Uncategorized
What Frontier AI Changes for the Security Operations Center
When Anthropic mapped a year of AI-enabled cyber threats onto MITRE ATT&CK last week — 832 malicious accounts, with results now in…
Signal from the Grid
Author: Dave Dalling (D2)
Rethinking Cyber Security
AI-Powered Cyber Defense Depends on Visibility Across Distributed Data
Cisco's announcement joining Anthropic's Project Glasswing makes one thing clear: AI has entered a new phase in cybersecurity. The real question is…
Rethinking Cyber Security
Rethinking Security in the AI Era with the Agentic SOC
Agentic AI is moving from buzzword to boardroom priority. David argues that the future SOC is not just AI-assisted — it is…
Rethinking Cyber Security
2026 Prediction: AI Will Merge the NOC and SOC
The artificial boundary between Network Operations and Security Operations is collapsing under AI pressure. David's 2026 prediction: unified AI-driven operations centers will…
Security Operations
The Real Cost of Disjointed Security Tools in the SOC
Sprawling tool stacks are silently crippling security operations. David quantifies the hidden costs of fragmented tooling — context switching, alert fatigue, and…
Security Operations
Enter the SOC of the Future in Splunk’s State of Security 2025
Splunk's State of Security 2025 report reveals a sector in rapid transformation. David unpacks the key findings — from AI adoption curves…
Security Operations
Downtime Demystified: A Deep Dive into Common Causes and Fixes
Unplanned downtime costs enterprises millions annually, yet the root causes remain surprisingly consistent. David examines the most common culprits behind security-related outages…
Security Operations
Splunk at Black Hat 2024: Strategic Transformations to Power the SOC of the Future
From Black Hat 2024, David captures the most significant strategic shifts reshaping Security Operations Centers — AI-driven detection, unified platforms, and the…
Security Best Practices
Improving the Nation’s Cybersecurity is Raising the Need for Experienced 3PAOs
The executive order on improving the nation's cybersecurity is accelerating demand for qualified Third Party Assessment Organizations. David breaks down what this…
Security Operations
Elevating Threat Intelligence in 2022
As organizations enter 2022, the pressure to mature threat intelligence programs has never been greater. David explores how teams can move beyond…