Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Incident and Event Management.

Traditional Security Can't Stop LOTL Attacks. Exabeam UEBA Destroys Them.

Attackers are becoming more sophisticated and stealthier. Their methods are more advanced. Of these advanced methods, living-off-the-land (LOTL) attacks are the sneakiest and most effective. By using legitimate tools and processes already in your environment, malicious actors can get what they want without being seen. But with the Exabeam New-Scale Security Operations Platform and our industry leading user and entity behavior analytics (UEBA), security teams can stop them.

Behind the scenes of Elastic Security's generative AI features

A quantitative approach to prompt tuning and LLM evaluation Elastic has long been developing machine learning (ML) and AI-powered security detections. We constantly bring in new technologies when available to help make our users’ lives easier. So, with the rise of generative AI (GenAI), we have developed even more Elastic Security features to use this powerful, new technology. Among those are.

AI-powered fraud detection: Protecting financial services with Elastic

Fraud in financial services is becoming more sophisticated, costing the industry billions annually and eroding customer trust. Recently, Deloitte published an article highlighting the risk AI brings in the form of fraudsters to the financial services industry: “Fake content has never been easier to create — or harder to catch. As threats grow, banks can invest in AI and other technologies to help detect fraud and prevent losses.”

Using Data Pipelines for Security Telemetry

It’s a warm, sunny day as you lie in the sand under a big umbrella. Suddenly, you feel the waves crashing against your feet, only to look down and see numbers, letters, usernames, and timestamps. You try to stand up, but you feel the tide of big data pulling you under… With a jolt, you wake up, realizing that you were having another nightmare about your security Data Lake and analytics.

AI: The Cybersecurity Revolution or Apocalypse? Interview with Steve Wilson at DAVOS 2025

AI is reshaping both innovation and cybercrime, with attackers leveraging its power to outpace traditional defenses. As cybercrime costs surge, organizations must adopt strategies to bridge the cybersecurity skills gap and adopt AI to stay ahead.

DNS Security Best Practices for Logging

Your Domain Name System (DNS) infrastructure enables users to connect to web-based resources by translating everyday language into IP addresses. Imagine going into a restaurant, in the age before the internet, only to find that the staff speaks and the menu is written in a different language from yours. Without some shared communication form, you can’t order dinner, and they can’t give you what you want.

Top 10 Ways Exabeam Support for OpenAPI Will Transform Security Operations

In the fast-evolving landscape of cybersecurity, interoperability and automation are the keys to staying ahead of ever-increasing threats. That’s why Exabeam support for the OpenAPI Specification (OAS) for its Security Orchestration, Automation, and Response (SOAR) capabilities, revolutionizing security operations. Exabeam New-Scale Security Operations Platform is the first SOC platform to support OAS.

Redacting Message Fields for Privacy Purposes

Many organizations today have strict data privacy regulations that they must comply with. These privacy regulations can often clash with the requirements of security, application and operations teams who need detailed log information. This how to guide walks you through redacting message fields for privacy purposes. At Graylog, many of the organizations who use our tool are logging sensitive data that may contain personally identifiable information, health related data or financial data.

Your SIEM is Lying to You: Why You Need UEBA to Uncover the Truth

The way we detect cyber threats has come a long way, but let’s be real—traditional methods have serious blind spots. Back in the day, we relied on correlation rules—basic if-this-then-that logic—to flag suspicious activity. It worked… sort of. But today, exponential data growth has limited the effectiveness of using only correlation rules to detect threats. The result?

Using IP Lookup for Cybersecurity Monitoring

Wherever you live, people can find you using either a street address or a set of latitude and longitude numbers. In the digital world, your website’s domain name or URL is the street address while the IP address is the latitude and longitude. For example, it would be cumbersome to tell people that you live at 35°05′17″N 109°48′23″W, but easy to say a number and street name. IP address data is useful for both protective and detective cybersecurity functions.