[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQxmny6NxIiWIHNSSBGSn7QhXjHX9pLvpsLWbzAtu9lk":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"c6124d21-a8cc-47ff-887d-4d651d379fa8","When Attackers Move at AI Speed, How Can Your SOC Keep Up?","when-attackers-move-at-ai-speed-how-can-your-soc-keep-up-23c69f","Artificial intelligence is changing the cybersecurity landscape at an unprecedented pace. While enterprises are using AI to improve efficiency, cybercriminals are finding new ways to automate attacks, refine phishing campaigns, and scale their operations. What once required significant time and technical expertise can now be accomplished faster and with fewer resources. For SOC and MSSP […] The post When Attackers Move at AI Speed, How Can Your SOC Keep Up? appeared first on Cyber Security News.","Artificial intelligence is rapidly changing cybersecurity, enabling threat actors to automate attacks and scale operations more efficiently. This increased speed and sophistication pose a significant challenge for Security Operations Centers (SOCs) and Managed Security Service Providers (MSSPs), who face a growing volume of suspicious activity and shrinking investigation times. Organizations in the US and Europe are particularly targeted, with reports indicating rising internet crime losses and ransomware as a major threat.","AI accelerates cyberattacks, pressuring SOCs to investigate faster amid rising threats.","https:\u002F\u002Fcybersecuritynews.com\u002Fwhen-attackers-move-at-ai-speed-how-can-your-soc-keep-up\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002Fai-speed-soc-banner-1600x900-1.webp","2026-11-12T16:15:30+00:00","2026-11-12T17:00:26.169356+00:00",7,[17,20,23],{"name":18,"type":19},"ANY.RUN Threat Intelligence Lookup","product",{"name":21,"type":22},"Artificial intelligence","technology",{"name":24,"type":22},"deepfakes","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":25,"icon":27,"name":28,"slug":29},null,"AI Security","ai-security",[31,33,38,43],{"category":32},{"id":25,"icon":27,"name":28,"slug":29},{"category":34},{"id":35,"icon":27,"name":36,"slug":37},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":44},{"id":45,"icon":27,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":51,"vendors":139},[52,81,110],{"slug":53,"name":54,"problem":55,"products":56},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xsiam","Cortex XSIAM","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xsiam","AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","sentinel","Microsoft Sentinel","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-sentinel-siem","Cloud SIEM and automated response, built on Azure.",{"slug":82,"name":83,"problem":84,"products":85},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"splunk","Splunk","\u002Fvendor-logos\u002Fsplunk.png","splunk-soar","Splunk SOAR","https:\u002F\u002Fwww.splunk.com\u002Fen_us\u002Fproducts\u002Fsplunk-security-orchestration-and-automation.html","Security orchestration and automation that runs playbooks to investigate and respond to incidents in seconds.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"qevlar-ai","Qevlar AI","\u002Fvendor-logos\u002Fqevlar-ai.png","qevlar-ai-soc-platform","Qevlar AI SOC Platform","https:\u002F\u002Fwww.qevlar.com\u002Fproduct","Autonomous investigation of every SOC alert around the clock, using models trained for security work and set up to follow the team's own processes.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"dropzone-ai","Dropzone AI","\u002Fvendor-logos\u002Fdropzone-ai.png","dropzone-ai-soc-analyst","Dropzone AI SOC Analyst","https:\u002F\u002Fwww.dropzone.ai\u002Fai-soc-analyst","Investigates every alert across SIEM, EDR and cloud tools and returns a verdict with the evidence behind it.",{"slug":111,"name":112,"problem":113,"products":114},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-complete","Falcon Complete","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Ffalcon-complete-mdr\u002F","Managed detection and response run by CrowdStrike's own analysts.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","bitdefender-mdr","Bitdefender MDR","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fproducts\u002Fmanaged-detection-response-service","Managed detection and response, 24\u002F7.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"arctic-wolf","Arctic Wolf","\u002Fvendor-logos\u002Farctic-wolf.png","arctic-wolf-mdr","Arctic Wolf Managed Detection and Response","https:\u002F\u002Farcticwolf.com\u002Fsolutions\u002Fmanaged-detection-and-response\u002F","24\u002F7 managed detection and response with a named security team.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":150},"ai-accelerated-attacks-are-outpacing-human-speed-soc-defenses","AI-Accelerated Attacks Are Outpacing Human-Speed SOC Defenses","Threat actors are leveraging artificial intelligence to automate attack workflows, compress the time between initial access and impact, and scale operations that previously required large teams. This shift fundamentally breaks the assumption that human analysts have adequate time to detect, investigate, and respond before significant damage occurs. SOCs and MSSPs are drowning in alert volume while their investigation windows shrink, creating dangerous gaps where ransomware and other high-impact threats can establish footholds undetected. Organizations that rely on manual triage and response playbooks are structurally outmatched against adversaries operating at machine speed. Without AI-augmented detection and automated response capabilities, the asymmetry between attacker and defender will continue to widen.",[145,146,147,148,149],"NIST CSF 2.0 DE.CM-01: Continuous Monitoring","NIST CSF 2.0 RS.AN-03: Incident Analysis","CIS Control 17: Incident Response Management","NIS2 Article 21(2)(b)","NIST SP 800-53 SI-4: System Monitoring",{"NIS2 Article 21(2)(b)":151,"NIST SP 800-53 SI-4: System Monitoring":152,"NIST CSF 2.0 RS.AN-03: Incident Analysis":153,"CIS Control 17: Incident Response Management":154,"NIST CSF 2.0 DE.CM-01: Continuous Monitoring":155},"This point mandates effective incident handling procedures, which must be modernized to match the speed at which AI-enabled threat actors can move from initial compromise to impact.","This control requires automated monitoring tools capable of detecting anomalous activity, which is essential when attack sequences are executed at speeds that exceed unaided human detection.","This category calls for timely analysis of incidents, directly addressing the shrinking investigation windows SOCs face when adversaries use AI to accelerate attack progression.","This control requires organizations to establish and rehearse incident response capabilities, which must now account for the reduced reaction time created by AI-automated attacks.","This category requires continuous monitoring of networks and systems, which is the foundational capability needed to detect attacks that compress their dwell time using AI-driven automation."]