Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

elastic

AI-powered fraud detection: Protecting financial services with Elastic

Jan 24, 2025 By Karen Mcdermott In Elastic
Fraud in financial services is becoming more sophisticated, costing the industry billions annually and eroding customer trust. Recently, Deloitte published an article highlighting the risk AI brings in the form of fraudsters to the financial services industry: “Fake content has never been easier to create — or harder to catch. As threats grow, banks can invest in AI and other technologies to help detect fraud and prevent losses.”
Read Post
graylog

Using Data Pipelines for Security Telemetry

Jan 23, 2025 By Jeff Darrington In Graylog
It’s a warm, sunny day as you lie in the sand under a big umbrella. Suddenly, you feel the waves crashing against your feet, only to look down and see numbers, letters, usernames, and timestamps. You try to stand up, but you feel the tide of big data pulling you under… With a jolt, you wake up, realizing that you were having another nightmare about your security Data Lake and analytics.
Read Post

AI: The Cybersecurity Revolution or Apocalypse? Interview with Steve Wilson at DAVOS 2025

Jan 23, 2025 By Exabeam In Exabeam
AI is reshaping both innovation and cybercrime, with attackers leveraging its power to outpace traditional defenses. As cybercrime costs surge, organizations must adopt strategies to bridge the cybersecurity skills gap and adopt AI to stay ahead.
View Video
graylog

DNS Security Best Practices for Logging

Jan 14, 2025 By Jeff Darrington In Graylog
Your Domain Name System (DNS) infrastructure enables users to connect to web-based resources by translating everyday language into IP addresses. Imagine going into a restaurant, in the age before the internet, only to find that the staff speaks and the menu is written in a different language from yours. Without some shared communication form, you can’t order dinner, and they can’t give you what you want.
Read Post
exabeam

Top 10 Ways Exabeam Support for OpenAPI Will Transform Security Operations

Jan 13, 2025 By Exabeam In Exabeam
In the fast-evolving landscape of cybersecurity, interoperability and automation are the keys to staying ahead of ever-increasing threats. That’s why Exabeam support for the OpenAPI Specification (OAS) for its Security Orchestration, Automation, and Response (SOAR) capabilities, revolutionizing security operations. Exabeam New-Scale Security Operations Platform is the first SOC platform to support OAS.
Read Post
graylog

Redacting Message Fields for Privacy Purposes

Jan 10, 2025 By The Graylog Team In Graylog
Many organizations today have strict data privacy regulations that they must comply with. These privacy regulations can often clash with the requirements of security, application and operations teams who need detailed log information. This how to guide walks you through redacting message fields for privacy purposes. At Graylog, many of the organizations who use our tool are logging sensitive data that may contain personally identifiable information, health related data or financial data.
Read Post
exabeam

Your SIEM is Lying to You: Why You Need UEBA to Uncover the Truth

Jan 10, 2025 By Exabeam In Exabeam
The way we detect cyber threats has come a long way, but let’s be real—traditional methods have serious blind spots. Back in the day, we relied on correlation rules—basic if-this-then-that logic—to flag suspicious activity. It worked… sort of. But today, exponential data growth has limited the effectiveness of using only correlation rules to detect threats. The result?
Read Post
graylog

Using IP Lookup for Cybersecurity Monitoring

Jan 8, 2025 By Jeff Darrington In Graylog
Wherever you live, people can find you using either a street address or a set of latitude and longitude numbers. In the digital world, your website’s domain name or URL is the street address while the IP address is the latitude and longitude. For example, it would be cumbersome to tell people that you live at 35°05′17″N 109°48′23″W, but easy to say a number and street name. IP address data is useful for both protective and detective cybersecurity functions.
Read Post
exabeam

Launching a New Era in SOC Productivity: Exabeam New-Scale Analytics and Automation Management

Jan 7, 2025 By Exabeam In Exabeam
The challenges facing Security Operations Centers (SOCs) are growing as the cybersecurity landscape becomes more complex. Analysts are overwhelmed by too many alerts, outdated workflows, and disconnected tools, making it harder to stay ahead of advanced threats. At Exabeam, we’re changing that. Today, we’re launching Exabeam New-Scale Analytics and updates to Automation Management, two solutions that will raise the bar for SOC operations.
Read Post

Exabeam Quarterly Product Launch - January 2025: New-Scale Analytics and Automation Management

Jan 7, 2025 By Exabeam In Exabeam
Exabeam is a global cybersecurity leader that delivers AI-driven security operations. High-integrity data ingestion, powerful analytics, and workflow automation power the industry’s most advanced self-hosted and cloud-native security operations platform for threat detection, investigation, and response (TDIR). With a history of leadership in SIEM and UEBA, and a legacy rooted in AI, Exabeam empowers global security teams to combat cyberthreats, mitigate risk, and streamline security operations.
View Video

Exabeam Quarterly Product Launch - January 2025: Overview

Jan 7, 2025 By Exabeam In Exabeam
About Exabeam Exabeam is a global cybersecurity leader that delivers AI-driven security operations. High-integrity data ingestion, powerful analytics, and workflow automation power the industry’s most advanced self-hosted and cloud-native security operations platform for threat detection, investigation, and response (TDIR). With a history of leadership in SIEM and UEBA, and a legacy rooted in AI, Exabeam empowers global security teams to combat cyberthreats, mitigate risk, and streamline security operations.
View Video
devo

Beyond SIEM: Transform Into a Data-Driven Organization With Devo

Jan 6, 2025 By Devo In Devo
The Devo Platform has earned its reputation as a powerful and innovative force in Security Information and Event Management (SIEM). Customers rely on Devo to detect and respond to threats in real time, gain complete visibility into their security posture, and streamline their security operations. But the core strengths that make Devo a SIEM leader – unmatched scalability, real-time analytics, and flexible customization – also enable us to solve a variety of other data challenges.
Read Post
graylog

Why Patching Isn't the Ultimate Goal in Cybersecurity

Jan 6, 2025 By The Graylog Product Team In Graylog
A recent analysis by JPMorganChase criticized the CVSS scoring process, finding missing context leads to misleading prioritization. When it comes to cybersecurity, patching vulnerabilities often feels like the Holy Grail. Get those CVEs patched, and you’re safe, right? Well, not exactly. As we know, patching isn’t as straightforward—or as effective—as we’d like to believe.
Read Post
Cybriant

8 Reasons to Opt for Managed SIEM for Your Business

Jan 5, 2025 By Cybriant In Cybriant
In today’s rapidly evolving cybersecurity landscape, businesses face an ever-growing number of threats. From sophisticated malware attacks to data breaches, staying ahead of cybercriminals can feel like a daunting task. One essential tool in defending your organization is a Security Information and Event Management (SIEM) system.
Read Post
graylog

Building a Security Data Lake Strategy

Jan 2, 2025 By Jeff Darrington In Graylog
The high volumes of security data that cloud environments generate leave security teams swimming in data, but many feel like they need a life preserver to improve their incident response capabilities. Enter security data lakes. As the costs associated with data retention become overwhelming, organizations are embracing the idea of security data lakes and data warehouses.
Read Post
Internxt

The Benefits & Features of SIEM Compliance to Build a Secure Business

Jan 2, 2025 By Internxt In Internxt
Factors such as scalability, budget, and security must be considered for businesses considering their cloud storage and data management needs. Still, one of the most crucial factors that must be accounted for is what compliance standards must be met. Compliance with GDPR, HIPPA, SIEM, or other bodies ensures the organization adheres to legal, regulatory, and industry standards that are met to protect sensitive data.
Read Post
Sponsored Post
eventsentry

Capturing Network Traffic anytime

Jan 1, 2025 By ingmar.koecher In EventSentry
Capturing network traffic is usually done either for security reasons or to troubleshoot networking issues. But by the time you initiate a network capture (either manually or automatically) it’s often too late already – the train has already left the station. Point in case: Say your SIEM (obviously EventSentry) detects abnormal or suspicious behavior in a log and a network capture is initiated.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.