Security Operations: Page

CISA red team reveals why some SOCs fail and others succeed

CISA tested two critical infrastructure SOCs with similar red team tactics. The results expose dangerous gaps in detection, response and credential security.

By Sharon Shea • Aug. 28, 2026

Autonomous AI exploits raise stakes for vulnerability management

AI agents are increasingly finding and exploiting software vulnerabilities. The bigger challenge for security teams is figuring out which of those flaws matter most.

By Craig Galbraith • Aug. 25, 2026

Unifying FinOps and SecOps: The case for FinSecOps

The financial and operational aspects of security don't need to be separate disciplines. Is it time to consider a FinSecOps approach to defending your organization?

By Damon Garn • Aug. 20, 2026

Governance and best practices for automating vulnerability scans

Scanning the network for vulnerabilities is not just a routine operation. It should be part of a comprehensive security initiative that aligns with risk tolerance.

By Damon Garn • Aug. 14, 2026

Black Hat NOC sees AI security failures firsthand

A disturbing trend is unfolding on the ground at Black Hat's elite network operations center: As AI takes off, cyber-risk is rising too. Here's what the NOC wants CISOs to know.

By Alissa Irei • Aug. 14, 2026

Behind the scenes at Black Hat’s network operations center

Step inside Black Hat's guarded NOC, where nearly unlimited threats meet unlimited resources, and security experts battle hackers, deploy custom AI agents and mitigate attacks.

By Sharon Shea • Aug. 12, 2026

How the AEGIS framework mitigates agentic AI risks

Learn how Forrester's AEGIS framework can help organizations securely deploy agentic AI, shifting from static controls to dynamic risk assessment that balances innovation with safety.

By Mary Pratt • Aug. 5, 2026

Vulnerability management needs an update for the AI era

AI accelerates exploit timelines from months to hours. Organizations must shift from patch-all to risk-based prioritization using exploitability metrics.

By Jaikumar Vijayan • July 29, 2026

A CISO’s guide to security data lakes

A security data lake gives organizations a centralized repository of security information, but it can pose governance and operational risks.

By Damon Garn • July 27, 2026

Behavioral biometrics: How to detect nonhuman threat actors

How do security teams distinguish between people and AI? It's getting harder, but behavioral biometrics might help discern human users from machine impersonators.

By Johna Johnson • July 21, 2026

How to operationalize threat modeling with AI

AI tools streamline threat modeling by automating repetitive tasks and helping security teams prioritize risks more effectively. But human oversight is still critical.

By William Dupre • July 9, 2026

CISO’s guide to hiring for the right cybersecurity skills

The cybersecurity talent gap won't be solved by head count alone. CISOs need to fundamentally rethink how they recruit, how they retain talent and what skills they really need.

By Mary Pratt • July 8, 2026

The AI vulnerability storm is here: Is your security program ready?

AI platforms are poised to accelerate vulnerability discovery and exploitation faster than humans can manage. It's time for CISOs to rethink their security strategies.

By Jaikumar Vijayan • July 6, 2026

Perimeter to posture: A roadmap to zero trust maturity

Transforming an organization to take on a zero-trust posture is no small affair. A phased, thoughtful approach can bolster security while supporting business outcomes.

By Damon Garn • July 2, 2026

The agentic AI ‘lethal trifecta’: What CISOs should know

The very capabilities that make an AI agent useful also make it dangerous. Here's what CISOs should know about the agentic AI lethal trifecta, and what they should do about it.

By John Burke • July 1, 2026

How agentic AI threat intelligence aids NGO cyber defense: Case study

NGOs often lack the resources and expertise to defend against modern threat actors. Learn how one nonprofit is harnessing agentic AI threat intelligence to flip the script.

By Sean Kerner • June 27, 2026

A CISO’s guide to infostealers: Prevention and detection

Infostealers aren't new. But what is new is that almost anyone -- regardless of skill -- can now deploy the malware. Update incident response plans to safeguard your operations.

By Karen Kent • June 22, 2026

Florida public sector training on SimSpace cyber range: Case study

Cyber ranges, once the domain of national defense agencies, are becoming more widely accessible. In the public sector, the state of Florida is leading the charge.

By Alissa Irei • June 15, 2026

Cyber insurance forces companies to rethink risk management

In this edition of the Reporters' Notebook video series, our cybersecurity reporters explore why cyber insurance is forcing organizations to quantify risk.

By Richard Livingston • June 15, 2026

What CISA’s new remediation directive means for CISOs

CISA's updated directive for federal agencies compresses mandatory patching timelines to just three days for high-risk flaws, urging practitioners to 'patch smarter, not harder.'

By Sharon Shea • June 13, 2026

It’s time to update incident response for the AI era

Your latest cybersecurity incident might not be a threat actor, but an internal AI agent doing what it's authorized to do. Incident response must evolve to accommodate AI.

By Richard Livingston • June 12, 2026

Gartner Security & Risk Management Summit 2026: Adapting for AI

Check out SearchSecurity's Gartner Security & Risk Management Summit guide for reports on notable presentations and sessions on the latest security topics.

June 10, 2026

What is incident response? A complete guide

Incident response is an organized, strategic approach to detecting and managing cyberattacks in ways that minimize damage, recovery time and total costs.

By Alissa Irei , Sharon Shea • June 10, 2026

CISO role changes as cyber-risk appetites in the C-suite grow

As cybersecurity fears in the C-suite wane, the cyber-risk appetites of executives and boards are changing. Find out what it means for cybersecurity spending and the CISO role.

By Richard Livingston • June 8, 2026

Lost in translation: Cybersecurity board reporting for CISOs

Cybersecurity board reports don't always land. At the Security and Risk Management Summit 2026, Gartner analysts suggested a novel way to communicate cyber-risk to corporate directors.

By Richard Livingston • June 4, 2026