Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corelight Agentic Triage overview

Corelight is excited to introduce Agentic Triage! In this demo, you can see how Agentic Triage helps SOC analysts filter through alerts and respond quickly to active threats. We combine generative AI with our industry leading log framework to identify the detections and cases that truly matter. This video shows how you can use Agentic Triage to quickly perform deep dives into open detections and make confident decisions to secure your network.

When Quantum Turns Encryption Into a Time Problem

If your encrypted traffic was captured today, would it still be private in ten years? That question changes the conversation. Leaders are used to asking, “Is it encrypted?” Now they are asking, “How long does it stay confidential?” That is where post quantum cryptography, or PQC, comes in. Its role is to strengthen the foundations of a secure connection by improving how trust is established before any data is exchanged. Today’s encryption still works.

What to Know About Security Camera Systems and Cyber Risk

Modern office buildings rely on networked cameras to keep people and property safe. Most people see a camera and feel a sense of protection. They do not often think about the wires or the data behind the lens. These devices are small computers that live on your main business network. They send video signals through cables hidden in the walls and ceilings. If these paths are not secure, the whole system can fail.

Growing Pains: Headaches from Network M&A

Growth through acquisition can accelerate market reach and revenue. But it often leaves IT teams managing a fragmented network environment. When your organization is adding two new locations per month, each with its own carrier contracts, circuit types, and support agreements, the result is a patchwork infrastructure that’s expensive to maintain and difficult to secure. For IT professionals tasked with keeping systems stable while supporting aggressive expansion, this creates a critical challenge.

Fueling Cisco XDR with Corelight high-fidelity network evidence

From hunting threats to solving complex problems to coding on a couch, adventures in the Black Hat NOC (Network Operations Center) are always interesting. Over the last few months and several shows, I’ve had the privilege of working with one of the other NOC partners, Cisco, to design and test our first integration between Corelight Investigator and Cisco XDR.

SIP Trunking Security in 2026: What Enterprises Must Know Before Their Next Breach

Telecom fraud exceeded an estimated $41.82 billion in losses in 2025 - and a substantial share of that exposure runs directly through SIP trunks. The SIP trunking market itself reached $73.14 billion that same year, and is projected to more than double to $157.91 billion by 2030, according to Mordor Intelligence. That collision of rapid adoption and surging fraud is not a coincidence. Enterprises are migrating voice infrastructure to IP-based systems faster than security teams are adapting their threat models to cover them. In 2026, SIP trunking is business-critical infrastructure.

From alerts to entities: Transforming the SOC with Corelight Agentic Triage

The cybersecurity landscape has fundamentally shifted in the last several years. Adversaries are no longer just using AI to draft phishing emails; they're deploying autonomous AI agents capable of executing end-to-end attack chains, from initial reconnaissance through lateral movement and data exfiltration. Anthropic's1 analysis of recent incidents indicates a rapid acceleration in attacker adoption of agentic workflows, dramatically shortening the time between initial access and impact.

Cato CTRL Threat Research: Vishing and Microsoft Teams Used to Deliver PhantomBackdoor

Cato CTRL has discovered a q-based delivery technique used against an Italy-based consumer services company associated with PhantomBackdoor, a multi-stage WebSocket-based backdoor previously reported in a Ukraine-focused spear phishing operation by SentinelOne. In SentinelOne’s earlier reporting, initial access relied on phishing lures and a ClickFix-style flow that triggered a staged PowerShell and ended with a WebSocket backdoor.

Meet the Industry's First GPU-Powered SASE Platform with Native AI Security

AI has moved from experimentation to a strategic enterprise imperative. It’s no longer about whether organizations will adopt AI, but whether their security architecture can govern it at the speed and scale at which it is being embedded into the business. This is not a future concern. It is today’s operational mandate to: Securing AI is not limited to software applications and agents.

How to Scale Application Traffic Automatically with A10 FlexPool

How to Scale Application Traffic Automatically with A10 FlexPool Priyanka Mullan, Senior Product Marketing Manager at A10 Networks, explains how FlexPool revolutionizes application delivery by dynamically allocating resources based on real-time user demand. Whether you are managing a sudden traffic surge from a major online event or balancing workloads across a hybrid cloud environment, FlexPool ensures your infrastructure scales automatically, without manual intervention. Learn how to maintain peak application performance while significantly reducing operational costs.