Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Securonix has released a Value Package with OOTB policies for detecting threats across AI platform, identities, agents, data movement, endpoints, and network activity.

Two weeks after Hugging Face disclosed an AI-driven intrusion into part of its production infrastructure, Anthropic said it had found three incidents from its own cyber evaluations. Hugging Face traced its compromise through a data-processing pipeline, where a malicious dataset abused a remote-code dataset loader and a template-injection issue in a dataset configuration.

For years, security teams have built behavioral models around people. We learned that valid credentials only tell so much. A user can have legitimate access to a system and still behave in a way that deserves attention, which is why UEBA became such an important part of modern security operations today – intersecting data from multiple sources over extended periods of time to build a story indicating risk has become an essential tool to identify malicious actors, both insiders and outsiders.

Attackers are learning to target the moments when organisations are trying to be helpful, restoring access quickly while proving who deserves to be trusted again. Ajay Biyani, Senior Vice President, APJ, Securonix Identity conversations usually begin with the login because that is the moment everyone can see. It is where organisations concentrate passwords, MFA, device checks, and risk signals.

Aaron Beardslee, Security Researcher, Securonix Threat Labs As many of you have heard, OpenAI was running a cyber-capability evaluation against advanced models, including GPT-5.6 Sol and a more capable pre-release model with reduced cyber refusals. The environment was meant to be constrained and the model still brute forced through it.

Detection engineering has become one of the least questioned costs in the modern SOC. Teams write queries, tune thresholds, maintain exceptions, and build enrichment logic because that work has gradually become part of running Microsoft Sentinel. While necessary, it still relies heavily on manual effort. Microsoft Sentinel gives security teams a strong foundation for collecting telemetry, investigating incidents, and orchestrating response.

Microsoft Sentinel gives security teams a strong cloud-native foundation. Securonix Threat Analytics extends that foundation with behavior-driven analytics, AI-driven correlation, risk-based prioritization, and continuously curated threat intelligence, without replacing your SIEM, duplicating data, or disrupting existing workflows. Organizations use Securonix to improve detection coverage, accelerate investigation and response, and maximize Microsoft Sentinel ROI.