Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

US Offers $10 Million Reward for Tips About State-Linked RedLine Cybercriminals

How would you like to earn yourself millions of dollars? Well, it may just be possible - if you have information which could help expose the identities of cybercriminals involved with the notorious RedLine information-stealing malware. The US Department of State is offering up to US$10 million for information about the government-backed hackers believed to be behind RedLine malware attacks, which have included US critical infrastructure among their targets.

The Hidden Stress of Being a SOC Analyst. Nobody Talks About This

"You feel the weight of the organization on you" - Grant Oviatt reveals the emotional reality of being a SOC analyst that nobody talks about. When you find something bad, there's that panic moment of "what do I do?" while knowing the entire organization depends on your response speed. This is why AI agents providing instant remediation actions can be a game-changer for analyst mental health and response times.

99% False Positives. Why Security Analysts Are Burned Out

•The brutal truth about cybersecurity work: Analysts spend their days chasing 99% false positive alerts instead of doing meaningful security work. Grant Oviatt reveals why security professionals didn't get into the field to send Slack messages asking if someone is "supposed to be traveling to Mexico today." This is why AI agents are becoming essential - to let security pros focus on what they actually signed up for!

AI-Driven Cyber Defense in Action: How AI Agents Are Saving SOC Analysts From Burnout

AI-powered SOC platforms are revolutionizing cybersecurity by dramatically reducing false positives and enabling analysts to focus on high-value security work. In this episode of Data Security Decoded, join Caleb Tolin as he sits down with Grant Oviatt, Head of Security Operations at Prophet Security, to explore how AI agents are transforming security operations centers (SOCs) and reshaping the future of cyber defense.

Security Bulletin: Revolver Rabbit and the Rise of RDGAs

Their domains typically follow repeatable patterns, such as dictionary words plus numeric suffixes (e.g., private-jets-99557bond). Additional variants use short alphanumeric suffixes or double dashes, complicating rule-based detection (Infoblox Blog, 2024). These syntactic variations often evade traditional string-matching techniques, requiring DNS-layer telemetry and clustering for full visibility (Infoblox Research Report, 2024).

New Ransomware Groups Emerging in Late May 2025: A Threat Intelligence Overview

As of the end of May 2025, seven new ransomware groups have surfaced with active leak sites and confirmed victim postings. These groups—Silent Ransomware, Gunra Ransomware, JGroup Ransomware, IMN Crew, DireWolf Ransomware, DataCarry Ransomware, and SatanLock Ransomware have demonstrated early signs of active targeting and data exfiltration campaigns. This blog provides a detailed breakdown of their activity, initial victimology, and attribution by geography where applicable.

How Corelight Helped a Customer Reject a $10M Ransomware Demand

Corelight CEO Brian Dye shares the high-stakes story of a customer under a $10 million ransomware attack. The attackers claimed to have stolen sensitive IP—but with Corelight, the customer had the network visibility to verify exactly what was taken. The result? They confirmed the stolen data was limited and non-critical, enabling them to confidently deny the ransom demand. This powerful story illustrates the difference between “I think” and “I know”—and how that clarity can drive executive confidence, legal defensibility, and real-world savings.

AI Agents Never Sleep. The Future of Cybersecurity SOC Operations

AI agents are revolutionizing cybersecurity by handling the tedious false positive alerts that drain SOC analysts. As our security perimeter expands to the cloud, we're drowning in red blinking lights - but AI agents never tire and never sleep! Grant Oviatt from Prophet Security explains how AI is solving the alert fatigue problem that's plaguing security teams worldwide. Key Points: AI agents handle repetitive security tasks False positive alerts are overwhelming analysts Cloud expansion = more security alerts AI works 24/7 without fatigue.