Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

AI-powered fraud detection: Protecting financial services with Elastic

Fraud in financial services is becoming more sophisticated, costing the industry billions annually and eroding customer trust. Recently, Deloitte published an article highlighting the risk AI brings in the form of fraudsters to the financial services industry: “Fake content has never been easier to create — or harder to catch. As threats grow, banks can invest in AI and other technologies to help detect fraud and prevent losses.”

Using Data Pipelines for Security Telemetry

It’s a warm, sunny day as you lie in the sand under a big umbrella. Suddenly, you feel the waves crashing against your feet, only to look down and see numbers, letters, usernames, and timestamps. You try to stand up, but you feel the tide of big data pulling you under… With a jolt, you wake up, realizing that you were having another nightmare about your security Data Lake and analytics.

AI: The Cybersecurity Revolution or Apocalypse? Interview with Steve Wilson at DAVOS 2025

AI is reshaping both innovation and cybercrime, with attackers leveraging its power to outpace traditional defenses. As cybercrime costs surge, organizations must adopt strategies to bridge the cybersecurity skills gap and adopt AI to stay ahead.

DNS Security Best Practices for Logging

Your Domain Name System (DNS) infrastructure enables users to connect to web-based resources by translating everyday language into IP addresses. Imagine going into a restaurant, in the age before the internet, only to find that the staff speaks and the menu is written in a different language from yours. Without some shared communication form, you can’t order dinner, and they can’t give you what you want.

Top 10 Ways Exabeam Support for OpenAPI Will Transform Security Operations

In the fast-evolving landscape of cybersecurity, interoperability and automation are the keys to staying ahead of ever-increasing threats. That’s why Exabeam support for the OpenAPI Specification (OAS) for its Security Orchestration, Automation, and Response (SOAR) capabilities, revolutionizing security operations. Exabeam New-Scale Security Operations Platform is the first SOC platform to support OAS.

Redacting Message Fields for Privacy Purposes

Many organizations today have strict data privacy regulations that they must comply with. These privacy regulations can often clash with the requirements of security, application and operations teams who need detailed log information. This how to guide walks you through redacting message fields for privacy purposes. At Graylog, many of the organizations who use our tool are logging sensitive data that may contain personally identifiable information, health related data or financial data.

Your SIEM is Lying to You: Why You Need UEBA to Uncover the Truth

The way we detect cyber threats has come a long way, but let’s be real—traditional methods have serious blind spots. Back in the day, we relied on correlation rules—basic if-this-then-that logic—to flag suspicious activity. It worked… sort of. But today, exponential data growth has limited the effectiveness of using only correlation rules to detect threats. The result?

Using IP Lookup for Cybersecurity Monitoring

Wherever you live, people can find you using either a street address or a set of latitude and longitude numbers. In the digital world, your website’s domain name or URL is the street address while the IP address is the latitude and longitude. For example, it would be cumbersome to tell people that you live at 35°05′17″N 109°48′23″W, but easy to say a number and street name. IP address data is useful for both protective and detective cybersecurity functions.

Launching a New Era in SOC Productivity: Exabeam New-Scale Analytics and Automation Management

The challenges facing Security Operations Centers (SOCs) are growing as the cybersecurity landscape becomes more complex. Analysts are overwhelmed by too many alerts, outdated workflows, and disconnected tools, making it harder to stay ahead of advanced threats. At Exabeam, we’re changing that. Today, we’re launching Exabeam New-Scale Analytics and updates to Automation Management, two solutions that will raise the bar for SOC operations.

Exabeam Quarterly Product Launch - January 2025: New-Scale Analytics and Automation Management

Exabeam is a global cybersecurity leader that delivers AI-driven security operations. High-integrity data ingestion, powerful analytics, and workflow automation power the industry’s most advanced self-hosted and cloud-native security operations platform for threat detection, investigation, and response (TDIR). With a history of leadership in SIEM and UEBA, and a legacy rooted in AI, Exabeam empowers global security teams to combat cyberthreats, mitigate risk, and streamline security operations.