Skip to content

Threat Detection & Response

Finding and stopping attacks: endpoint detection and response, SIEM and the security operations center, threat intelligence, and the AI now accelerating investigation and triage.

Kaspersky Documents Malware Delivered Through Car Head-Unit Firmware Updates

Attackers abused TWCore, a legitimate update-delivery app, to install a trojan, a clicker that inflates ad impressions, and a module that recruits the unit into a botnet.

By Daniel Brandt Aug 21

n8n Discloses Security Incident Tied to a Third-Party Metabase Vulnerability

Daniel Brandt Aug 9

Cisco Releases Antares, Open-Weight AI Models for Vulnerability Localization

Daniel Brandt Jul 23

SentinelOne Puts Prompt Security Guardrails Around AI Agents on Amazon Bedrock AgentCore

Daniel Brandt Jun 17

Guides in Threat Detection & Response

More in Guides in Threat Detection & Response

Latest in Threat Detection & Response

SentinelOne Opens Purple AI Agentic Investigation to Every Singularity Platform Customer
Daniel Brandt Jun 17
SentinelOne Marks a Sixth Year as a Gartner Magic Quadrant Endpoint Leader
Daniel Brandt May 27
What Is a Threat Intelligence Tool: Types and Use Cases
Daniel Brandt May 18
SIEM vs SOAR: How Each Threat Detection System Fits Your Security Stack
Daniel Brandt May 18
How Businesses Prevent Zero-Day Attacks: A Defense-in-Depth Guide
Daniel Brandt May 18
Transitioning from Indicator of Compromise Triage to Threat Hunting
Daniel Brandt May 16
Best CrowdStrike Alternatives for Endpoint Detection: SentinelOne, Defender, Sophos, Elastic, Trellix
Daniel Brandt May 16
Building a SOC Team: Roles, Tools, and Operating Model
Daniel Brandt May 15