The Ultimate Guide to Security Information and Event Management
A curated Australian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Security Information and Event Management (SIEM).
What to know about Security Information and Event Management
Security Information and Event Management (SIEM) is a critical component in the cybersecurity landscape, combining real-time analysis of security alerts with centralized data collection to enable effective threat detection, incident response, and compliance management. As cyber threats grow increasingly sophisticated, SIEM platforms have evolved, integrating advanced analytics, artificial intelligence, and cloud capabilities to help organizations stay ahead of attacks.
This tag gathers stories highlighting the ongoing developments and challenges within the SIEM domain, including strategic considerations for security frameworks, innovative product launches, key acquisitions, and partnerships from notable vendors. Readers will find insights into how AI and machine learning are transforming SIEM functionalities, addressing skills shortages, and automating incident response to enhance security operations centers' efficiency.
Additionally, these articles explore the market dynamics of SIEM solutions, from emerging technologies and vendor comparisons to practical guidance on implementing, optimizing, and managing SIEM platforms. Whether you are an IT security professional seeking the latest trends or a business leader aiming to understand the role of SIEM in cyber risk management, this collection offers valuable perspectives to inform your cybersecurity strategy.
Australian Security Information and Event Management News
Regional stories with direct local relevance
Nozomi launches Compass for OT asset & service management
Industrial operators will get faster compliance evidence and safer change control as the new platform replaces spreadsheets and manual OT workflows in January.
VAST Data & CrowdStrike widen AI security integration
Security teams could gain wider visibility into AI data flows as native Falcon support and two CrowdStrike integrations extend across VAST's platform.
Acronis says frontier AI is speeding cyber attacks
Frontier AI is lowering the bar for cybercrime, with attackers using it to scale phishing, malware and reconnaissance more quickly.
Macquarie Government launches Azure practice for agencies
Australian agencies can now tap managed Azure services as Macquarie Government broadens its cloud offer amid pressure to modernise securely and cut costs.
Australian firms turn to unified security platforms
Rising alert volumes and AI-driven threats are pushing Australian organisations towards unified security platforms, a Fortinet study found.
The real cost of build vs. buy for agentic AI in regulated banking
Banks risk repeating DevOps sprawl as DIY agentic AI pushes build costs above USD $1.4 million and delays production by up to 18 months.
Analyst Insights
Research and market analysis connected to Security Information and Event Management
RSA launches Agent ID for regulated AI agent control
Exabeam adds AI tools for agentic security operations
Thrive bolsters NextGen platform with Elastic, Cato
F5 expands AI Gateway to curb costs & secure agents
Jamf launches AI governance for Mac as usage rises
Featured News
Expert Columns
When AI memory, simulation and provenance collide
The real cost of build vs. buy for agentic AI in regulated banking
What Swiss Cheese teaches us about choosing MDR
The evolving role of the CSO: From technical guardian to business strategist
Why AI-powered security needs network telemetry across the hybrid cloud
Observability & AI spark Australia's business edge
Why agentic AI is the game-changer SOCs need
Why now is the time to modernise your SIEM
Interviews
Interviews and video coverage from the network
Recent Security Information and Event Management News
Tanium relaunches Security Operations to counter AI attacks
The update aims to help security teams spot and stop AI-driven intrusions that use stolen credentials and trusted tools rather than malware.
Tanium relaunches security platform to counter AI attacks
The update aims to help security teams spot intrusions that use stolen logins and normal admin tools, which can evade signature-based defences.
Dashlane expands SIEM integrations with browser telemetry
The move aims to close a browser visibility gap, giving security teams earlier warning of risky logins and phishing without another console.
Gurucul launches AI risk & response for enterprises
The new tool lets security teams spot shadow AI use and risky autonomous agents before they expose sensitive data or critical systems.
UltraViolet Cyber launches Equinox to map detection gaps
Security teams can now test whether their tools spot attacks, after UltraViolet Cyber said Equinox can map gaps in under 30 minutes.
Hexnode XDR adds macOS support & faster remediation
MacOS users can now be covered by Hexnode's XDR as the update aims to cut alert overload and speed up threat response for IT teams.
Quest expands identity security for AI agent threats
The update is aimed at speeding recovery and containing breaches as AI agents gain access to corporate identity systems.
Okta adds controls for AI agents amid security push
The controls aim to help firms spot risky agent behaviour, cut off access quickly and reduce lingering credentials as AI use grows.
eSentire acquires AI security startup for Atlas AIDR
Security teams are gaining real-time audit trails and controls as eSentire folds the stealth startup's AI monitoring module into Atlas.
BeyondTrust links privilege data to CrowdStrike Falcon
Joint customers can now spot privileged identity risks alongside threat alerts in CrowdStrike Falcon, after BeyondTrust added new data feeds.
BlueVoyant launches Microsoft Defender XDR ISOC service
The service is aimed at firms that pay for Microsoft security tools but have yet to turn them into fully operational defences.
Gravwell unveils five AI agents for security teams
Security teams can now use narrowly scoped agents to triage alerts, investigate cases and check systems without giving AI unrestricted access.
AI agents top insider risk concern for security chiefs
Surveyed firms are struggling to spot when autonomous tools stray from approved tasks, as 48% of security leaders now rank them as their biggest insider threat.
Mandiant warns of AI agents fuelling new attack risks
Autonomous systems are now creating fresh avenues for code theft, remote execution and runaway cloud spending, Mandiant says.
Horizon3 links NodeZero to CrowdStrike Falcon SIEM
Security teams can now compare validated exposure findings with endpoint and cloud telemetry after Horizon3 tied NodeZero into CrowdStrike's SIEM.
AI agents now seen as biggest insider risk, Exabeam
Nearly half of security leaders now rank AI agents above external hackers and malicious insiders, according to Exabeam's survey.
Eventus Security urges decision-centric SOCs at AI summit
Growing alert volumes are pushing Indian security teams to use AI for faster, context-led decisions instead of more monitoring.
Filigran adds attack chaining to OpenAEV v3 release
Security teams can now trace how one weak point becomes a full breach path as Filigran automates multi-step testing in OpenAEV v3.
CrowdStrike launches SafeMind and cyber defence AI lab
Enterprise security teams could see faster breach detection and response as CrowdStrike's new AI models are trained on live threat data.
.webp)
ClickHouse buys RunReveal to boost security analytics
Security teams could get faster investigations as ClickHouse folds RunReveal's platform expertise into its database business.
