Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A stolen password should not open the front door to your entire network. Traditional VPNs were built for a different era. Once a user gets in, too much of the network often becomes reachable. That broad, implicit trust gives ransomware exactly what it needs: an entry point, a path to move, and room to spread.

Intel Chat with Matt Bromiley and Chris Luft. Matt and Chris break down four stories from the week in threat intel: Plus: Google Threat Intelligence Group retires APT/FIN nomenclature for new threat-actor names, and where to find Chris and Matt at Black Hat. Stories covered: Chapters: The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.

Discover how AI transforms governance from a compliance hurdle into a strategic advantage. This isn't just about efficiency; it's about proactive risk reduction and seamless, continuous adherence.

Understanding key visibility gap metrics is crucial in cybersecurity. Differentiate between ordinary and contextual visibility to strengthen your defenses.

Secure App brings runtime application security into Splunk Observability Cloud using the same OpenTelemetry instrumentation as your APM traces to surface the vulnerabilities actually running in production, prioritize them by real-world exploit risk, and catch live attacks. TOC.

Chris O'Brien, Head of Sales Engineering at UpGuard, spent his lunch break at his local fair — carnival games, rides, and all. When we say work-life balance matters to us, we mean it. Sometimes that looks like stepping away from back-to-back meetings to grab a corn dog and a life-size plushie. UpGuard helps organizations manage third-party risk and monitor their attack surface — but great security work starts with a team that's supported enough to log off, recharge, and show up sharp.

Sumo Logic's SOC Analyst Agent automatically triages every insight within the SIEM, replacing the manual work that used to fall to a tier-one analyst. Using Sumo Logic's own SOC as customer zero, we found that 100% of tier-one alerts are triaged end-to-end by the agent, resulting in a 89% reduction in median time to triage, from 28 minutes to 3 minutes. In this demo, you’ll see.

Mobot is Sumo Logic's conversational interface designed to streamline investigations for SOC analysts and observability users. Ask a question in plain English and get a full SOC analyst-style investigation without writing a query. Inside an Insight, Mobot pulls context like the C2IP, ransomware hash, host, and exfiltration data automatically. A six-word question, "anyone else hit by the campaign?", triggers a full investigation across every mailbox and endpoint tied to that attack, with a link to the raw query behind every answer.