Headed to BlackHat EU? š¬š§
Swing by the @corelight + GreyNoise booth for a chat and then grab drinks with the team after the con on Wednesday, Dec 10th. Sign up today to reserve your spot!
š https://info.greynoise.io/events/blackhat-europe-hh-2025
Weāre thrilled to announce that Corelight has been recognized as a Leader in the 2025 GartnerĀ® Magic Quadrantā¢ for Network Detection and Response! š
To us, this recognition reflects our capabilities in executing and delivering a comprehensive vision for NDR, with deep visibility and the ability to detect advanced threats. Our focus on structured network evidence, multi-layered detection, and integrating AI into SOC workflows continues to set us apart.
Curious about whatās behind this recognition? Head to the full blog to learn more about how weāre helping organizations detect, investigate, and respond to threats faster and more accurately.
As organizations move to multi-cloud environments, securing network traffic becomes increasingly complex. Corelightās Open NDR offers the deep visibility needed to spot threats across both cloud-native and on-prem traffic. The real challenge isnāt just detecting threats, but understanding them in context.
In the cloud, visibility is critical for staying ahead of attackers, ensuring compliance, and maintaining a proactive security posture.
š Learn how Open NDR empowers security teams to protect cloud environments with our free guide: https://go.corelight.com/a-cloud-architects-guide-to-network-security?utm_source=msdtn&utm_medium=organic-social&utm_campaign=ebook&utm_adgroup=architect-guide&utm_content=SSI
Recent state-sponsored campaigns like Volt and Salt Typhoon demonstrate how traditional endpoint detection and response (EDR) tools alone arenāt enough to detect and stop highly sophisticated threats.
Attackers are exploiting vulnerabilities in unmanaged network appliances and using "living-off-the-land" tactics, blending into legitimate network traffic to avoid detection.
The solution? Shifting focus from just endpoint protection to comprehensive network visibility and detection. Network visibility is critical to identifying these threats early and preventing further damage.
š Read the full blog to discover how attackers are bypassing EDR and why network-based detection is crucial for closing the gaps: https://corelight.com/blog/volt-typhoon-salt-typhoon-edr?utm_source=mstdn&utm_medium=organic-social&utm_campaign=blog&utm_adgroup=typhoon-season&utm_content=SSI
At SCinet 2024, Eldon Koyle, Principal Technical Marketing Engineer at Corelight, was threat hunting using data from Corelight sensors in one of the fastest, most open research networks ever created.
š His key takeaway? Context is everything.
In high-speed environments, security teams canāt rely solely on alerts. They need data that paints a clearer picture of any suspicious behavior on the network. Enriched network logs provide critical visibility, helping threat hunters connect the dots and make more informed decisions in real time.
With vast amounts of data moving across the network, how do you ensure your security team has the visibility needed to identify and assess threats before they escalate? Read Eldonās full insight his latest blog š https://corelight.com/blog/threat-hunting-at-scinet-24?utm_source=msdtn&utm_medium=organic-social&utm_campaign=blog&utm_adgroup=SCinet2024&utm_content=quote
Cloud-based AI models like DeepSeek offer convenience, but they introduce privacy concernsāespecially when handling sensitive network data.
Instead, run DeepSeek locally. Learn how to use ZeekĀ®ļø and the DeepSeek-r1 model with Ollama and Open WebUI to securely and efficiently summarize Zeek package contents, without exposing your data to the cloud.
Keep your investigations in-house and benefit from: š Enhanced securityāno cloud exposure ā”ļø Improved efficiency in Zeek summarization with local AI processing āļø Full control and privacy when working with network monitoring scripts
Take control of your data and investigations, all while improving efficiency.
š Read more on the blog: https://corelight.com/blog/secure-deepseek-zeek-analysis?utm_source=mstdn&utm_medium=organic-social&utm_campaign=blog&utm_adgroup=deepseek&utm_content=SSI
Cyberattacks targeting critical infrastructure are rapidly evolving.
"The energy sector is a major target, and these attacks can cripple organizations if we don't improve our visibility." š¬ Gregory Bell, Corelight Co-founder
In the latest episode of CrowdStrike's Adversary Universe podcast, Greg discusses the challenges of securing critical devices across OT and IT environments in the energy sector, where solutions like EDR arenāt always feasible. These vulnerabilities make prime targets for sophisticated attacks like Volt Typhoon and Salt Typhoon, emphasizing the critical need for complete network visibility to stay one step ahead.
Network visibility is crucial for early threat detection, whether that involves hidden vulnerabilities or sophisticated attackers operating under the radar.
š Listen to the full episode with Greg Bell, Adam Meyers, and Cristian R.: https://crowdstrike.podbean.com/e/putting-a-spotlight-on-energy-sector-threats-with-corelights-greg-bell/
Cyberattacks targeting critical infrastructure have made more headlines in recent years, sparking concern about how these systems are protected. Adversaries are taking aim at older technologies that are both essential to everyday life and difficult to secure. Our guest for this episode is Greg Bell, chief strategy officer at Corelight. Before he co-founded the network security firm, Greg spent most of his career working in the National Laboratory system, part of the U.S. Department of Energy. He brings his perspective and expertise to this conversation about energy sector threats, the adversaries behind them, and the unique challenges that utility organizations face in detecting and defending against cyberattacks. There is a scary side to energy sector threats ā but there is also an optimistic side. Adam, Cristian, and Greg discuss everything from the history of critical infrastructure threats to the attacks theyāre seeing today, the complications of securing energy systems, and collaborative efforts to improve defense. Key to these efforts are partnerships like the one between CrowdStrike and Corelight, which work together to improve network threat detection and response. Come for the comprehensive look at energy sector threats and stay for Cristianās energy sector puns in this episode of the Adversary Universe podcast.
GreyNoise