Login Subscribe

SOC & Automation

Edge Threat Surge: Adversaries Target Perimeter Gaps

Edge Threat Surge: Adversaries Target Perimeter Gaps

GreyNoise’s 2026 State of the Edge report reveals a pronounced shift in attacker tactics toward edge infrastructure. By exploiting the blind spots left by traditional perimeter defenses—such as CDN nodes, DNS resolvers, and cloud‑front gateways—threat actors can bypass corporate firewalls and gain footholds closer to end

CLAIR Model Empowers Defenders to Map and Mitigate Infrastructure Cascade Risks

CLAIR Model Empowers Defenders to Map and Mitigate Infrastructure Cascade Risks

The SANS diary recently unveiled the CLAIR (Critical Infrastructure Interdependency) model, a systems‑of‑systems framework that charts how the nation’s essential sectors—energy, transportation, finance, health, and more—rely on each other. By visualizing these links, defenders can pinpoint where a cyber‑physical breach in one domain could

Edge‑First OT Security Cuts Dwell Time with AI‑Powered Light Agents

Edge‑First OT Security Cuts Dwell Time with AI‑Powered Light Agents

Unit42 has published a new OT edge security model that moves threat detection from central SCADA servers to the devices themselves. Lightweight agents are installed on PLCs, RTUs, and other field equipment, feeding real‑time telemetry into an AI engine that profiles normal behavior and flags deviations at the source.

Falcon Fusion SOAR Supercharges SOC Automation at Scale

Falcon Fusion SOAR Supercharges SOC Automation at Scale

CrowdStrike’s Falcon Fusion SOAR platform lets security operations teams coordinate automated response actions across endpoints, cloud workloads, and third‑party security tools from a single console. The solution ships with a library of pre‑built playbooks for common threats and supports custom scripting, enabling SOCs to move incidents from

Scale SOC Automation Fast with CrowdStrike Falcon Fusion Playbooks

Scale SOC Automation Fast with CrowdStrike Falcon Fusion Playbooks

CrowdStrike’s recent blog walks security teams through extending their SOC using Falcon Fusion, the vendor’s native SOAR platform. By leveraging a library of pre‑built playbooks and a drag‑and‑drop workflow editor, analysts can automate repetitive triage steps, automatically prioritize high‑impact alerts, and orchestrate actions across

VMware vDefend Brings Zero‑Trust Lateral Defense to Private Clouds

VMware vDefend Brings Zero‑Trust Lateral Defense to Private Clouds

VMware introduced vDefend, a service that extends zero‑trust principles into private‑cloud environments. It continuously monitors east‑west traffic, automatically detects suspicious lateral movement, and isolates compromised workloads in real time. The solution builds on NSX micro‑segmentation, applying granular, policy‑driven controls without the need for manually crafted

Falcon Fusion SOAR Supercharges SOC Automation and Incident Consistency

Falcon Fusion SOAR Supercharges SOC Automation and Incident Consistency

CrowdStrike introduced Falcon Fusion SOAR, a cloud‑native platform that lets security operations teams stitch together existing security tools and automate repetitive response steps. The solution ships with a curated library of pre‑built playbooks mapped to MITRE ATT&CK techniques, enabling analysts to launch coordinated actions—such as