AnnouncementEvery vendor in the SOC and IR market wants to own the word “agentic” right now. Almost none of them agree on what it means once the pager actually goes off. Here’s the definition Profero’s practitioners use in casework, and why the difference changes how you investigate. The question we keep getting asked mid-incident Somewhere in the first hour of nearly every AI-related case we open now, someone on the client side asks a version of the same question. Is this an AI inci
AnnouncementIn 2025, the average eCrime breakout time, the gap between an attacker’s first foothold and their first move to a second system, fell to 29 minutes. That’s according to CrowdStrike’s 2026 Global Threat Report, and it’s a 65 percent jump in speed over the year before. The fastest breakout the report recorded took 27 seconds. In one intrusion, the attacker was pulling data out four minutes after getting in. If your incident response plan assumes there’s time for an al
AnnouncementBest Practices for Cyber Drills and Exercises for New USGC Rules  On January 17, 2025, the US Coast Guard published a series of new rules affecting the Marine Transportation System, to include vessels docking in the US, US Terminals, and OCS Facility. Effective on July 16, 2025  were requirements to report cyber security incidents to […] The post July 2027 Is Coming: How Cruise Lines Can Turn U.S. Coast Guard Cybersecurity Rules Into Operational Readiness appeared first on Breach
AnnouncementRansomware attackers are expanding their tactics beyond encrypting corporate systems and threatening to leak stolen data. They are increasingly using AI in attacks, exploiting organizations’ own AI systems and even using physical intimidation by threatening employees and their families to pressure companies into paying ransoms. The Semperis’ 2026 Ransomware Risk Report found that 84% of surveyed ransomware victims experienced attacks involving AI, while 87% reported attacks targeting identity in
AnnouncementWhen companies begin evaluating out-of-band communication products, they usually start with a sensible question: how will we communicate if corporate email and collaboration systems become unavailable or compromised? A secure alternative channel addresses an immediate vulnerability, but it also exposes a larger buying decision. Once the response team has moved into that channel, where will […] The post How to Evaluate Out-of-Band Communication Products appeared first on BreachRx.
AnnouncementThe post AI-Accelerated Micro Tabletops and Incident Readiness appeared first on BreachRx.
AnnouncementYour incident response plan has a category for ransomware. It has a category for insider threat, for business email compromise, for third-party breach. Somewhere in there is probably a line for “emerging threats” that nobody has updated since the tabletop exercise before last. It does not have a category for what happens when an AI agent, acting on a vague instruction and elevated permissions, deletes a production database, exposes a customer table, or reconfigures a server, with no attacker, no
AnnouncementThe post Incident response under regulatory pressure: a practical look appeared first on StrangeBee.
AnnouncementThe post TheHive 5.8: right on the clock appeared first on StrangeBee.
AnnouncementAdministrators can now define named, policy-style rules that automatically exclude matching assets from automatic Responder updates. The post Binalyze AIR 5.26 appeared first on Binalyze.
AnnouncementAdministrators can now define named, policy-style rules that automatically exclude matching assets from automatic Responder updates. The post Binalyze AIR 5.25 appeared first on Binalyze.
AnnouncementAI is useful in investigations, but the collection phase is... The post AI in DFIR 101: Why AI isn’t Good for DFIR Collections appeared first on Cyber Triage.
AnnouncementAI tools can read files, run commands, connect to external services, and retain sensitive context. Binalyze AIR gives investigators the forensic evidence to understand what happened on the computer. The post What did the AI actually do? appeared first on Binalyze.
AnnouncementEDRs are great. They are fast, detect most attacks, and... The post SOC Forensics: 3 DFIR Gaps All EDRs Have appeared first on Cyber Triage.
AnnouncementThe planning phase of an investigation is where GenAI can... The post AI in DFIR 101: Why You Should Use AI for Planning appeared first on Cyber Triage.
New capabilityMost cybersecurity AI helps teams identify threats, analyze alerts, or understand what happened. But insight alone does not create resilience. Organizations still have to translate that insight into coordinated action: activating the right plan, mobilizing stakeholders, assigning responsibilities, managing workflows, and executing across disconnected systems. That process remains fragmented, manual, and dependent on a small […] The post Introducing Cytactic for Claude: The Agentic Orchestr
AnnouncementFormer Federal Prosecutor, Cybercrime Trailblazer, and Stripe Executive Joins Cytactic to Help Shape the Future of Cyber Incident Response Management NEW YORK, July 30, 2026 – Cytactic, the leader in Cyber Incident Response Management (CIRM), today announced that Shawn J. Chen, one of the leading experts in cybercrime, crisis management, regulatory investigations, and enterprise risk, […] The post Cytactic Welcomes Cybercrime Pioneer Shawn J. Chen to Advisory Board Following Strategi
AnnouncementTTX has been broken for years. We’re introducing the fix, and the future. The threat landscape made the old model obsolete this year. AI-enabled attacks jumped 89% year over year. Time from initial access to lateral movement collapsed to 29 minutes, the fastest breakout on record took 27 seconds, and exploited high and critical vulnerabilities […] The post The Next Generation of Cyber Tabletops is Here, Powered by AI appeared first on Cytactic.
AnnouncementThe post What is DFIR? How a police investigation explains modern incident response appeared first on StrangeBee.
