Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

sumologic

AI across the security lifecycle

Jun 18, 2026 By Michelle Beastall In Sumo Logic
For nearly a decade, the security industry has used machine learning to solve detection. By feeding it enough logs and determining abnormal behaviors, it found the threats that rules-based systems miss. This delivered sharper anomaly detection, fewer false positives, and UEBA is now essential. In fact, threat detection and analytics account for close to 44% of total SIEM spend, the single largest use case by far. Using machine learning for detection was only the start.
Read Post
UTMStack

The 10 Best Vulnerability Scanning Tools for 2026

Jun 18, 2026 By cesmng In UTMStack
At 8:30 a.m., the scan report is already out of date. New cloud instances came online overnight, a container image was rebuilt, developers shipped code, and the security queue is full of findings that still need triage, ownership, and context. The hard part is rarely detection. The hard part is deciding what to fix first and getting that decision to flow into the systems your team already runs every day.
Read Post
UTMStack

Incident Response Automation: A CISO's Guide for 2026

Jun 17, 2026 By cesmng In UTMStack
Your SOC probably looks busy on paper and brittle in practice. Alerts land from email, endpoints, cloud workloads, identity providers, firewalls, and ticketing systems. Analysts swivel between consoles, copy indicators into chat, open cases by hand, and race to decide which events deserve containment and which ones are just noise. That model doesn't break because people are careless. It breaks because the volume, speed, and interdependence of modern environments outgrew manual response a long time ago.
Read Post
exabeam

Why Insider Threats Don't Trigger Alerts

Jun 17, 2026 By Exabeam In Exabeam
Insider threats often don’t trigger alerts because the activity relies on valid credentials, approved tools, and authorized workflows. When viewed as individual events, this behavior looks normal and stays below traditional rule thresholds. Risk accumulates across otherwise valid actions without producing a signal that meets alert thresholds.
Read Post
graylog

FERC and NERC: Cyber Security Monitoring for The Energy Sector

Jun 16, 2026 By Jeff Darrington In Graylog
As cyber threats targeting critical infrastructure continue to evolve, the energy sector remains a prime target for malicious actors. Protecting the electric grid requires a strong regulatory framework and robust cybersecurity monitoring practices. In the United States, the Federal Energy Regulatory Commission (FERC) and the North American Electric Reliability Corporation (NERC) play key roles in safeguarding the power system against cyber risks.
Read Post
elastic

Making Waves: Elastic named a Strong Performer in The Forrester Wave: Extended Detection And Response Platforms, Q2 2026

Jun 16, 2026 By Natalie Blake In Elastic
Elastic has been named a Strong Performer in The Forrester Wave: Extended Detection And Response Platforms, Q2 2026 report. The report recognized our SIEM-replacement capabilities, open data architecture, AI innovation, and endpoint protection. Here's what Forrester found and why we believe it reflects what we've been building.
Read Post
UTMStack

Real Time Threat Detection

Jun 16, 2026 By cesmng In UTMStack
Weekly cyberattacks now average 1,968 per week, up 18% year over year and 70% since 2023, while security teams still take an average of 277 days to identify and contain a breach, according to SentinelOne's cybersecurity statistics roundup. That combination changes the meaning of “real time” in security. It no longer means a dashboard that updates quickly. It means building detection and response so attackers don't get months of freedom between first access and containment.
Read Post

Stop building security dashboards nobody reads

Jun 16, 2026 By Sumo Logic, Inc. In Sumo Logic
On this episode of Masters of Data, we dig into one of data's most contested formats: the dashboard. We explore why so many dashboards get built and never opened, tracing the shift from in-person SOC culture (big screens, shared visibility, immediate feedback) to the remote-work era of folders full of charts no one reviews. The conversation covers North Star metrics, the tension between practitioner and leadership dashboards, and the uniquely tricky problem of security metrics that can look green while a threat actor has quiet dwell time in your environment.
View Video
exabeam

Beyond the Budget: What CISOs Need to Understand About Their CFO Relationship

Jun 16, 2026 By Exabeam In Exabeam
Every CISO has prepared for a budget conversation by building the strongest possible business case. The right data, the right framing, the right numbers. But the security leaders who consistently earn CFO support are not necessarily the ones with the most polished decks. They are the ones who built the relationship that made the ask credible before it ever landed on the table. That distinction came through clearly in a recent conversation between Exabeam CISO Kevin Kirkwood and Exabeam CFO Mike Byron.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.