Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

Detect Data Exfiltration Techniques with Falcon Next-Gen SIEM

Sensitive data theft is among adversaries’ most common goals. For defenders, data exfiltration can lead to the compromise of customer data, public exposure of trade secrets, and potentially permanent business and reputational damage. Victims of data exfiltration may also face legal issues for non-compliance with data protection laws. This must be a top concern for businesses.

Monitor your Atlassian audit records and event logs with Datadog Cloud SIEM

Collaboration platforms like Atlassian Jira and Atlassian Confluence contain sensitive company and employee data, making them critical targets for cyberattacks. Teams use Jira to track and manage projects, and rely on Confluence as an internal knowledgebase for documentation, company policy guides, team wikis, and more. Atlassian organizations, which provide a centralized place for admins to manage their Atlassian products and users, are also prime targets.

Adversary Tradecraft: A Deep Dive into RID Hijacking and Hidden Users

Researchers at AhnLab Security Intelligence Center (ASEC) recently published a report on the Andariel threat group, a DPRK state-sponsored APT active for over a decade, that has been leveraging RID hijacking and user account concealment techniques in its operations to stealthily maintain privileged access to compromised Windows systems.

State of the SIEM Market

Navigate a shifting SIEM market: Challenges, lessons and strategic insights The SIEM market is evolving, and legacy systems struggle to keep up with today’s complex security challenges. Many mid-to-large enterprises, particularly those with revenues up to $5B, find outdated SIEMs hinder their agility and responsiveness. Vendor consolidation and shifting market dynamics add to the difficulty of selecting the right solution.

Using Streaming Data for Cybersecurity

After a long day, you sit down on the couch to watch your favorite episode of I Love Lucy on your chosen streaming platform. You decide on the episode where Lucy can’t keep up with the chocolates on the conveyor belt at the factory where she works. Without realizing it, you’re actually watching an explanation of how the streaming platform – and your security analytics tool – work. Data streaming is the real-time processing and delivery of data.

From our DevSecOps teams to yours: Discover Mo Copilot

Join Rowan Noronha, Kui Jia, and John Visneski as they explore how cutting-edge AI is revolutionizing DevOps and security workflows with Sumo Logic Mo Copilot, an innovative AI-powered assistant designed to simplify and accelerate DevSecOps operations. Learn how Copilot leverages natural language processing to address common challenges such as troubleshooting, threat response, and unified data integration, offering teams unprecedented efficiency and clarity.

Proficio utilizes Elastic Security for threat management and AI integration

Brad Taylor, CEO and co-founder of Proficio, discusses the dynamics of cybersecurity, the essentials of managed detection and response, and how Proficio leverages Elastic and AI to protect global organizations from emerging threats. About Elastic Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. Elastic’s solutions for search, observability, and security are built on the Elastic Search AI Platform — the development platform used by thousands of companies, including more than 50% of the Fortune 500.

See CrowdStrike Falcon NG-SIEM in Action

In a world of stealthy, fast-moving threats and ever-increasing log volumes, defenders need an edge that’s orders of magnitude faster, smarter, and more scalable than current approaches. Watch this video to see how to detect and stop the adversary Odyssey Spider quickly with CrowdStrike Falcon Next-Gen SIEM. Seamlessly extend the capabilities of the world-leading CrowdStrike Falcon platform to all data sources while stopping breaches and slashing costs compared to siloed tools.

Centralized Log Management for NIS2 Directive Compliance

As digital transformation expands the threat landscape, compliance mandates adapt to meet new challenges. In 2020, the European Commission announced its decision to accelerate its revision of the Directive on Security of Network and Information Systems (NIS2). When carrying out its impact assessment, the Commission realized that it needed to update the NIS Directive in response to new risks.