i
ITSPmagazine Blog — By Sean and Marco
36 articles matching · page 1 of 2
Is data quality holding back your AI-powered SOC?
More data does not necessarily mean better security insight. Corelight co-founder Greg Bell examines how network data quality shapes AI investigations and what security leaders should test before scaling SOC automation.
Marketing Volume Held Steady. Scrutiny Went Up. | Lens Four by Sean Martin | Read by TAPE9
Black Hat USA 2026 was not the year AI arrived, it was the year the industry stopped asking whether to adopt AI and started grinding through the four questions that come after it. Who is accountable, what is the evidence, where is the data coming from, and is the foundation actually configured to hold the weight.
Sovereign AI Becomes an Operational Requirement, and Crogl Built for It From the Start | A Recap at Black Hat USA 2026 with Monzy Merza, Co-Founder and CEO at Crogl | Hosted by Marco Ciappelli
A free download, a hackathon running a few feet away, and a security community that has stopped asking whether AI belongs in the SOC and started asking who governs it. Monzy Merza explains why sovereignty, model choice, and consistency arrived together this year.
Proof Is the Currency on the Black Hat Floor | A Recap at Black Hat USA 2026 with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber | Hosted by Marco Ciappelli
A few months after RSAC Conference, the questions on the show floor have changed, and the ask is data. Lisa Liu describes an audience that has tested what it heard, come back with sharper vocabulary, and put the burden of proof on vendors.
The AI SOC Moves Into Production, and Practitioners Want Hands on the Keyboard | A Recap at Black Hat USA 2026 with Bill Peterson, Senior Director of Product Marketing at Sumo Logic | Hosted by Marco Ciappelli
A week on the Black Hat USA 2026 show floor left Bill Peterson with three things he keeps coming back to, and the first is that the AI SOC has crossed from concept into production. The other two explain why practitioners are reaching for the keyboard and why vendor roadmaps now run in months instead of years.
10,000 Alerts a Day, 75% Cleared With Evidence Analysts Can Check | A Brand Briefing at Black Hat USA 2026 with Seth Summersett, Co-Founder and CEO of Embed Security | Hosted by Sean Martin
One security team was working through more than 10,000 alerts a day before roughly 75% of them stopped needing a human first look. Seth Summersett explains how that number held up under a competitive bake off, and why the evidence behind each decision mattered more than the decision itself.
The Last Mile of Security Operations Runs on a Local Model | A Full Sponsor Brand Briefing at Black Hat USA 2026 with Karthik Kannan, Founder and CEO at Anvilogic | Hosted by Sean Martin
Seven years after setting out to build a full security operations platform, Anvilogic says the vision is complete, with agents handling data, detection, triage, investigation, and case management under human control. Karthik Kannan explains why the last mile of AI in the SOC runs on a model that lives inside your own e
Measuring Risk Was Never the Point | A Brand Spotlight at Infosecurity Europe 2026 with Matt Middleton-Leal, Regional Vice President, Northern Europe of Qualys
One client walked in with 62 million risk findings. This conversation breaks down how that number gets cut to less than one percent of fixes that actually matter, and why a SOC alone was never going to get you there.
Where Data Sovereignty and Always-On Security Operations Meet | A Brand Spotlight at Infosecurity Europe 2026 with Bill Peterson, Senior Director of Product Marketing of Sumo Logic
For years, security leaders in Europe have been told to pick one priority: keep the business running, or keep their data compliant. This conversation from the Infosecurity Europe 2026 floor lays out why that choice is starting to disappear, and what it means for any team running a regulated SOC.
Building AI With Guardrails: Inside Stellar Cyber's Human-Augmented Autonomous SOC | A Brand Highlight Conversation with Lisa Liu, Corporate Marketing and Communications Manager of Stellar Cyber
After RSAC Conference 2026 saturated the show floor with AI on every sticker and slide, Stellar Cyber sits down to cut through the noise with a different message: not all AI belongs in every layer of the SOC. This Brand Highlight unpacks why the right AI for the right problem, paired with a human in the loop, is the pa
Continuous Security Validation in a World of Agentic AI | A Brand Spotlight at RSAC Conference 2026 with Matt Stewart and Alex Grohmann of Impetum
Most security teams believe their tools are working -- but belief is not the same as proof. In this Brand Spotlight recorded live at RSAC Conference 2026, Matt Stewart and Alex Grohmann of Impetum explain why continuous purple teaming has become the missing link between compliance-driven security and evidence-based con
When Every Second Counts, Who Knew What and When? | A Brand Spotlight at RSAC Conference 2026 with Vaughan Shanks, Co-Founder and CEO of Cydarm Technologies
When a major cyber incident unfolds, the difference between a controlled response and a five-day nightmare often comes down to one thing: whether your team has a real system of record. Vaughan Shanks, Co-Founder and CEO of Cydarm Technologies, joins Sean Martin at RSAC Conference 2026 to explain why purpose-built case
SOC Automation and the AI-Driven Future of Cybersecurity Defense | A Redefining CyberSecurity Podcast Conversation with Richard Stiennon, Chief Research Analyst of IT-Harvest
As AI models grow more capable by an order of magnitude each year, a new category of SOC automation vendors is replacing manual alert triage with autonomous, around-the-clock detection and response -- and the numbers suggest adoption is already well underway. In this conversation, Richard Stiennon, Chief Research Analy
The Autonomous SOC Is No Longer a Dream | A Brand Highlight Conversation with Subo Guha, Senior Vice President of Product Management of Stellar Cyber
The autonomous SOC has moved from aspiration to reality, and the security operations teams that embrace agentic AI stand to transform how they detect, triage, and respond to threats. Discover how one platform is using a digital army of AI agents to filter alert noise, accelerate remediation, and help MSPs protect more
2026 Security Predictions: Agentic SOC, China Threats, and Quantum Readiness | A Brand Highlight Conversation with Vincent Stoffer, Field Chief Technology Officer of Corelight
As AI transforms both cyberattacks and defense strategies, security leaders face a pivotal year ahead. Discover how the agentic SOC, nation-state threats, and post-quantum cryptography readiness are reshaping the security landscape for 2026.
AI, Quantum, and the Changing Role of Cybersecurity | ISC2 Security Congress 2025 Coverage with Jon France, Chief Information Security Officer at ISC2 | On Location with Sean Martin and Marco Ciappelli
This episode explores the themes, technologies, and community conversations shaping ISC2 Security Congress, with Jon France offering a forward-looking view of what matters most in cybersecurity today. Listeners gain a clear sense of why the event draws practitioners, leaders, and newcomers who want to strengthen their
From Overload to Insight: Are We Getting Smarter, or Just Letting AI Think for Us? | A RSA Conference 2025 Conversation with Steve Wilson | On Location Coverage with Sean Martin and Marco Ciappelli
Steve Wilson joins us for our first Chats on the Road to RSA Conference, breaking down how AI is reshaping cybersecurity—not by replacing humans, but by helping them see more, understand faster, and act smarter. This episode challenges assumptions about visibility, automation, and learning, offering a sharp look at wha
Detection vs. Noise: What MITRE ATT&CK Evaluations Reveal About Your Security Tools | A Conversation with Allie Mellen | Redefining CyberSecurity with Sean Martin
MITRE ATT&CK Evaluations provide a rare, transparent look at how security tools detect and respond to threats—but making sense of the data is just as important as the results themselves. In this episode, Allie Mellen, Principal Analyst at Forrester, breaks down what the latest evaluations reveal about alert volume, det
Building a Community and a Culture of Security Education and Operations | A Zero Trust World Pre-Event Kick-Off | On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025 kicks off with a deep dive into what Zero Trust really means—beyond the buzzword—focusing on security operations, AI’s growing role, and the necessity of a continuous verification mindset. Hosts Sean Martin and Marco Ciappelli bring you inside the event, capturing insights from industry leaders, h
Shadow IT: Securing Your Organization in a World of Unapproved Apps | A Zero Trust World Conversation with Ryan Bowman | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode of On Location with Sean and Marco, Ryan Bowman, VP of Solutions Engineering at ThreatLocker, breaks down the growing risks of Shadow IT—unauthorized applications and tools that create security gaps, operational inefficiencies, and compliance challenges. With real-world insights and practical strategies
Data Sovereignty and Security Challenges in the APAC Region: Simplifying Security with Zero Trust and AI-Driven Solutions | An Australian Cyber Conference 2024 in Melbourne Conversation with Abbas Kudrati | On Location Coverage
Hear how Abbas Kudrati shares actionable insights on tackling ransomware, navigating AI challenges, and embracing Zero Trust strategies to strengthen cybersecurity foundations in the Asia-Pacific region. This engaging conversation also highlights the evolving role of AI in streamlining operations and staying ahead of a
Building a CISO Office: Mastering Enterprise Risk Management and Aligning Cybersecurity with Business Goals | Part 3 of 3 | A Conversation with Kush Sharma | Redefining CyberSecurity with Sean Martin
Join Sean Martin and Kush Sharma for the third and final installment of this conversation as they provide invaluable insights into building an effective cybersecurity team, integrating business functions, and navigating executive-level communication. Discover practical strategies for elevating security within your orga
The Geek in the Rear with the Gear: Andrew Strutt on Supporting Military operations | Cy Beat Podcast With Deb Radcliff
Andrew Strutt’s elite hacking skills helped him climb the ranks to support military and battlefield cyber ops. Learn how his hacking supports his defense work – and vice versa.
Preview of Devo's SOC Analyst Appreciation Day | Celebrating SOC Analysts: A Day of Appreciation and Happiness | An Event Coverage Conversation with Kayla Williams, CISO of Devo
Marco and Sean are joined by Kayla Williams, CISO for Devo Technology, to discuss the upcoming SOC Analyst Appreciation Day, covering topics such as mental health, managing expectations, AI, and the importance of recognition within the cybersecurity industry.