Incident Response

Incident Response | News, how-tos, features, reviews, and videos

The first 24 hours of an AI agent security incident

AI agents can scale an attack faster than humans can respond, making traditional incident response dangerously slow.

By Ravindra Annam

Aug 28, 20267 mins

Artificial IntelligenceIncident ResponseSecurity Practices

Most organizations aren’t ready for a Hugging Face-level event

By Lee Rossey

Aug 19, 20267 mins

Incident ResponseSecurity InfrastructureSecurity Practices

Hugging Face breach shows why incident response needs a multi-model AI strategy

By Lucian Constantin

Jul 28, 20269 mins

Incident ResponseSecurity InfrastructureSecurity Operations Center

The containment paradox: Why your ransomware playbook has the wrong people in charge

By Sabine Frömling

Jul 27, 202612 mins

Incident ResponseSecuritySecurity Practices

Lateral movement risk rises as enterprises emphasize convenience over containment

By John Leyden

Jul 9, 20265 mins

Incident ResponseNetwork SecurityRisk Management

Articles

Detection engineering: A programmatic approach to identifying cyber threats

Once on the margins of cybersecurity, detection engineering has become a go-to discipline for fine-tuning systems against increasingly sophisticated threats.

By Jaikumar Vijayan

Jul 1, 2026 8 mins

Incident ResponseThreat and Vulnerability Management

Proposed US law would make AI risk reporting a legal obligation

The bill seeks to close oversight gaps by forcing developers to disclose dangerous model behavior and security threats.

By Gyana Swain

Jun 26, 2026 5 mins

Incident ResponseLaws and RegulationsSecurity Practices

Cybersecurity is no longer about protection. It’s about survival.

Yes, protection still matters. But if you can’t survive the breach, was the wall ever a viable security strategy?

By Loris Gutic

Jun 23, 2026 11 mins

Business ContinuityIncident ResponseRisk Management

Anatomy of a retail ransomware attack: Tabletop simulates modern mayhem methods

An “Enter the War Room” incident response exercise sheds light on the rising access vectors and disruption and reputation-damaging activities attackers employ today.

By John Leyden

Jun 22, 2026 5 mins

IT Skills and TrainingIncident ResponseRansomware

What 22,000 breaches teach us about incident preparedness

The 2026 DBIR proves patching cannot prevent all breaches. True resilience requires proactive incident response testing and simulated third-party risks.

By Cassio Goldschmidt

Jun 17, 2026 7 mins

CyberattacksData BreachIncident Response

15 tough cybersecurity questions every CISO must answer

From anticipating new threats to balancing risk management and business enablement, CISOs face a range of complex challenges that require continual reflection and strategic execution.

By Mary K. Pratt

Jun 8, 2026 10 mins

Application SecurityIncident ResponseSecurity Operations Center

Ukraine’s foreign minister offer recipe for improved resilience

There may be more important projects than preparing for something that might not happen, Dmytro Kuleba told Infosecurity Europe attendees. “But if you care for your company, if you care for your country, you have to prepare for the worst.”

By John Leyden

Jun 8, 2026 4 mins

Business ContinuityIncident ResponseSecurity Practices

7 tabletop exercise mistakes that sabotage incident response

Tabletop scenarios offer the opportunity to test incident response playbooks and develop decision-making skills, but only when properly set up and managed.

By John Edwards

Jun 2, 2026 8 mins

Business ContinuityIT Training Incident Response

7 tips for accelerating cyber incident recovery

Speed is of the essence when recovering from a cyberattack. Cyber experts offer tips to help your organization rebound from any incident rapidly and effectively.

By John Edwards

May 19, 2026 7 mins

Incident ResponseSecuritySecurity Practices

The noisy tenants: Engineering fairness in multi-tenant SIEM solutions

Cloud SIEMs are great until a "noisy neighbor" hogs all the resources. You need a vendor that actually engineers fairness so their spike doesn't break your security.

By Mayank Singhi

Apr 7, 2026 13 mins

Incident ResponseIntrusion Detection SoftwareSecurity Monitoring Software

AI is breaking traditional security models — Here’s where they fail first

What happens when AI turns operating assumptions into stress points?

By Apoorv Mehta

Mar 25, 2026 5 mins

Incident ResponseNetwork SecuritySecurity Practices

Hybrid resilience: Designing incident response across on-prem, cloud and SaaS without losing your mind

Your hybrid stack is failing at the seams because your teams are too busy proving their own systems are "green" while the actual customer experience is on fire.

By Shalini Sudarsan

Mar 13, 2026 8 mins

Cloud SecurityIncident ResponseSecurity Practices

View all

The first 24 hours of an AI agent security incident

Most organizations aren’t ready for a Hugging Face-level event

Hugging Face breach shows why incident response needs a multi-model AI strategy

The containment paradox: Why your ransomware playbook has the wrong people in charge

SOCs face a human challenge as AI speeds alerts and threats

AI incidents need a new playbook. Here’s how to build one

AI-powered breaches provide wake-up call for incident response

Your AI risk register is not an incident response plan

Lateral movement risk rises as enterprises emphasize convenience over containment

Articles

Detection engineering: A programmatic approach to identifying cyber threats

Proposed US law would make AI risk reporting a legal obligation

Cybersecurity is no longer about protection. It’s about survival.

Anatomy of a retail ransomware attack: Tabletop simulates modern mayhem methods

What 22,000 breaches teach us about incident preparedness

15 tough cybersecurity questions every CISO must answer

Ukraine’s foreign minister offer recipe for improved resilience

7 tabletop exercise mistakes that sabotage incident response

7 tips for accelerating cyber incident recovery

The noisy tenants: Engineering fairness in multi-tenant SIEM solutions

AI is breaking traditional security models — Here’s where they fail first

Hybrid resilience: Designing incident response across on-prem, cloud and SaaS without losing your mind

Resources

Managing modern identity complexity and reducing executive risk

The new era of executive risk: Why identity security must be continuous

5 identity security questions CISOs must be ready to answer