Discussions, questions and news about SOAR from cybersecurity professionals on Cyberr.
0 members · 35 posts
Schomer — Principal Security Solutions Architect & Founder
Under the Hood: Real-Time STIX 2.1 Telemetry of a Blocked PHP2Shell Cascade When an automated exploit cascade hits your environment, you don’t have time to wait for a database write or an application-layer parsing loop. True security requires capturing, validating, and stripping…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Moving Validation Before Allocation: Securing Agentic Commerce at Layer Zero As automated transaction networks and autonomous AI agents take over global checkout paths, application security interfaces are facing a catastrophic engineering gap: traditional Web Application Firewal…
· 2 reactions · 0 comments
REEMA Nasser ALMUTAIRI — Cybersecurity Engineer
For those working in SOC L2 what are you guys seeing lately in real-world investigations? I’m curious about what’s actually changing in the way you investigate alerts, hunt for threats, and build detection rules. Any new techniques, tools, or approaches that have made a real dif…
· 5 reactions · 4 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
AI didn’t change what attackers want. It changed what it costs them to get it. People ask me whether AI is good or bad for security. I think that’s the wrong question. The better question is: who gets more out of each dollar spent on AI? Right now, the answer depends on where yo…
· 10 reactions · 5 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
https://youtu.be/1Z0vLZ7PnSA?si=20iKqu8QPtsYY87F Is SOC really the right starting point for anyone looking to build a career in Cybersecurity? In this episode of Open Discussion, we take a practical look at the SOC and Blue Team career path and discuss what a SOC Analyst actuall…
· 2 reactions · 15 comments
🚨 Something is taking shape behind the scenes… I’ve been quietly working on a my own independent cybersecurity project that’s evolving well beyond what I originally imagined. It started with a simple question: What if I could build my own environment to observe, investigate and…
· 4 reactions · 1 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
🚨 𝟮𝟬 𝗦𝗢𝗖 𝗧𝗼𝗼𝗹𝘀 𝗧𝗼 𝗚𝗼 𝗙𝗿𝗼𝗺 𝗕𝗲𝗴𝗶𝗻𝗻𝗲𝗿 → 𝗘𝘅𝗽𝗲𝗿𝘁 🚀 If you're serious about becoming a SOC Analyst, Blue Teamer, or Threat Hunter. Learning the right tools matters more than learning random theory. These tools are used for: ✅ SIEM & Log Analysis ✅ Thr…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
⚡ LAYER ZERO MECHANICS: HOW WE ENGINE-OBJECTIFY TELEMETRY AT LINE-RATE When handling an execution-time validation threshold of <0.15ms, you cannot allow raw transactional payloads to touch disk or block the main thread. Traditional security architectures introduce serialization…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Scaling Defensive Architecture: The Triad of Automation, Protocol Isolation, and Structured Telemetry To build resilient security frameworks that withstand modern, low-level attack vectors, we must move away from reactive signature-matching. True runtime defense requires a parad…
· 2 reactions · 4 comments
Quinton Plaatjies — SOC Engineer
AI Made Attackers Faster. How Fast Can You Respond? Generative AI has fundamentally changed the cybersecurity landscape. Tasks that once required specialized expertise, such as crafting phishing campaigns, writing malware variants, researching vulnerabilities, and identifying ta…
· 2 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
THE BLIND SPOT OF AGENTIC ATTACKS: WHY APPLICATION-LAYER INTENT DETECTION IS A DEAD-END Recent findings regarding intrusions against South Korean financial organizations have exposed a critical flaw in modern enterprise defense. Adversaries are no longer just dropping static pay…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Sustaining Wire-Speed Chaos: How Layer Zero Posture Validation Achieved 100% Containment Against 20,000 Mutated Attacks Executive Summary Traditional perimeter defense relies on a dangerous assumption: that an ingestion engine can safely parse an exploit payload to determine if…
· 2 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Fusing Layer 0 Defense with Active Counter-IntelligenceTraditional security treats enforcement and threat tracking as two separate silos: you either reactively drop a packet, or you spend hours manually digging through fragmented SIEM logs long after the blast radius has settled…
· 4 reactions · 0 comments
Esla Kwanza — CyberOps Community Lead
AI is changing the economics of cyber defense. And I think African businesses need to pay much closer attention. More than 150 organizations have signed OpenAI's A Call for Collective Action on Cyber Defense, calling for stronger collaboration, better defensive capabilities, res…
· 0 reactions · 3 comments
Schomer — Principal Security Solutions Architect & Founder
CISA BOD 26-04 and the Reality of Pre-Patch CompromiseCISA’s recent addition of CVE-2026-48907 to the Known Exploited Vulnerabilities (KEV) catalog under Binding Operational Directive (BOD) 26-04 highlights a massive operational bottleneck for CISOs. Under new mandates, organiza…
· 3 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
The Cybersecurity Confidence Gap: 96% Feel Ready, 70% Got Breached Security teams have never had more monitoring in place, and they have rarely been more sure of themselves. In its 2026 AI & Cybersecurity Trends Report, Arctic Wolf, a managed detection and response (MDR) provide…
· 7 reactions · 0 comments
Kameron — IT Support Technician
I work in a college town not terribly far from a major city, and there is very little cyber security presence outside of the major metropolitan area. Security is not just for big companies doing business in the city. Often times, it's smaller businesses that are prone to vulnera…
· 2 reactions · 0 comments
Damian Kuś — Penetration Tester / Offensive Security Engineer
Everyone is talking about what AI will do to cybersecurity. Faster exploitation. Autonomous attacks. AI-generated phishing. Zero-day acceleration. Attack chains at machine speed. And honestly? Some of those concerns are valid. But I think the industry is focusing on the wrong qu…
· 3 reactions · 3 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
One pattern I keep noticing across many cybersecurity products: The data is usually there. The challenge is structure, prioritization, and investigation flow. When analysts constantly switch between disconnected panels, tabs, and data sources, cognitive load becomes part of the…
· 4 reactions · 2 comments
George Botnaru — Senior Software Engineer
Not every cyberattack starts with an exploit—sometimes it starts with a download. Socket uncovered a campaign of 737 Chrome VPN extensions impersonating 66 legitimate VPN brands, with more than 75,000 installs. Many silently routed users’ browser traffic through attacker-control…
· 2 reactions · 0 comments
PETER DESFIGIES — Cybersecurity / Threat Researcher / Breaker of All Things / Discovered a 563-Node Global Botnet
I wasn't going to post anything more today, but this one really sunk in and I reaped the rewards.. Friday afternoon. Mid-session. Alert fires. Live IAB operator. Healthcare credential harvesting. Caught in the act. But here's the part that matters — I've been tracking this guy f…
· 3 reactions · 3 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
One extra click during a security investigation doesn’t sound like much. But the cost isn’t really the click. It’s the context switch around it. Open another panel. Check related activity. Go back. Find the previous alert. Rebuild the context. Each action is small, but investiga…
· 1 reactions · 0 comments
Innocent O. Akpareva — Cybersecurity Analyst
Happy Sunday to all the SOC analysts currently on shift, monitoring alerts, investigating suspicious activity, and making sure critical assets and infrastructure stay protected. 🛡️ While most people are resting, someone is watching the dashboards, correlating logs, escalating i…
· 6 reactions · 0 comments
SHAHBAS P P — Security Delivery Analyst
Has successfully verified Chronicle SOAR Fundamentals V6 (CSFv6) (Google), Google Chronicle SOAR Analyst (Google) and 2 more certifications
· 0 reactions · 0 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Security tools collect evidence. But they rarely tell a story. An investigation usually begins with scattered pieces of information: Alerts. Logs. Processes. Users. IPs. Threat intelligence. The data is there. The challenge is connecting it into a coherent narrative that explain…
· 3 reactions · 0 comments