledge mapping all point in the same direction: Security operations are becoming persistent, automated, and increasingly driven by AI.

5 lessons MSPs should take away from Pax8 Beyond 2026

Pax8 Beyond 2026 made one thing clear: the managed services industry has entered a new phase. For years, managed service providers (MSPs) drove growth by adding more tools, more technicians and more services. Today, that model is cracking. AI, automation and rising customer expectations are reshaping how MSPs operate and how they create value. Technology alone is no longer the differentiator.

Building for AEC: 3 Takeaways From the Egnyte AEC Summit 2026

One month ago, architecture, engineering, and construction (AEC) leaders gathered for the Egnyte AEC Summit 2026. By the end of the summit, the message was clear: AEC is moving past AI experimentation and into operational change. Three takeaways defined the day.

Inside EveryOps APAC: What India and Australia's Tech Leaders Are Focused On

Last June, we hosted the first EveryOps Day in Sydney – born from the convergence of DevOps, DevSecOps, and AI/MLOps we were witnessing across every industry in APAC. A year later, with AI’s proliferation across software delivery and security, we took EveryOps Day to Mumbai on May 15, then embarked on the EveryOps Tour: a series of invitation-only executive events across Canberra, Sydney, and Melbourne.

Black Hat Asia 2026: Everything from cat feeders to solar farms

There is a saying you will hear from veterans in the Black Hat Network Operations Center (NOC): “Threat hunting on the Black Hat network is like trying to find a needle in a stack of needles." With dozens of training classes running live exploit chains, capture-the-flag traffic, and researchers probing every corner of the internet, our Corelight sensors generate a rich set of Zeek logs, many of which can look suspicious in varying degrees.