Security Operations: Page

How to prepare security controls for future AI regulations

With so many competing compliance requirements related to AI, how could any CISO comply with all of them? Learn how to reconcile your AI strategy with the regulatory landscape.

By Bernard Woo • June 2, 2026

EO 14390 raises stakes for enterprise cybersecurity

Reframing cybercrime as a national security issue, EO 14390 could lead to stronger links between government and the private sector. Find out what it means for enterprise security.

By Richard Livingston • May 29, 2026

First month of Mythos Preview testing exposes 10K flaws

Anthropic's Mythos Preview exposed 10,000-plus security flaws at tech giants in one month, revealing both opportunities and risks for the future of cybersecurity.

By Phil Sweeney • May 29, 2026

For CISOs, dawn of OpenAI Daybreak brings good and bad news

OpenAI Daybreak shows how AI reshapes vulnerability discovery. But AI-driven security tools raise accountability questions and fuel the AI arms race between defenders and attackers.

By Craig Galbraith • May 27, 2026

Security platformization vs. best-of-breed: Risks and benefits

With tool sprawl pushing costs and complexity to a breaking point, the choice between unified security platforms and best-of-breed tools has never been more critical.

By Jaikumar Vijayan • May 26, 2026

Taking care of business: The CISO’s role in a cyber crisis

CISOs have a broad range of responsibilities. But when a crisis occurs, they become the de facto leader, entrusted with both technical and business outcomes.

By Paul Kirvan , Sharon Shea • May 20, 2026

SOC vs. MDR: What CISOs need to consider

Security operations centers and managed detection and response providers differ in how they manage threats. What's the best way to choose between a SOC and MDR service?

By Karen Kent • May 18, 2026

Transform SIEM rules with behavior-based threat detection

Outdated SIEM rules can hamstring enterprises as they try to safeguard their operations. Use a proactive, strategic approach that's grounded in actual attack behavior instead.

By Damon Garn • May 13, 2026

CISO’s guide: How to test an incident response plan

Creating an incident response plan is only the beginning. Regular testing will help ensure it doesn't fall apart during a real cybersecurity event.

By Paul Kirvan • May 13, 2026

The breakup: Why CISOs are decoupling data from their SIEMs

Breaking up is hard to do -- but some CISOs find that decoupling SIEMs from security log data feeds is worth it. Learn about the benefits and challenges.

By John Burke • May 10, 2026

How to construct an effective security controls evaluation

Some CISOs believe their security controls are sufficient, but reach that conclusion without any method for measuring their effectiveness. There's a much better way.

By Ed Moyle • May 7, 2026

What every CISO should consider before a SIEM migration

Before starting a SIEM migration, the security team must identify the data, rules, workflows and policies they need to transition to the new tool or service. Here's how to get started.

By John Burke • April 30, 2026

CISO’s guide to centralized vs. federated security models

CISOs must juggle flexibility, consistency and risk when considering the enterprise's security structure. Discover the benefits and drawbacks of different security models.

By Damon Garn • April 30, 2026

How to fix cybersecurity’s agentic AI identity crisis

AI agents are transforming enterprise operations, but their autonomy poses critical security challenges. Learn how to secure these powerful digital actors.

By Matthew Smith • April 28, 2026

News brief: AI woes continue for security leaders

Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading.

By Staff report • April 24, 2026

Is SOAR dead or alive? Sort of

Orchestration and automation capabilities remain critical elements in effective cyber defense. Just don't expect to hear much about SOAR anymore.

By Michael Nadeau • April 23, 2026

At RSAC 2026, AI optimism and anxiety -- and an MIA U.S. government

Depending on whom you ask, AI could mean the end of the world as we know it, or the beginning of a new era of ease and enlightenment in the SOC. Learn more in this video discussion.

By Alissa Irei • April 17, 2026

News brief: Microsoft security vulnerabilities revealed

Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading.

By Staff report • April 17, 2026

Inside the SOC that secured RSAC 2026 Conference

Take a behind-the-scenes look at the technology and teamwork that went into creating the security operations center that protected attendees, vendors and staff at RSAC 2026.

By Sharon Shea • April 15, 2026

How to improve the SOC analyst experience -- and why it matters

Burned-out security analysts miss threats, take longer to investigate incidents and are more likely to quit. Here's how CISOs can improve the SOC analyst experience.

By Sean Kerner • April 15, 2026

Next-generation firewall buyer’s guide for CISOs

NGFWs are crucial tools for modern security operations, but CISOs need to understand the often complex deployment, maintenance and budgeting implications.

By Karen Kent • April 9, 2026

RSAC 2026: Cyber insurance and the rise of ransomware

At RSAC 2026, John Kindervag proposed the idea that the rise of the cyber insurance industry has motivated ransomware threat actors to escalate their attacks and ask for more.

By Richard Livingston • April 8, 2026

Meaningful metrics demonstrate the value of cyber-resiliency

Cyber-resilience metrics translate raw technical performance into real business outcomes. The right analytics can enhance more than just security operations.

By Paul Kirvan • April 6, 2026

5 top SOC-as-a-service providers and how to evaluate them

SOCaaS simplifies security operations. Compare five providers and key evaluation criteria, including tools, automation, threat intelligence and compliance.

By John Burke • April 2, 2026

How AI caught a malicious North Korean insider at Exabeam

A North Korean posing as an American tech worker used GenAI to infiltrate Exabeam's network. But agentic AI found the signals among UEBA noise and exposed him in a matter of seconds.

By Alissa Irei • March 31, 2026