SIEM

Cloud

Bitdefender launches GravityZone Security Data Lake to extend unified Bitdefender platform by adding SIEM to Data Lake

November 11, 2025 Mark Cox 0
The new GravityZone Security Data Lake offering combines SIEM and Data Lake capabilities into a single cloud-delivered solution, which unifies security telemetry, including third-party logs, from endpoints, networks, and clouds, to provide better threat detection, greater visibility, and faster response.

[…]

Artificial Intelligence

ConnectWise enhances both its cybersecurity and data protection capabilities within the Asio platform

November 10, 2025 Mark Cox 0
ConnectWise’s Asio-powered innovations deliver measurable outcomes, including 30-50% faster detection and response through unified alerts and automated actions, reduced tool sprawl by consolidating SIEM, MDR, backup, and dashboards in one unified interface, and improved SLA performance through better visibility and automated business recovery.

[…]

Agent

Cyware, Microsoft launch strategic partnership integrating Microsoft Sentinel, Defender  and Cyware Intel Exchange

October 24, 2025 Mark Cox Comments Off on Cyware, Microsoft launch strategic partnership integrating Microsoft Sentinel, Defender  and Cyware Intel Exchange
This new partnership combines Microsoft Commercial Marketplace momentum with deep integrations across Microsoft Sentinel, Microsoft Defender and Cyware Intel Exchange to accelerate threat intelligence-driven detection, sharing and response.

[…]

Artificial Intelligence

Armis and Fortinet deepen strategic partnership around Armis Centrix platform and Fortinet Security Fabric

October 17, 2025 Mark Cox Comments Off on Armis and Fortinet deepen strategic partnership around Armis Centrix platform and Fortinet Security Fabric
The alliance now covers eight integrations, covering all three of Fortinet’s core product lines, with the aim of eliminating blind spots, automating enforcement, and strengthening cyber resilience of their customers worldwide.

[…]

Artificial Intelligence

Gurucul, Blue Mantis combine their strengths in Blue Mantis Protect managed service

October 17, 2025 Mark Cox Comments Off on Gurucul, Blue Mantis combine their strengths in Blue Mantis Protect managed service
Enterprise player Gurucul will take their next-gen SIEM downmarket to serve the Blue Mantis customer base, by providing the foundation of the EDR managed service that is part of the new Blue Mantis Protect portfolio.

[…]

Artificial Intelligence

Blumira introduces  SOC Auto-Focus AI and an enhanced MSP Partner Program

October 16, 2025 Mark Cox Comments Off on Blumira introduces  SOC Auto-Focus AI and an enhanced MSP Partner Program
SOC Auto Focus was created to help MSPs and IT teams work smarter, as was the new Blumira MSP Program.

[…]

Artificial Intelligence

PAM provider Keeper Security partners with Google Security Operations for cyber threat protection

October 8, 2025 Mark Cox Comments Off on PAM provider Keeper Security partners with Google Security Operations for cyber threat protection
Cybersecurity vendor Keeper Security, which focuses on password management and  cloud-native privileged account management [PAM], has announced a new integration with Google Security Operations that will add PAM data from Keeper to Google

[…]

Channel Communities

Exabeam and Cribl extend partnership by integrating Exabeam platform with Cribl Stream

September 25, 2025 Mark Cox Comments Off on Exabeam and Cribl extend partnership by integrating Exabeam platform with Cribl Stream
The partnership advances an outcome-driven data strategy, decoupling security outcomes from data volume, and powering scalable, high-fidelity threat detection with next-gen data pipelines.

[…]

Managed Services

ManageEngine re-engineers detection to strengthen Unified Security Platform

September 24, 2025 Mark Cox Comments Off on ManageEngine re-engineers detection to strengthen Unified Security Platform
ManageEngine has powered up their Log360 SIEM to improve SOC issues and separate the useful signals from the useless noise.

[…]

Artificial Intelligence

NDR provider Stamus and SentinelOne partner to deliver AI-powered go-to-market measures

September 22, 2025 Mark Cox Comments Off on NDR provider Stamus and SentinelOne partner to deliver AI-powered go-to-market measures
Stamus makes an open-source based intrusion detection system and intrusion prevention system, and they have been partnered with SentinelOne for a while, but that has now been extended in an advanced partnership that better addresses network security with AI-powered detection and response.

[…]

Data Centre

ExtraHop, CrowdStrike extend partnership to break down data silos and assist federated search

September 19, 2025 Mark Cox Comments Off on ExtraHop, CrowdStrike extend partnership to break down data silos and assist federated search
Building on recent integrations with Falcon Next-Gen SIEM, NDR vendor ExtraHop and cybersecurity vendor CrowdStrike have expanded their relationship, and are now working together, in order to further unify data and deliver faster, simpler investigations.

[…]

Artificial Intelligence

Rubrik expands integration with CrowdStrike Falcon to strengthen next-gen identity security

September 18, 2025 Mark Cox Comments Off on Rubrik expands integration with CrowdStrike Falcon to strengthen next-gen identity security
The integration of Rubrik Identity Resilience with CrowdStrike Falcon next-gen identity security lets customers surgically rollback malicious identity changes and restore identity providers to a safe state.

[…]

Artificial Intelligence

SIEM vendor Securonix and MDR provider Cipher collaborate on AI-powered Managed Security Services for channel

September 17, 2025 Mark Cox Comments Off on SIEM vendor Securonix and MDR provider Cipher collaborate on AI-powered Managed Security Services for channel
The strategic partnership between Securonix and Cipher will let channel partners deliver their own scalable, AI-powered security operations without the overhead of building and managing their own SOC.

[…]

Operational Technology

CrowdStrike integrates Falcon next-gen SIEM with Keeper’s advanced reporting and alerts

September 12, 2025 Mark Cox Comments Off on CrowdStrike integrates Falcon next-gen SIEM with Keeper’s advanced reporting and alerts
Keeper’s cloud-native PAM platform, KeeperPAM, now integrates with the CrowdStrike Falcon Next-Gen SIEM.

[…]

Artificial Intelligence

Dataminr adds Agentic AI capabilities to key cybersecurity platforms

September 11, 2025 Mark Cox Comments Off on Dataminr adds Agentic AI capabilities to key cybersecurity platforms
AI vendor Dataminr has introduced its Agentic AI capabilities for leading cybersecurity platforms in what the company says is transforming the future of real time information using AI and public data.

[…]

Artificial Intelligence

Cisco adds two new solutions for Splunk

September 10, 2025 Mark Cox Comments Off on Cisco adds two new solutions for Splunk

Splunk Enterprise Security Essentials Edition and Splunk Enterprise Security Premier Edition, both unveiled Tuesday in the product keynote, both provide customers with agentic AI-powered SecOps options that unify security workflows across threat detection, investigation, and response.

[…]

Artificial Intelligence

Splunk celebrates their community at .conf25

September 9, 2025 Mark Cox Comments Off on Splunk celebrates their community at .conf25
Two senior executives assessed Splunk and Cisco’s product and AI vision as well as the latest tech trends shaping the future.

[…]

Artificial Intelligence

Exabeam extends insider threat detection to AI Agents with Google Cloud

September 9, 2025 Mark Cox Comments Off on Exabeam extends insider threat detection to AI Agents with Google Cloud
At Google Cloud’s pioneering Security  Innovation Forum, cybersecurity vendor Exabeam, which specializes in intelligence and automation, has announced the integration of Google Agentspace and Google Cloud’s Model Armor telemetry into the New-Scale Security Operations Platform.

[…]

Artificial Intelligence

SentinelOne to boost AI SIEM and data offerings with Observo AI acquisition

September 8, 2025 Mark Cox Comments Off on SentinelOne to boost AI SIEM and data offerings with Observo AI acquisition
What Observo considers to be the best-in-class, AI-native data pipeline platform will build on SentinelOne’s AI advantage by turbo charging ingestion, enriching telemetry, and automatically adapting to evolving threats.

[…]

Artificial Intelligence

CrowdStrike to buy telemetry pipeline management Onum

August 28, 2025 Mark Cox Comments Off on CrowdStrike to buy telemetry pipeline management Onum
By the terms of the deal, Crowdstrike agrees to acquire Onum in order to supercharge Falcon Next-Gen SIEM, leading to an environment where their real-time data pipeline platform eliminates migration barriers and delivers autonomous in-pipeline threat detection.

[…]