SOC Prime

OpenSSL has released security updates addressing 14 vulnerabilities, including a high-severity flaw that could expose sensitive heap memory or crash applications relying on Datagram Transport Layer Security (DTLS). Tracked as CVE-2026-84782, the vulnerabi

Cisco has disclosed another actively exploited zero-day vulnerability affecting its Catalyst SD-WAN infrastructure. The latest flaw, tracked as CVE-2026-76504, is a critical authentication bypass in Cisco Catalyst SD-WAN Manager that could enable an unaut

For years, Cribl was known as the company that sits between your data sources and your security tools, shaping, routing, and reducing telemetry before it reaches its destination. Now the question security teams are asking is different: Cribl SIEM, what do

Apple has released emergency security updates to address a CoreGraphics vulnerability that may have been exploited in a highly targeted attack against specific individuals. Tracked as CVE-2026-86950, the flaw is an out-of-bounds write issue that can lead

Citrix has released emergency security updates for two critical zero-day vulnerabilities affecting NetScaler ADC and NetScaler Gateway after confirming that attackers are already exploiting both flaws in real-world attacks. Tracked as CVE-2026-88771 and C

Build versus buy is the decision about which threat detections a security team authors in-house and which it sources as ready-made detection content. The answer is almost never all build or all buy. Buy the commodity layer, build what is unique to your en

Not long ago, spotting a phishing email was almost a game. Odd phrasing, a mismatched logo, a sender address that didn't quite add up - the tells were usually there if you looked closely enough. That's changing fast, because the tools behind today's campa

ATT&CK-based detection for a federal agency is the practice of deploying detection rules mapped to MITRE ATT&CK techniques, translating those rules to the agency's own SIEM, and measuring coverage so the agency can produce auditable evidence that detectio

Detection rule portability is the practice of writing and managing threat-detection logic so it moves across SIEM, EDR, and XDR platforms without a full rewrite. What happens to my detection rules when I migrate to a new SIEM platform? Rules written in a

Regulatory detection obligations are the security outcomes that DORA, NIS2, PCI DSS v4.0.1, and the SEC disclosure rules require an organization to achieve and evidence through detection, monitoring, logging, and disclosure. None of these four regimes pre