When a vendor says “AI-powered SOC,” they could mean anything from a basic machine learning model trained on historical alert data to a fully autonomous agent that triages, investigates, and responds without human input. Both get marketed identically. Most of what’s currently sold as an “AI SOC agent” falls into one of three categories, and […]
The AI SOC Agent Hype: Separating Reality from Marketing Read More »
Recognized by Fast Company, TAG is a trusted next generation research and advisory company that utilizes an AI-powered SaaS platform to deliver on-demand insights, guidance, and recommendations to enterprise teams, government agencies, and commercial vendors in cybersecurity and artificial intelligence, Download TAG Analyst Report Is the human-augmented autonomous SOC a contrarian idea or the next
Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think) Read More »
Bullish on Autonomous SOC. Realist about what gets us there. There’s been plenty of talk lately about the Autonomous SOC — a future where machines don’t just alert but correlate, triage, investigate, and respond. It sounds fantastic, especially if you’ve ever worked the night shift buried in alerts. But here’s the truth: you can’t automate
In today’s hybrid world, identity is the new perimeter-and attackers know it. As traditional EDR and SIEM tools struggle to keep up, identity-focused attacks are rising fast. In fact, 70% of breaches now start with stolen credentials, according to Verizon’s 2024 and 2025 DBIR reports. This calls for a smarter approach to identity security-one that
In today’s cybersecurity arms race, visibility is everything—but context is king. Network Detection and Response (NDR) has long been one of the most effective ways to detect lateral movement, ransomware behaviors, and post-compromise activity using deep packet inspection and behavioral analysis. But as threat actors become more evasive and distributed, relying solely on NDR as a
Live Network Traffic is the Missing Link: AI Can’t Detect What It Can’t See AI is dominating cybersecurity conversations—and MSSPs are rushing to capitalize. Whether through SIEM platforms with built-in ML, or EDRs with AI-assisted investigations, the promise is clear: faster detection, smarter triage, and better outcomes. But here’s the hard truth—AI alone won’t save
Why MSSPs Are Betting on AI—But Still Missing the Power of NDR Read More »
Today’s complex cyberthreat landscape poses both enterprises and Managed Security Service Providers (MSSPs) multiple challenges. To combat evolved threats across diverse IT & Security environments, cybersecurity professionals develop an array of tools and data sources to monitor their specific threat landscape. However, the tool array presents its own difficulties, as there are gaps in visibility,
Empowering SOC Teams with Open and Seamless API Integration Read More »
Six years ago, we founded DTonomy, a security automation company. As security software engineers and data scientists who had worked at the forefront of security operations — from building large-scale AI-based EDR systems to managing daily security operations — we were acutely aware of the challenges security teams face. Triaging security alerts during national holidays,
Hyperautomation for Security Teams Read More »
Government security operations (SecOp) teams face unique challenges as they grapple with relentless attacks in an environment that can shift unexpectedly. The pressure intensifies in the government, and budgets are often constrained. This combination of factors creates a perfect storm of stress and uncertainty. SecOps leaders must find ways to ensure their teams can protect
Drive efficiency with Stellar Cyber Open XDR platform on Oracle Government Cloud Read More »
In a recent conversation with a major educational institution’s CIO, the following circumstance arises: a university administrator is hiring for a position; of over 300 resumes that he receives, 95% of them look so similar that they could have come from the same person. And in a way, they did. With the proliferation of AI-powered
Fighting AI with AI: Tools for the Twenty-First Century Read More »
supply chain Open XDR Platform Open XDR Ai-Driven Security Cybersecurity The news earlier this week about the CDK hack reveals the major flaw—and prevalent issue—in a vulnerable supply chain. The vulnerability of the CDK Global system turns out to have had far reaching consequences as nearly 15,000 dealerships across the continent are still struggling to
The Car Dealership Hack: Securing the Supply Chain Read More »
As many of us take stock of our personal goals, achievements, and aspirations this time of year, I like to look at our company similarly, reviewing our goals, achievements, and aspirations for the future.Going into 2023, we had four clear objectives: Deliver an exceptional customer experience from day one. Strive for continuous product innovation. Expand
Looking Ahead for Stellar Cyber Read More »
With every breach and data leak splashed across your favorite news website or X feed, your customers’ concern about being the next victim of a cyberattack increases. Whether you are a reseller or a managed service provider (MSP), your customers know that the blame and fallout will land on their desks if they experience a
Four Reasons MSPs and Resellers Need to Offer Cybersecurity Services NOW Read More »
Cybersecurity given: attackers will never stop trying to find ways to exploit weaknesses and vulnerabilities anywhere in an organization to carry out an attack. Whether it’s an unpatched web server, an out-of-date application with known vulnerabilities, or a user who tends to click links first and read later, attackers focus on finding a way to
Four Must-Haves to Secure Your OT Environment Read More »
As we are on the doorstep of the dog days of summer, where kids on summer break are soaking up the sun, the Stellar Cyber team is hard at work cranking out new features and capabilities aimed at helping customers continue to improve their ability to simplify security operations. While we have some cool new
Stellar Cyber Product Update:
Dog Days of Summer Edition Read More »
Today we are thrilled to announce the general availability of Amazon Security Lake, first announced in a preview release at 2022 re:Invent. Security Lake centralizes security data from Amazon Web Services (AWS) environments, software as a service (SaaS) providers, on-premises, and cloud sources into a purpose-built data lake that is stored in your AWS account.
Amazon Security Lake is now generally available Read More »
Artificial intelligence (AI) has been transforming the cybersecurity landscape for over a decade, with machine learning (ML) speeding the detection of threats and identifying anomalous user and entity behaviors. However, recent developments in large language models (LLMs), such as OpenAI’s GPT-3, have brought AI to the forefront of the cybersecurity community. These models use documented
By nature, humans are wired to avoid undue risks. While there are always exceptions to the rules, by and large when given the choice between the known and unknown, the typical person one will choose the known even though the choice might only deliver a marginally positive result. It is this natural bias towards the
One of These Things is not Like the Others Read More »
