Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

Ranking the top 10 SIEM platforms in 2026

Security information and event management, or SIEM, remains one of the foundational technologies in the security operations center. Gartner defines SIEM as a configurable system of record that collects, aggregates, and analyzes security event data from on-premises and cloud environments to support threat detection, investigation, and response, along with compliance requirements.

The New CISO Ep. 151 - Sean Murphy | Complacency Kills: Why More Discomfort Might Fix Your Burnout

Sean Murphy spent more than twenty years in the CISO chair and walked away from it while things were going well. In this episode of The New CISO, he returns to talk with Steve Moore about trading the operational seat for a field CISO role at F5 — and why getting too good at the job was the warning sign.

Extend Investigations with Falcon Next-Gen SIEM Federated Search and Snowflake

See how CrowdStrike Falcon Next-Gen SIEM Federated Search extends investigations to security data stored in Snowflake without requiring the entire dataset to be ingested into the SIEM. In this demo, an analyst pivots from suspicious endpoint activity in Falcon to Corelight network telemetry retained in Snowflake. Using remoteTable(), the analyst searches the remote data directly from Advanced Event Search, retrieving only the context needed to investigate the affected host and understand the broader scope of the incident.

Try Sumo Logic in minutes: see SIEM and Dojo AI agents in action

You already know the feeling. An alert fires, and you’re the one digging through logs to figure out if it matters. A query takes three tries to get right. A tool demo looked great, but you still cannot picture it running against your own environment. Before dedicating too much of your over-committed schedule to a proof of concept, you want to know one thing: does this actually work the way they say it does?

What OpenAI's Misalignment Reports Tell Security Teams About AI Agents

AI Agents are no longer the new insider threat. They’ve become firmly planted as the primary challenge for security leaders when it comes to insider threat activity. They have credentials, they act autonomously, and increasingly, they can take real actions on real systems. How would you know when one of your digital workers starts doing something it’s never done before?

CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next

On August 20, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) published its Logging Reference Architecture (LRA), the implementation guidance federal civilian executive branch (FCEB) agencies have been waiting for since the Office of Management and Budget's Memorandum M-26-14 reset the requirements for enterprise logging.