Loading story…
Security operations centers (SOCs) are increasingly leveraging artificial intelligence (AI) to enhance the efficiency and accuracy of their analysts during alert investigations. A benchmark study by Dropzone involving 148 security professionals demonstrated that those using AI assistance completed investigations more quickly and with greater accuracy compared to those working manually. The AI-supported analysts maintained a consistent pace and thoroughness, even as the complexity of their tasks increased, while manual analysts showed signs of fatigue and a decline in report detail over time. The study found that AI tools helped analysts produce more comprehensive and better-documented investigations, reducing the risk of errors associated with fatigue and high alert volumes. Analysts reported positive experiences with AI, describing the tools as efficient, helpful, and time-saving, and noted that AI made their workflow smoother and less repetitive. In the realm of penetration testing, AI is being adopted as a co-pilot to amplify human creativity and focus, rather than replace ethical hackers. AI assistants, such as the Cobalt AI Assistant, are enabling pentesters to automate tedious reconnaissance tasks, such as OSINT gathering, port scanning, and subdomain enumeration, compressing hours of work into minutes. This automation allows pentesters to concentrate on developing innovative exploits and attack chains, enhancing both the speed and quality of their assessments. AI-driven reconnaissance provides pentesters with prioritized maps of potential vulnerabilities, freeing them to focus on high-value targets and strategic thinking. The integration of AI in both SOC operations and penetration testing is not just about increasing speed, but also about improving the quality and consistency of security investigations and assessments. These advancements are helping security professionals stay alert to key indicators, maintain thorough documentation, and reduce the risk of oversight. The adoption of AI tools is being met with enthusiasm by practitioners, who appreciate the reduction in repetitive tasks and the ability to focus on more complex and creative aspects of their work. As AI continues to evolve, its role in supporting human analysts and testers is expected to grow, further transforming the cybersecurity landscape. The evidence from recent studies and industry experiences underscores the tangible benefits of AI in real-world security operations and testing environments. Organizations are encouraged to consider how AI can be integrated into their existing workflows to maximize both efficiency and effectiveness. The shift towards AI-assisted security practices marks a significant step forward in the ongoing effort to defend against increasingly sophisticated cyber threats.
Track how attackers are adapting to this technology.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security leaders and practitioners are increasingly adopting AI and automation to enhance Security Operations Center (SOC) workflows, with a focus on practical frameworks and real-world implementation. Experts from Cisco Meraki and Binalyze have shared methodologies for integrating AI agents into detection, triage, and containment processes, emphasizing the importance of foundational processes, human oversight, and organizational buy-in. The use of AI in SOCs is highlighted as a means to accelerate incident response, improve detection and response metrics, and enable proactive threat hunting through the integration of digital forensics. Both sources stress that while AI will not replace security professionals, those who effectively leverage AI will gain a significant advantage in operational efficiency and security outcomes.
Jun 29, 2026
Artificial intelligence is increasingly being integrated into both application security and IT operations, transforming traditional approaches and enhancing efficiency. In the realm of static application security testing (SAST), AI-powered tools are now capable of deeper code analysis, moving beyond fixed rule sets to leverage large language models for advanced vulnerability detection and context-aware remediation. These enhancements allow development teams to keep pace with complex codebases and evolving frameworks, improving the identification and mitigation of security flaws throughout the software development lifecycle. Simultaneously, AI for IT operations (AIOps) is revolutionizing how organizations monitor and manage digital infrastructure. By combining machine learning, automation, and generative AI, AIOps platforms can ingest and correlate data from diverse sources, detect issues early, and automate remediation processes. The addition of large language models enables more sophisticated reasoning, conversational interfaces, and knowledge retrieval, helping IT teams respond faster and more effectively to operational challenges. Together, these advancements illustrate the broad impact of AI on both securing and optimizing enterprise technology environments.
Jun 29, 2026
Artificial intelligence is rapidly transforming the landscape of cybersecurity threat detection, offering both significant opportunities and new challenges for organizations. AI’s ability to process and analyze vast amounts of machine data is enabling faster and more accurate identification of anomalies and potential threats, as highlighted by industry leaders. The projected growth of machine data, expected to account for 55% of all data expansion by 2028, is driving the need for advanced analytics strategies such as federated analytics, data fabric, and edge-based detection to manage security at scale. At Black Hat USA 2025, AI and machine learning dominated discussions, with experts and vendors emphasizing AI’s potential to reduce alert fatigue, automate routine security tasks, and accelerate incident detection and response. Demonstrations at the conference showcased how AI agents can autonomously identify zero-day vulnerabilities at scale, with one research team uncovering over 200 such vulnerabilities in public web applications using robust exploit validation. Security professionals are optimistic about AI’s role in improving decision-making and operational efficiency, viewing it as a critical tool in the cyber defender’s arsenal. However, the integration of AI into security operations is not without risks. Experts warn of infrastructure constraints, data gaps, and the emerging threat of adversarial attacks targeting AI models themselves. Frameworks such as MITRE ATLAS and NIST’s AI Risk Management Framework are being leveraged to build resilient and trustworthy AI systems capable of operating securely throughout the threat detection lifecycle. There is a consensus that AI will not replace human analysts but rather augment their capabilities, allowing them to focus on strategic decisions and tailored responses. The partnership between humans and AI is seen as essential for staying ahead of continuously evolving cyber threats. Security leaders are urged to challenge outdated assumptions and adapt to the new realities brought by AI, ensuring that both technology and human expertise are leveraged effectively. The rapid evolution of AI in cybersecurity underscores the importance of building trust in these systems, maintaining transparency, and preparing for adversarial tactics that may seek to exploit AI-driven defenses. As organizations continue to adopt AI-powered security solutions, ongoing vigilance, robust governance, and continuous improvement will be critical to realizing the full benefits of AI while mitigating its risks.
Jun 29, 2026