Exaforce

North Korean hackers posed as recruiters on LinkedIn—with a level of polish that Michael Shaulov, Fireblocks CEO says is now "way harder to detect because of AI." They ran professional interviews. Sent polished PDFs and GitHub repos with "coding assignments." When candidates ran the code? Malware—targeting keys and production access. What SIEM rule will catch this? You'd need detection engineers to anticipate a complex business risk and these problems are going to get more complex. Sophisticated infiltration by nation state attackers is becoming commonplace and we saw this at a major cybersecurity company recently where their corporate laptop was being operated by an "insider/employee" out of the a laptop farm in Washington controlled from North Korea. Quite a similar insider attack at the largest fabless semiconductor company. Who will be next? At Exaforce, we don't translate every attack scenario into rules. We understand business outcomes—identity risks, privileged access anomalies, insider threats. SIEMs see events whereas Exaforce builds a semantic understanding of data and identities and then we detects threats from a business risk perspective. Last year, we partnered with Srijan R Shetty, CTO of Fuze to build a semantic understanding of their environment - Amazon Web Services (AWS), GitHub, Fireblocks, Google, and Microsoft EntraID - to ensure that more of the #crypto industry can be protected as the attacks get more sophisticated. Exaforce delivers the best understanding, visibility and protection of usage of Fireblocks in your environment! https://lnkd.in/gkQXsuwV

Gartner® research highlights "real-time containment actions" as a core benefit of agentic AI for TDIR platforms. The speed difference matters: Traditional approaches rely on human analysts to triage, correlate context, and respond. Agentic AI does this autonomously in minutes. This is especially critical for cloud and SaaS threats where attackers move fast and context is distributed across multiple systems. The shift: From human-dependent response workflows to AI-accelerated containment with human oversight. Report: https://hubs.li/Q040CGHQ0 #IncidentResponse #AgenticAI #CloudSecurity #SOC #Cybersecurity

Sophisticated phishing attacks continue to evolve. Joseph Odyn and Bleon P. recently investigated an Adversary-in-the-Middle attack that can bypass MFA protections by leveraging trusted infrastructure from Adobe and Google Cloud Platform. The attack used compromised Adobe Acrobat links to redirect victims through multiple layers of deception before presenting a credential-harvesting page that captured passwords and MFA tokens in real-time. Read the full technical breakdown: https://hubs.li/Q040CF-h0

One week out. If you've ever wondered whether your MDR spend still makes sense, or if it's time to bring security operations in-house, this session is for you. Marco Rodrigues and Taylor Smith will walk through: → The traditional MDR vs. in-house framework → How AI SOC platforms are rewriting the economics → Real repatriation case studies and transition playbooks Wednesday, Feb 4 11 AM PT / 2 PM ET Live session with Q&A This is the practical decision framework security leaders are using right now. Save your spot: https://hubs.li/Q03-VFLL0 #AISOC #CyberSecurity #AI #SOC #SecurityOperations #MDR

AI-powered cyberattacks are here, and they’re moving at machine speed. USA TODAY profiled how Exaforce tackles the defining challenge for security teams. When attackers automate with AI, defenders can’t keep up with manual processes, and hiring more people won’t solve it. Our Agentic SOC Platform automates the full security lifecycle, from detection through response, at machine speed with human oversight. Full feature: https://hubs.li/Q03_BmgY0

The #1 reason companies choose MDR? "We can't hire SOC analysts fast enough." According to Gartner® research on agentic AI in TDIR platforms, this technology "enables less experienced analysts to manage complex incidents" and "bridges skill gaps without relying on scarce expert talent." If AI can make a junior analyst perform at a senior level, does the talent shortage still justify MDR? Full report: https://hubs.li/Q03_Mmy90 #CyberSecurityTalent #SOC #AgenticAI #ThreatDetection #SecurityOperations

A senior engineer ships a routine code update on a Sunday night. Inside: a backdoor with hardcoded credentials. Over the next week, they clone dozens of repos they’ve never touched before. Days later, they resigned to join a competitor. This is insider risk in 2026 and it’s costing organizations $17M per year. The problem is detecting intent. https://hubs.li/Q03_cPfZ0

For years, the choice between MDR and in-house SOC came down to a simple equation: headcount vs. cost. Now AI platforms are fundamentally changing that math. Join Marco Rodrigues and Taylor Smith for a practical deep-dive into the new decision framework. We'll cover: ✓ Traditional cost breakeven analysis (and why it's shifting) ✓ How AI changes staffing assumptions for in-house SOCs ✓ Repatriation triggers we're seeing in the market today ✓ When MDR still makes sense (even with AI) Wednesday, Feb 4, 2026 11 AM PT / 2 PM ET 45 minutes + live Q&A Whether you're building your first SOC, evaluating your MDR contract, or planning a transition, this session gives you the framework to make the call. Register: https://hubs.li/Q03-VGT80 #MDR #SOC #AISOC #CyberSecurity #SecurityOperations