A human supervisor manages a staff of robots in a security operations center.

human-managed-agentic-soc-socialsight

AI/ML

Resource

Sophos

The human factor: Why AI-powered SOCs still need people in charge

<body>
<p>As cyberattacks grow faster and more sophisticated, security teams face mounting pressure to detect and respond in real time. This white paper explores how Sophos is operationalizing agentic AI within Managed Detection and Response (MDR) to meet that challenge. By deploying autonomous AI agents for triage and investigation, Sophos reduces alert noise by over 60% and cuts investigation time by up to 50%, enabling analysts to focus on high-impact threats. Learn how these always-on agents streamline workflows, deliver explainable outcomes, and enhance human decision-making—laying the foundation for a more efficient, scalable, and resilient “agentic SOC.”</p>
</body>

From Alert Overload to Autonomous Defense: How AI Agents Are Transforming MDR and the Modern SOC

Sophos Apr asset 1

<body>
<p>Most security teams don’t switch providers because they want to; they switch because they’ve spent months compensating for missed detections, vague reports, and a SOC that stopped evolving. But the switch itself carries real risk: gaps in coverage during transition, loss of detection logic and tuning history, and the chance you’ll end up in the same situation with a different logo on the invoice.</p>



<p>This guide breaks the provider switch into three operational stages — pre-transition audit, provider evaluation with a practitioner-grade selection filter, and post-transition lockdown — with specific actions at each step. It covers how to assess contract exit terms, preserve your tech stack investment, test a new provider’s detection and response capability before committing, and set up 30/90-day accountability checkpoints. It includes tailored transition paths for five common switch scenarios (MSSP → MDR, MDR → MXDR, MSSP → MXDR, MSSP → SOCaaS, SOCaaS → MXDR) based on your current maturity gaps.</p>



<p>No vendor comparison charts. No magic quadrant references. This is the operational playbook your team needs to make the move without creating a bigger problem than the one you’re solving.</p>



<p></p>
</body>

How to Switch Your MSSP/MDR Provider Without Losing Coverage, Context, or Your Mind

UnderDefense Asset 2

Cloud Computing Security – Vulnerability and Threat Management S

Threat Management

Nurture

Palo Alto Networks

How to transform your SOC through XDR and MDR

<body><h3>Segment 1: Interview with Warwick Webb</h3>

<p>From Initial Entry to Resilience: Understanding Modern Attack Flows</p>

<p>Modern cyberattacks don’t unfold as isolated alerts--they move as coordinated attack flows that exploit gaps between tools, teams, and time. In this episode, Warwick Webb, Vice President of Managed Detection and Response at SentinelOne, breaks down how today’s breaches often begin invisibly, progress undetected through siloed security stacks, and accelerate faster than human response alone can handle. He’ll discuss how unified platforms, machine-speed detection powered by global threat intelligence, and expert-led response change the equation--turning fragmented signals into clear attack narratives. The conversation concludes with how organizations can move beyond incident response to build resilience, readiness, and continuous improvement through post-attack analysis. Listeners will leave with a clearer understanding of how attacks actually unfold in the real world—and what it takes to move from reactive alert handling to true attack-flow-driven defense.</p>

<p>Segment Resources:</p>

<ul>
<li>Wayfinder <a rel="noreferrer noopener" target="_blank" href="https://www.sentinelone.com/resources/datasheets/assets/services-wayfinder/wayfinder-mdr-en">MDR Solution Brief</a></li>
<li>451 <a rel="noreferrer noopener" target="_blank" href="https://www.sentinelone.com/resources/whitepapers/assets/services/451-research-mdr-en">MDR Report</a></li>
<li>Managed Defense Redefined <a rel="noreferrer noopener" target="_blank" href="https://www.sentinelone.com/blog/managed-defense-reimagined-introducing-wayfinder-threat-detection-and-response/">Blog</a></li>
</ul>

<p>This segment is sponsored by SentinelOne. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/sentinelone">https://securityweekly.com/sentinelone</a> to learn more about them!</p>

<h3>Segments 2 and 3: The Weekly News</h3>

<p>In this week's enterprise security news, </p>

<ol>
<li>we’ve got funding</li>
<li>free tools!</li>
<li>the CISO’s craft</li>
<li>agentic browsers</li>
<li>tech companies are building cyber units?</li>
<li>giving AI agents access to your entire life</li>
<li>lots of dumpster fires in the industry today</li>
<li>Cisco killed Kenna</li>
<li>the state of AI in the SOC</li>
<li>homemade EMP guns! don’t try this at home</li>
</ol>

<p>All that and more, on this episode of Enterprise Security Weekly.</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14471″} podcast from PPWorks

Security Operations

AI benefits/risks

Initial entry to resilience: understanding modern attack flows and this week’s news – Warwick Webb – ESW #444

Closeup of mobile phone screen with logo lettering of crowdstrike cyber security company on computer keyboard

CrowdStrike logo

Cloud Security

Brief

CrowdStrike, Kroll form major MDR security alliance 

<body>
<h3 class="wp-block-heading">Addressing Cybersecurity Burnout in 2025</h3>



<p>The rise of sophisticated cyber threats like ransomware is intensifying pressure on IT and cybersecurity teams, fueling cybersecurity fatigue and burnout.</p>



<p>This report reveals the prevalence, drivers, and consequences of burnout and shows how strategic solutions, including MDR services, can ease the pressure and strengthen resilience.</p>



<h3 class="wp-block-heading">Inside the report</h3>



<p>Based on the real-world experiences of 5,000 IT and cybersecurity professionals across 17 countries, the report explores:</p>



<ul class="wp-block-list">
<li>
<ul class="wp-block-list">
<li>The core causes and consequences of cybersecurity fatigue and burnout.</li>



<li>The toll on individuals and organizations.</li>



<li>The effectiveness of MDR services in reducing cybersecurity fatigue.</li>



<li>How Sophos MDR can relieve the mounting cyber pressure on in-house teams.</li>
</ul>
</li>
</ul>



<p></p>
</body>

The Human Cost of Vigilance: Addressing Cybersecurity Burnout in 2025

Sophos Asset 4

Ransomware

Ransomware in critical industries: What new data reveals about sector weaknesses and the escalating human toll

MDR