[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUkSJTHyDjHaJszXa0EDBp8w2WNsbXOi_Wt7jJ80tM_U":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":58},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"817eaf93-faf8-4914-8909-0e20c2e12c39","From Assistive to Agentic: The AI Shift That's Redefining Threat Management","from-assistive-to-agentic-the-ai-shift-that-s-redefining-threat-management-1f384a","Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemetry and asset data. But often, these tools are working in siloes, generating (overlapping) alerts and data. And yet, breach dwell times remain stubbornly long (~43 days), response windows keep closing before teams can act, and analysts burn out triaging noise instead","The article discusses the limitations of current enterprise security tools, which often operate in silos, leading to alert fatigue and long breach dwell times. It introduces agentic AI as a solution that moves beyond assistive AI by autonomously acting, prioritizing, and executing multi-step workflows across systems at machine speed. This shift is crucial for matching the pace of modern adversaries and effectively operationalizing frameworks like Gartner's Continuous Threat Exposure Management (CTEM).","Agentic AI is redefining threat management by enabling autonomous, machine-speed responses to evolving cyber threats.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F06\u002Ffrom-assistive-to-agentic-ai-shift.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiaBfyINQL8sJZiLP4VnJgWMBOmH-8zY01vQ3E7OWZM9sdPvFQzOrFgaEpJOcRqODwrKDMXjt1HiKZmYYKF4pr22BBcbVBqx31coqBTKsgsf43CPEoW430X177toxpnfpVBTogjlrBMOrsLJgpERpCliEP4h5_2gyu3h2Dy_hJwiV6AI3nbKyp5NvNVgzQ\u002Fs1600\u002Ffiligran-main.png","2026-06-19T11:58:00+00:00","2026-06-19T14:00:21.409675+00:00",7,[17,20,22,24,26,28],{"name":18,"type":19},"AI","technology",{"name":21,"type":19},"Agentic AI",{"name":23,"type":19},"Assistive AI",{"name":25,"type":19},"Continuous Threat Exposure Management",{"name":27,"type":19},"SIEM",{"name":29,"type":19},"BAS","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":30,"icon":32,"name":33,"slug":34},null,"AI Security","ai-security",[36,38,43,48],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":56,"vendors":57},[],[],{"slug":59,"title":60,"body":61,"framework_refs":62,"framework_notes":74},"agentic-ai-closing-the-gap-between-alert-fatigue-and-effective-threat-response","Agentic AI: Closing the Gap Between Alert Fatigue and Effective Threat Response","Modern enterprise security tools frequently operate in isolation, generating overwhelming volumes of alerts that security teams cannot triage fast enough — leaving breaches to dwell undetected for extended periods. The core problem is that assistive AI still requires human intervention at every decision point, making it fundamentally too slow to match the speed and sophistication of today's adversaries. Agentic AI addresses this by autonomously executing multi-step response workflows across integrated systems, effectively operationalizing frameworks like CTEM. Without this shift, organizations remain reactive rather than proactive, continuously losing ground to threat actors who exploit the window between detection and response. The lesson is clear: technology investments that don't reduce mean-time-to-respond (MTTR) at machine speed are insufficient for the current threat landscape.",[63,64,65,66,67,68,69,70,71,72,73],"CIS Control 6: Access Control Management","CIS Control 7: Continuous Vulnerability Management","CIS Control 13: Network Monitoring and Defense","NIST CSF DE.CM: Security Continuous Monitoring","NIST CSF RS.AN: Incident Analysis","NIST SP 800-137: Information Security Continuous Monitoring (ISCM)","NIST IR 8011: Automation Support for Security Control Assessments","Gartner CTEM (Continuous Threat Exposure Management) Framework","MITRE ATT&CK Framework — Detection Coverage Validation","ISO\u002FIEC 27001:2022 — Annex A.8.16: Monitoring Activities","ITIL 4 — Problem Management & Continual Improvement Practices",{}]