[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCrw7ps-Ys-6Gt-2rEb2XfCSybvxyn9k0gd_hLG_IjD8":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"ea0fd426-4a41-4c9c-9e1f-0cb8ac716b03","The Hidden Security Risk in Modern Networks: The Work Between Tools","the-hidden-security-risk-in-modern-networks-the-work-between-tools-a3e4d5","Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort. But the same challenges persist. Outages still last hours, causing significant financial losses, operational disruption, and reputational impact. Threat response and mean time to","Despite advancements in security tooling and AI, organizations still face significant challenges in incident response due to fragmented operational workflows. The manual effort required to gather context, validate ownership, route tickets, and implement changes across disparate systems creates bottlenecks, increases human error, and slows down remediation times. This \"work between tools\" leads to delayed incident response, potential misconfigurations, and compliance gaps, ultimately limiting security's business impact.","Manual workflows between security tools create hidden risks and slow incident response.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F06\u002Fthe-hidden-security-risk-in-modern.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjJqeGTf-8XwdqkhtSdYoCT3HhGAP5pxBuBeA1ngKoX7BfGUcJMwqGhtf8Eh5TVXaN8-p-Ggk8Uiz4DhtmfT8GkKggOPmqRoh5j6XEumgw9aT7kwo4YcNAi_JrqIhSJU-_7gsyBXfwxAi7YfOS1_6CuDSen29PlEk5O4yA80Ob8_WNh81sExm8vgWSVnsY\u002Fs1600\u002Ftines.jpg","2026-06-09T11:30:00+00:00","2026-06-09T12:00:08.454221+00:00",7,[17,20,22,24,26],{"name":18,"type":19},"Artificial Intelligence","technology",{"name":21,"type":19},"Security Automation",{"name":23,"type":19},"SIEM",{"name":25,"type":19},"IAM",{"name":27,"type":19},"ITSM","c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73",{"id":28,"icon":30,"name":31,"slug":32},null,"Incident Response","incident-response",[34,39,44,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":45},{"id":28,"icon":30,"name":31,"slug":32},{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[],{"controls":54,"vendors":129},[55,84,112],{"slug":56,"name":57,"problem":58,"products":59},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","sentinel","Microsoft Sentinel","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-sentinel-siem","Cloud SIEM and automated response, built on Azure.",{"slug":85,"name":86,"problem":87,"products":88},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[89,97,104],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":32,"product_name":101,"url":102,"description":103},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"slug":113,"name":114,"problem":115,"products":116},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[117,123],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":118,"product_name":119,"url":121,"description":122},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":124,"product_name":125,"url":127,"description":128},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":140},"fragmented-security-operations-create-response-bottlenecks","Fragmented Security Operations Create Response Bottlenecks","Organizations are experiencing delayed incident response and increased human error due to fragmented operational workflows across disparate security tools. The manual effort required to gather context, validate ownership, and coordinate changes between systems creates significant bottlenecks that slow remediation times. This operational inefficiency not only increases the window of exposure during security incidents but also leads to potential misconfigurations and compliance gaps that can have lasting business impact.",[135,136,137,138,139],"NIST IR-4","NIST IR-8","CIS Control 19","ISO 27035","ITIL Incident Management",{}]