The Ultimate Guide to Security Operations Centres
A curated Indian edition of IndustrialDay news, analysis, interviews, reviews, job moves, and related resources for Security Operations Centres (SOCs).
What to know about Security Operations Centres
A Security Operations Centre (SOC) serves as the critical hub for monitoring, detecting, and responding to cybersecurity threats within organisations. Covering a wide spectrum of digital environments, SOCs integrate advanced technologies such as AI, machine learning, and automation tools to enhance threat detection and incident response capabilities.
Exploring recent developments in this field reveals insights on evolving challenges like alert fatigue, skills shortages, and the increasing complexity of cyberattack surfaces. Readers can learn how organisations leverage innovations in SOC-as-a-Service, AI-driven threat hunting, and next-generation platforms to build adaptable, efficient security operations tailored to their needs.
Whether you are an IT professional, security analyst, or business leader, following stories under the 'Security Operations Centre' tag offers valuable perspectives on managing cyber risk, improving operational efficiency, and preparing your organisation for the dynamic cybersecurity landscape ahead.
Indian Security Operations Centres News
Regional stories with direct local relevance
Securonix launches behavioural analytics for AI agents
It is aimed at security teams facing a rising attack surface from enterprise AI agents, where legitimate actions can mask compromise or misuse.
Hexnode expands XDR with macOS support & remediation
Security teams can now isolate and fix infected Macs as Hexnode broadens XDR coverage and adds automated remediation.
Securonix names Orient exclusive distributor in India
Orient will spend USD $5 million as the deal aims to deepen Securonix's India reach and add 100 cybersecurity hires in Mumbai.
5Tattva urges integrated cyber compliance approach
As firms spread across cloud and on-premises systems, a combined security and compliance model is becoming harder to ignore for auditors and boards.
Proofpoint expands in India with Hyderabad AI centre
Tripled demand in the past year is prompting the cybersecurity group to add a Hyderabad AI centre and a Delhi office.
Blue Cloud wins USD $150 million SpaceX Malaysia deal
The 18-month pact could boost Blue Cloud's overseas revenue as it expands its US unit's role in AI, security and data-centre services.
Analyst Insights
Research and market analysis connected to Security Operations Centres
Gigamon unveils tools to track shadow AI across networks
Contrast Security named leader in IDC DAST assessment
Hack The Box launches AI range for enterprise security teams
Airrived named leader in IDC MarketScape for AI SOC
DigiCert launches Quantum Central for post-quantum shift
Featured News
Palo Alto Networks: AI hunting vulnerability in legacy systems
Critical infrastructure operators are being urged to merge IT and OT security as AI speeds up attacks on ageing industrial systems.
AI transforming physical security into enterprise data solution
AI and cloud tools are turning cameras into live operational data sources, helping firms cut costs, spot errors and manage fleets centrally.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
Reviews
Expert Columns
Seven Cyber Controls Businesses Can No Longer Afford to Overlook
Integrated video security - a must for modern preschools
In the AI era, channel value is being redefined
The autonomous SOC takeover
How security leaders should measure AI SOC performance
AI closes vulnerability window as zero-day exploits surge
The future of autonomous security
Singapore's security teams are losing a race they don't know they're running
AI is testing the limits of Zero Trust
When AI memory, simulation and provenance collide
Interviews
Interviews and video coverage from the network
Recent Security Operations Centres News
Tanium joins OpenAI cyber programme for threat research
The limited access will help its hunters and engineers turn OpenAI models into detections, vulnerability work and stronger platform defences.
CrowdStrike expands ties with Dynatrace & CoreWeave
Security teams may gain faster investigations as CrowdStrike links Falcon to Dynatrace telemetry and brings protection to CoreWeave's AI cloud.
CrowdStrike & Dell launch AI Factory security package
The package aims to help enterprises secure AI systems from infrastructure to agents as they rush to deploy production workloads.
Google adds AI & partner tools to air-gapped cloud
Defence and intelligence users can now query local text, audio and video with Gemini, without moving sensitive data outside their air-gapped perimeter.
Cisco warns Asia Pacific firms lack confidence on AI agents
Only 52% of firms across Asia Pacific, Japan and China feel ready to detect and respond to compromised AI agents, Cisco found.
Keeper links Tenable findings to instant remediation
Security teams can now fix cloud risks faster, as Keeper's new Tenable link rotates credentials and enforces Just-In-Time access in seconds.
Splashtop launches Agentic Packr for Intune packaging
IT teams may be able to cut packaging delays as Splashtop's new tool automates and validates third-party updates before they reach Intune.
Qualys launches TruRisk Eliminate 2.0 with AI remediation
Security teams are under pressure to fix exposures faster as AI shortens attack windows, and Qualys says its update cuts outage risk.
Arctic Wolf says AI resolves 60% of security cases
Arctic Wolf says AI now resolves 60% of security investigations, while monthly investigation volumes rise and alert volumes fall across more than 11,000 organisations.
Proofpoint joins Microsoft ICES in Defender portal
Microsoft 365 customers can now review Proofpoint email threat alerts inside Defender, cutting the need to switch between security tools.
Cisco warns Singapore firms struggle to spot compromised AI
Just 38% of Singapore organisations feel able to detect and respond to compromised AI agents, as 89% suffered a cyber incident last year.
Most DLP tools catch data loss only after exfiltration
Only 16% of respondents said their most significant data loss incident was blocked before data left, highlighting gaps in DLP controls as AI use grows.
.webp)
Sumo Logic previews Root Cause Agent for DevOps teams
The new tool is aimed at cutting incident triage from hours to minutes by analysing logs and metrics for likely causes automatically.
Sygnia opens AI security hubs in Austin & Singapore
The move will let customers get round-the-clock monitoring as Sygnia widens its follow-the-sun cyber security coverage across three regions.
Graylog launches AI case system in security platform
Security teams may cut alert overload as Graylog's new case system groups evidence and lets AI triage incidents before analysts step in.
Acronis adds dark web monitoring to MDR service
Managed service providers can now spot exposed credentials and leaked data more quickly, with Acronis also widening multilingual support and customer alerts.
Securonix launches behavioural analytics for AI threats
With AI agents widening the attack surface, security teams need to spot abnormal activity across human and machine users before damage is done.
Qualys warns patching surge is missing active exploits
Despite more patching, organisations are leaving the most dangerous flaws open longer, as attackers exploit vulnerabilities before defenders can act.
Palo Alto warns on 22 million exposed PHP instances
Security teams face a wider attack surface, as Palo Alto Networks says the PHP flaws could leave 22 million internet-facing instances exposed worldwide.
SentinelOne names LevelBlue global Wayfinder partner
More organisations will gain round-the-clock threat detection and incident response as LevelBlue takes global delivery of SentinelOne's Wayfinder service.
