[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:network-detection-response":3},{"control":4,"products":25,"stories":50,"lessons":94,"related":119,"compare":148},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.","Analysis of network traffic to spot lateral movement, command-and-control traffic and data theft, including from devices that cannot run a security agent.","Printers, industrial equipment, appliances and unmanaged devices cannot run endpoint protection, and attackers know it. Network detection covers those blind spots, and is often how intrusions that slipped past endpoint tools get caught.",[11,12,13,14],"How does it handle encrypted traffic?","Does it cover cloud network traffic as well as on-premises?","How many alerts a day should we expect, and how are they prioritised?","Can it work with our endpoint tools and SIEM to respond?","Risk: lateral movement and data theft through devices without endpoint protection. Control: NDR on core network segments and cloud. Owner: security operations lead. Measure: share of internal traffic monitored.",[17,18,19,20],"NIS2 Art. 21(2)(b): incident handling","DORA Art. 10: detection of anomalous activities","CIS Control 13: network monitoring and defence","ISO\u002FIEC 27001:2022 A.8.16: monitoring activities",{"name":22,"slug":23},"Logging & Monitoring","logging-monitoring","2026-10-16T12:48:15.072121+00:00",[26,34,42],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"total":51,"last_days":52,"recent":53},420,111,[54,59,64,69,74,79,84,89],{"slug":55,"title":56,"published_at":57,"brief":58},"targeted-ads-used-to-infect-al-jazeera-devices-with-candiru-spyware-fdc6a3","Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware","2026-10-15T20:29:48+00:00","Candiru spyware delivered via zero-click targeted ads to Al Jazeera devices.",{"slug":60,"title":61,"published_at":62,"brief":63},"small-ai-models-could-soon-self-replicate-on-iot-devices-anthropic-warns-3b826c","Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns","2026-10-13T11:58:29+00:00","Anthropic warns small AI models could self-replicate across IoT devices within months without centralized",{"slug":65,"title":66,"published_at":67,"brief":68},"xworm-rat-evolves-into-surveillance-platform-4aa5a9","XWorm RAT Evolves Into Surveillance Platform","2026-10-13T11:13:10+00:00","XWorm RAT adds surveillance plugins for location, audio, and browser session hijacking.",{"slug":70,"title":71,"published_at":72,"brief":73},"feds-got-warrants-to-use-fake-cell-towers-to-hunt-down-don-lemon-s-producer-d5315a","Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer","2026-10-12T11:00:00+00:00","US feds sought warrants to use cell-site simulators on journalists and a political candidate.",{"slug":75,"title":76,"published_at":77,"brief":78},"artex-ai-claude-agents-used-in-cyberattacks-on-south-korean-banks-c1d059","ARTEX AI, Claude agents used in cyberattacks on South Korean banks","2026-10-10T14:16:17+00:00","Chinese hacker uses ARTEX AI and Claude agents to attack South Korean banks.",{"slug":80,"title":81,"published_at":82,"brief":83},"us-disrupts-chinese-state-sponsored-hacking-tools-6357f6","US Disrupts Chinese State-Sponsored Hacking Tools","2026-10-09T08:36:37+00:00","US disrupts Chinese state-sponsored hacking tools MicroScan and FishHub.",{"slug":85,"title":86,"published_at":87,"brief":88},"russian-spies-give-matchboil-malware-a-stealthy-facelift-b7077e","Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift","2026-10-08T18:01:50+00:00","Russian spies update 'MatchBoil' malware for stealthy attacks on Ukraine.",{"slug":90,"title":91,"published_at":92,"brief":93},"artex-ai-pentesting-tool-used-in-data-theft-attacks-on-south-korean-financial-fi-50bd0e","ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms","2026-10-08T14:12:34+00:00","ARTEX AI pentesting tool used in data theft attacks on South Korean financial firms",[95,99,103,107,111,115],{"slug":96,"title":97,"published_at":98},"malicious-ad-networks-weaponized-to-silently-deploy-candiru-spyware","Malicious Ad Networks Weaponized to Silently Deploy Candiru Spyware","2026-10-15T22:20:22.695+00:00",{"slug":100,"title":101,"published_at":102},"ai-self-replication-on-iot-devices-a-looming-worm-threat","AI Self-Replication on IoT Devices: A Looming Worm Threat","2026-10-13T14:21:07.191+00:00",{"slug":104,"title":105,"published_at":106},"xworm-rat-evolves-into-full-surveillance-platform-via-leaked-source-code","XWorm RAT Evolves Into Full Surveillance Platform via Leaked Source Code","2026-10-13T12:21:02.686+00:00",{"slug":108,"title":109,"published_at":110},"stingray-warrants-used-to-track-journalists-and-activists","Stingray Warrants Used to Track Journalists and Activists","2026-10-12T12:21:53.809+00:00",{"slug":112,"title":113,"published_at":114},"ai-powered-penetration-tools-weaponized-against-south-korean-banks","AI-Powered Penetration Tools Weaponized Against South Korean Banks","2026-10-10T16:20:36.028+00:00",{"slug":116,"title":117,"published_at":118},"chinese-state-sponsored-tools-target-critical-infrastructure-via-botnets-and-spear-phishing","Chinese State-Sponsored Tools Target Critical Infrastructure via Botnets and Spear Phishing","2026-10-09T10:21:16.232+00:00",[120,124,128,132,136,140,144],{"slug":121,"name":122,"problem":123},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":125,"name":126,"problem":127},"log-management","Log management and security data pipelines","Security logs are so expensive to collect and keep that teams drop the ones they need when an incident happens.",{"slug":129,"name":130,"problem":131},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",{"slug":133,"name":134,"problem":135},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",{"slug":137,"name":138,"problem":139},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",{"slug":141,"name":142,"problem":143},"deception","Deception and honeypots","An attacker who gets in quietly can explore the network for weeks before any alarm goes off.",{"slug":145,"name":146,"problem":147},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"darktrace\u002Fdarktrace-network":149,"vectra-ai\u002Fvectra-ai-platform":161,"corelight\u002Fopen-ndr":174},{"hq_country":150,"also_provides":151,"reviews":152,"affected":159,"reported":160},"GB",[],[153,156],{"label":154,"url":155},"Gartner Peer Insights: Darktrace \u002F NETWORK user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fdarktrace-network",{"label":157,"url":158},"PeerSpot: Darktrace user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fdarktrace-reviews",0,1,{"hq_country":162,"also_provides":163,"reviews":167,"affected":159,"reported":160},"US",[164],{"slug":165,"name":166},"identity-threat-detection","Identity threat detection and response (ITDR)",[168,171],{"label":169,"url":170},"Gartner Peer Insights: Vectra AI Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fvectra-ai-platform",{"label":172,"url":173},"PeerSpot: Vectra AI user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fvectra-ai-reviews",{"hq_country":162,"also_provides":175,"reviews":176,"affected":159,"reported":159},[],[177,180],{"label":178,"url":179},"Gartner Peer Insights: Corelight Open NDR Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcorelight-open-ndr-platform",{"label":181,"url":182},"PeerSpot: Corelight Open NDR user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcorelight-open-ndr-reviews"]