Login Subscribe

SOC & Automation

Falcon Fusion SOAR Supercharges SOC Automation and Cuts Response Times

Falcon Fusion SOAR Supercharges SOC Automation and Cuts Response Times

CrowdStrike introduced Falcon Fusion SOAR, a native security orchestration, automation, and response platform that plugs directly into the Falcon ecosystem. The solution lets analysts build drag‑and‑drop playbooks, auto‑populate case data, and trigger actions across endpoint, cloud, and third‑party tools without writing code. By handling repetitive triage

Falcon Fusion SOAR Accelerates SOC Automation and Cuts Response Time

Falcon Fusion SOAR Accelerates SOC Automation and Cuts Response Time

CrowdStrike unveiled Falcon Fusion SOAR, a low‑code platform that lets security operations centers stitch together alerts from disparate security tools into automated response playbooks. The solution provides a visual workflow builder, pre‑made integrations, and a shared library so analysts can orchestrate containment, remediation, and evidence‑gathering steps without

VMware vDefend Brings AI‑Powered Zero‑Trust Lateral Controls to Private Clouds

VMware vDefend Brings AI‑Powered Zero‑Trust Lateral Controls to Private Clouds

VMware has introduced vDefend, a zero‑trust module embedded in its private‑cloud stack that enforces granular, policy‑driven controls on east‑west traffic. The solution uses AI/ML analytics to continuously profile workloads, spot deviations from normal behavior, and trigger automated containment actions without human intervention. By integrating directly

CISA Flags Common Open‑Source Tools Fueling Global Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) just issued an advisory that catalogs dozens of publicly available utilities—such as remote access frameworks, credential‑dumping scripts, and network‑mapping scanners—that have repeatedly shown up in high‑profile breaches across continents. By aggregating data from incident reports, vendor disclosures, and

Inside the Mind of Phishers: Why Even Experts Bite

Inside the Mind of Phishers: Why Even Experts Bite

Palo Alto Networks’ Unit42 dissected recent phishing campaigns to uncover the cognitive levers that lure even security‑savvy users. Their study shows attackers weaponize urgency (“Your account will be locked”), perceived authority (spoofed executives or IT staff), and social proof (fake endorsements or shared documents) to override rational decision‑making.

Inside the Mind Games Powering Modern Phishing Attacks

Inside the Mind Games Powering Modern Phishing Attacks

Unit42’s latest investigation dissects how threat actors weaponize basic human instincts—authority, urgency, and social proof—to drive phishing success. By impersonating senior executives, exploiting time‑sensitive crises like supply‑chain disruptions, and mimicking trusted colleagues, attackers create believable narratives that compel recipients to click malicious links or disclose

GitHub Mulls AI Pull‑Request Kill Switch to Block Low‑Quality, Risky Code

GitHub Mulls AI Pull‑Request Kill Switch to Block Low‑Quality, Risky Code

GitHub’s engineering team is debating a new “kill switch” that would automatically reject pull requests identified as being generated by AI code tools. The proposed feature would scan incoming contributions for signatures of AI‑produced snippets and halt the merge process unless a human reviewer explicitly overrides the block.

Real‑Time GreyNoise Blocklists Cut Noise for SMBs

Real‑Time GreyNoise Blocklists Cut Noise for SMBs

GreyNoise launched a new suite of real‑time blocklists designed specifically for small and mid‑sized enterprises. The feeds automatically flag and drop traffic from IPs that have been observed engaging in scanning, credential‑stuffing, or other suspicious behavior, allowing firewalls and proxies to block threats without manual rule creation.