Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Hunting the Unknown: How AI-Powered Analytics Are Redefining Cyber Threat Detection

Cybersecurity is in an arms race — attackers are using AI to launch deepfake fraud, polymorphic malware, and insider-driven threats at scale. But AI is also rewriting the rules for defenders. In this webinar, Sheik Abideen (Regional Sales Director, MEA) and Zubair Mukhtar Chowgale (Manager, Sales Engineering, APMEA) reveal how Securonix Unified Defense SIEM powered by Agentic AI helps overwhelmed SOC teams transform into proactive threat hunters.

Cyberthreats, translation errors - how online English helps to avoid threats

Open your email on a Monday morning and chances are, something feels off. Maybe it's a message from "your bank" that doesn't sound quite right, or a supposed colleague urging you to act fast. Usually, the first clue is not the logo or even the address, it's the words. Awkward grammar, unusual phrasing, a sentence that doesn't belong. Even small errors often act as warning signs for much larger problems. When language betrays the scam.

How NDR contributes to visibility and security in the cloud

Join Youssef Agharmine, the technical security expert from Corelight for a live webinar focusing on how to extend visibility and identify attacks during the transition to cloud infrastructure. What you’ll learn: This will be a technical presentation—we’ll be demoing Corelight in the cloud!

How To Threat Hunt in Encrypted Network Traffic

Threat hunters need evidence to find adversaries. Networks offer a broad and reliable source of evidence, helping hunters make sense of movement across their environment via an immutable record of activity. Traffic, unlike endpoints, cannot lie. But the rise of encryption complicates this picture, especially where decryption isn't an optimal or possible solution.

Advanced Persistent Threat: What They Are and Why They Matter

Nearly everyone has had “that cold,” the one where most symptoms have resolved except that lingering cough. The cough can continue for weeks or months, all while you feel mostly well across the board. In cybersecurity, an advanced persistent threat (APT) is your IT environment’s lingering cough, albeit a much more damaging one. An APT stealthily gains initial access to your company’s systems and networks, then hides within them to complete objectives.

From weeks to minutes: How Sumo Logic's historic baselining supercharges UEBA

Spotting threats fast and knowing whether they really matter is the name of the game in cybersecurity. That’s where user and entity behavior analytics (UEBA) comes in, and why Sumo Logic’s latest innovation, historic baselining, is a big deal. With this release, Sumo Logic has turned the old UEBA model on its head, delivering insights that used to take weeks of learning time in just minutes. Here’s how and why that’s a game changer.

CrowdStrike Signal: Detect the Undetectable

Modern adversaries hide in plain sight by blending malicious activity with normal system behavior, making it difficult for traditional detection tools to identify threats early. CrowdStrike Signal uses self-learning AI to turn scattered signals into high-confidence Automated Leads that help analysts stop breaches before they escalate.

CrowdStrike Signal Transforms AI-Powered Threat Detection

Security teams don't need more alerts. They need the ability to detect what others miss. That's why we're excited to announce the general availability of CrowdStrike Signal, a new class of AI-powered detection that surfaces the stealthy threats others often overlook — before they escalate. CrowdStrike Signal represents a fundamental shift in how organizations detect and respond to modern threats.

Corelight data and LLMs

Corelight has been an innovator and leader in AI and Large Language Model (LLM) adoption for almost 2 years. We introduced our first use of LLMs in our Open NDR platform Investigator in November of 2023. Since then, we have continued to push the boundaries of the possible by working with AI model builders on cybersecurity-specific training and expanding LLM use within Investigator to include data analysis and summaries.

Corelight announces industry's first MCP server exposing detailed network data and alerts

Corelight’s GenAI Accelerator Pack features the industry's first Model Context Protocol (MCP) server, specifically designed to facilitate easier access to detailed network data and alerts for cybersecurity AI agents and enhance the analysis of network security information. The announcement comes at a pivotal moment for cybersecurity.