Name: 2025 State of the SOC Report: The Impact of AI in SOCs
Start: 2025-05-08T17:00:00Z
End: 2025-05-08T17:00:50.000Z
Location: BrightTALK
Rating: 4.8

Adlumin, an N-able Company, delivers enterprise-grade cybersecurity to organizations of all sizes through its powerful Security Operations as a Service platform. With an agnostic approach, Adlumin seamlessly integrates with your existing stack and offers flexible deployment options—whether self-managed or fully managed by our experts. Our mission is to empower businesses to take control of their digital security by making advanced protection accessible, adaptable, and effective.


The Security Operations Center (SOC) is at an AI-fueled inflection point, facing an increasing volume, velocity, and sophistication of threats from cybercriminals armed with AI tools. To combat these challenges, many SOCs have turned to AI and ML tools, but the balance between AI’s potential and its risks remains a pressing issue — especially for small- to medium-sized businesses (SMBs).  

Join us as we share the findings of Adlumin’s inaugural State of the SOC Report and provide a deeper look at how the Adlumin SOC is responding to today's cybersecurity threats. Will Ledesma, Director of MDR and SOC team leader at N-able, and Jim Waggoner, VP of Product Management at N-able, will share key insights from our State of the SOC Report including: 

- Where threats are coming from
- Benefits and challenges of AI  
- How AI has shaped and will shape the future of the SOC 
- Building the SOC of the future

This webinar is a must for any cybersecurity or IT professional. All registrants will receive an exclusive copy of the State of the SOC report.

2025 State of the SOC Report: The Impact of AI in SOCs

A note from Mark Sangster: 

The holidays are a time for rest, but cybercriminals don’t take time off. To help you enjoy your December break with peace of mind, the Adlumin team is bringing back an encore presentation of my webinar, Ransomware Stopped: Defending Against Fog and Other Threat Actors Now and in 2025. Join me to learn effective defenses so you can relax through the holidays and into the new year.

Best,
Mark Sangster
VP, Chief of Strategy
Adlumin 

Adlumin’s Security Operations Center (SOC) is on the frontlines of cybersecurity, defending our customers against thousands of attacks daily. In August 2024, our SOC team encountered "Fog," a new variant of the STOP/DJVU ransomware family, which infiltrated a compromised VPN at a financial institution—the first attack of its kind in the sector. Thanks to Adlumin’s technology, the threat was swiftly contained, and the attackers were locked out before any damage could be done. 

Join Adlumin’s expert Mark Sangster, DPO and Chief of Strategy, as he walks you through some of our SOC’s most significant threat interceptions, including the Fog ransomware attack and how Adlumin’s Security Operations as a Service platform solution thwarted these attacks in their early stages. 

Key Takeaways: 
• An overview of the most notable threat actors Adlumin’s SOC team encountered 
• A step-by-step breakdown of the Fog data breach attempt and how Adlumin’s Ransomware Prevention stopped the attack 
• Best practices for strengthening your organization's defense against similar threats from cross-border cyber attacks 

Register today to gain expert insights and actionable strategies to keep your organization from the ever-present threat of global bad threat actors.

Encore Presentation: Ransomware Stopped: Defending Against Fog and Other Threat Actors Now and in 2025

Adlumin’s Security Operations Center (SOC) is on the frontlines of cybersecurity, defending our customers against thousands of attacks daily. In August 2024, our SOC team encountered "Fog," a new variant of the STOP/DJVU ransomware family, which infiltrated a compromised VPN at a financial institution—the first attack of its kind in the sector. Thanks to Adlumin’s technology, the threat was swiftly contained, and the attackers were locked out before any damage could be done.

 Join Adlumin’s expert Mark Sangster, DPO and Chief of Strategy, as he walks you through some of our SOC’s most significant threat interceptions, including the Fog ransomware attack and how Adlumin’s Security Operations Center as a Service (SOCaaS) solution thwarted these attacks in their early stages.

Key Takeaways:
- An overview of the most notable threat actors Adlumin’s SOC team encountered
- A step-by-step breakdown of the Fog data breach attempt and how Adlumin’s Ransomware Prevention stopped the attack
- Best practices for strengthening your organization's defense against similar threats from cross-border cyber attacks

Register today to gain expert insights and actionable strategies to keep your organization from the ever-present threat of global bad threat actors. Plus, all webinar attendees will have the chance to assess their current ransomware defenses and one lucky participant will win a $200 Visa gift card!

Ransomware Stopped: Defending Against Fog and Other Threat Actors Now and in 2025

Ransomware preparedness ranks in the top 10 initiatives for this year, according to Enterprise Strategy Group data—and for good reason. "FOG," a variant of the STOP/DJVU ransomware family, exploits compromised VPN credentials to breach defenses. Last year, a mid-sized financial institution became the first in its sector to be targeted by this variant, but Adlumin’s technology isolated and locked the attackers out. 

Join Adlumin experts Kevin O’Connor and Will Ledesma as they examine the FOG ransomware attack pattern and explain how Adlumin’s Ransomware Prevention and Exfiltration feature thwarted the attack in its early stages, containing the threat before it caused any damage.

Strengthen your company’s defenses by tuning in for the following takeaways:
• An overview of international FOG threat actors and their evolving tactics
• A step-by-step breakdown of the data breach attempt and how Adlumin’s Ransomware Prevention stopped the attack
• Best practices for strengthening your defense against similar cross-border cyber attacks

FOG Ransomware: Adlumin’s Best Practices for Thwarting New Attacks

Join us for a webinar with Bryan Boyle, Acting Chief of the Telecommunications Access Policy Division at the Federal Communications Commission (FCC), as he delves into the upcoming $200 million cybersecurity Pilot Program initiative designed to bolster the digital defenses of K-12 schools and school districts across the nation and determine whether they should be permanently funded using universal service funds. An interactive Q&A will follow.
 
Key Takeaways:
- Understanding the Funding: Gain insights into the purpose of the $200 million Pilot Program and how it aims to explore enhancing cybersecurity in educational environments.
- Application Process: Learn about the steps K-12 schools and school districts need to take to apply to participate in the Pilot Program and receive this crucial funding.
- Identifying Eligible Services and Equipment: Discover the types of eligible services and equipment schools and school districts can strategically use to address their cybersecurity challenges and protect their networks and students' data.
 
Who Should Attend:
- School district administrators and IT directors
- Education technology coordinators
- Cybersecurity professionals in the education sector
- Policymakers and educational leaders

Cybersecurity Funding for K-12 Schools: An Overview of the FCC's $200 Million Initiative

Compromised accounts are a leading contributor to major breaches. Yet, investment in identity and access management trails similar investments from criminals exploiting these weaknesses. Identities are still weak.  Hardening identity management can stop attacks in the early stages or the blast radius.
 
Join Airiam and Adlumin for a two-part webinar where we will guide you through hardening the most critical components of Active Directory and Microsoft 365.
 
Key topics include:
 
- The unique benefits of Adlumin XDR/MDR for comprehensive threat detection and response
- Airiam’s specialized hardening techniques for AD and Microsoft 365
- Real-world case studies showcasing successful implementations
- Best practices for integrating these powerful tools into your existing security framework
 
Don’t miss this opportunity to learn how Adlumin and Airiam can help you fortify your defenses against evolving cyber threats. Secure your spot today and take the first step towards a more resilient security infrastructure.

Assume Breach: Proactive Strategies for Cyber Resilience

In a cyber crisis, who makes the decisions: The senior person? The technical expert? The self-appointed hero? In crisis leadership, removing emotion is critical. Human biases, office politics, and perceived personal fears often influence or delay sound decision-making. The difference between a controlled event and a business-disrupting incident is your ability to harness these human factors to share expertise and ensure personal benefit does not trump organizational objections.

Join cybersecurity expert and author Mark Sangster as he identifies common crisis personalities, explores human bias, and considers leadership and learning models to help navigate the pitfalls of the human element in cyber incidents.

Multiple Personalities: Making Decisions in a Cyber Crisis

Ransomware continues to make headlines as attacks impact various industries including healthcare, education, and, more recently, car dealerships. As cybercriminals expand their targets, organizations need to consider not only how to prevent ransomware but also how to mitigate it when an attack happens.

Join Mark Sangster, VP, Chief of Strategy, as he breaks down real-world cybercrime examples from his upcoming book Cyber-Conscious Leadership: A Practical Guide to Protecting Your Organization Against Cyber Crime. Additionally, Sangster will explore Adlumin’s new ransomware feature.

Watch to:
- Understand ransomware’s lifecycle and what methods cybercriminals use to infiltrate an organization 
- Evaluate real-world examples from Sangster’s anticipated second book
- Implement strategies to teach your employees how to spot ransomware techniques 

As a thank you for joining the webinar, we’ll share our Threat Insights 2024 Volume II with all attendees during the session.

Real Life Stories of Ransomware and Recovery

In a cyber crisis, who makes the decisions: The senior person? The technical expert? The self-appointed hero? In crisis leadership, removing the emotion is critical. Human biases, office politics, and perceived personal fears often influence or delay sound decision-making. The difference between a controlled event and a business-disrupting incident is your ability to harness these human factors to share expertise and ensure personal benefit does not trump organizational objections. 

Join cybersecurity expert and author, Mark Sangster, as he identifies common crisis personalities, explores human bias, and considers leadership and learning models to help navigate the pitfalls of the human element in credit union cyber incidents.

Organizations constantly face evolving cyber threats, and staying ahead requires more than just awareness—it demands actionable strategies to defend against adversaries. Join Mark Sangster, VP and Chief of Strategy, as he delves into Adlumin’s latest threat research and shares real-life examples of how to apply these insights to strengthen your own defenses.

Why You Can't-Miss This Webinar:
·        Sneak Peek: Learn more about Adlumin’s ransomware ransomware prevention capabilities used to thwart cybercriminals’ attacks.
·         Actionable Intelligence: Discover how to convert threat research into practical defense measures for your organization. 
·         Tailored Solutions: Learn specific strategies for protecting against ransomware based on Adlumin’s threat research and Mark Sangster’s upcoming book.

As a thank you for joining our webinar, we’ll send you the new Cyber Threat Insights 2024 Volume II report.

Real-World Applications for Better Security: Adlumin’s Threat Research Insights

Decode cybersecurity jargon with Mark Sangster and make an informed decision when evaluating cybersecurity solutions.
 
The cybersecurity marketplace is vast and full of acronyms. Just knowing where to start, what kind of security to research, and which cybersecurity vendor to go with takes an enormous amount of time.

Join Mark Sangster, VP, Chief of Strategy, as he breaks down and simplifies the Managed Detection and Response (MDR) market. Mark will also discuss takeaways from Adlumin’s MDR buyer guide to help buyers make an informed decision.

In this webinar, you’ll learn how to:
- Understand the cybersecurity marketplace and the questions to ask when starting your search
- Evaluate what type of security solutions work best for your organization and how to meet compliance challenges
- Evaluate MDR companies and ask the right questions before taking any next steps
 
As a thank you for joining our webinar, we’ll send you our MDR Buyer’s Guide. Additionally, one lucky participant will receive a $200 Amazon gift card.

How to Choose an MDR Provider. Five Questions You Need to Ask.

This webinar will explore how artificial intelligence (AI) is being used to revolutionize data security. Industry experts Mark Sangster, VP, Chief of Strategy, and Ben McPherson, Head of Solutions Engineering, will discuss how AI is addressing emerging threats in the cybersecurity landscape and Managed Detection and Response (MDR) space. 

In this webinar, you’ll learn: 

- How AI can analyze vast amounts of data to identify and predict security threats. 
- Different ways AI can be used to detect unusual user activity that might indicate a security breach. 
-Methods for how AI can be used to scan networks and systems for vulnerabilities. 

As a thank you for joining our webinar, you’ll receive “The Ultimate Guide to Using Cybersecurity AI,” which includes key takeaways and recommendations for your security strategy. Additionally, one lucky participant will receive a $200 Amazon gift card.

Outsmarting the Adversaries: How AI is Transforming Threat Detection & Response

During this special Industry Tip Tuesday session, Mark Sangster delves into the distinct security hurdles the healthcare community faces. Joined by Sky Lakes Medical's John Gaede, Director of Info Services at Sky Lakes Medical, and Mike Perryman, Manager of Tech System, the trio discusses budgets, compliance, and patient care. 

Watch now to learn from the experts and gain actionable knowledge that can enhance your organization's cybersecurity posture.

Cybersecurity & Healthcare: Balancing Budgets, Compliance, & Patient Care

Sophisticated threat actors, such as ransomware gangs and state-sponsored adversaries, utilize ransomware to disrupt educational institutions and extort millions of dollars in ransoms. As these threats escalate, education leaders recognize the need to invest in cybersecurity. However, navigating the complex marketplace, acronyms, and hyperbolic promises make selecting technology and finding the right solutions challenging.

Join cybersecurity expert Mark Sangster, Vice President, Chief of Strategy, as he breaks down why cybersecurity is not just an IT problem but an agency problem.

In this webinar, you’ll learn: 
- Why educational leaders need to grasp the organizational risks related to cybersecurity to make informed decisions.
- How to optimize resources and programs to increase return on investment.
- Ways to meet regulatory requirements and showcase the success of cybersecurity initiatives to stakeholders within the education sector.

Ransomware Readiness: Why Cybersecurity is Not Just an IT Problem

Explore the latest ransomware cyber-threat trends in this new research from the Adlumin Threat Research Team

The Adlumin Threat Research Team has been dedicated to tracking and analyzing the most important cybersecurity trends, including ransomware. Keeping up to date with these threats can make the difference between a minor event and an operational shutdown.

Join Kevin O’Connor, Director of Threat Research, and our host, Mark Sangster, VP, Chief of Strategy at Adlumin as the pair reviews significant takeaways, trends, and vulnerabilities in the new Threat Insights 2024 Volume I report.

In this webinar, you’ll receive:
• Exclusive Insights from Adlumin’s Threat Insights 2024 Volume I report
• Detailed Analysis of Emerging threat trends in cybersecurity, including the latest in ransomware attacks
• Strategies to implement Proactive Vulnerability Management in your cybersecurity strategy

As a thank you for joining our webinar, we’ll send you our new Threat Insights 2024 Volume I report. Additionally, one lucky participant will receive a $200 Amazon gift card.

Highlights from the New Threat Insights 2024 Volume I Report

As ransomware continues to plague educational institutions, both by sophisticated threat actors like ransomware gangs and state-sponsored adversaries, the imperative to bolster cybersecurity measures becomes increasingly apparent. Educational leaders are acknowledging the urgency of investing in robust defense mechanisms. Yet, the process is hindered by the complexity of the cybersecurity landscape, replete with acronyms and exaggerated claims, making it daunting to discern the most suitable technologies and solutions.

Join cybersecurity expert Mark Sangster, Vice President, Chief of Strategy, for our Industry Tip Tuesday series, where he takes a 15-minute deep dive into security challenges facing the education industry.

Ransomware Reality Check: Education and Extortion

The crucial distinction between a minor cyber incident and a major organizational disruption often gets lost in translation. Technical practitioners focus on technology, while agency leaders prioritize industry value and reputation, but in critical moments, mutual understanding is paramount. 

Join Government Technology and Adlumin for a live webinar where our panel of experts will explore what effective leadership looks like during a cyber crisis. 

Cybersecurity expert and author Mark Sangster will draw on lessons from actual ransomware incidents to construct a Cyber Rosetta Stone, facilitating communication to avert cyber disasters. 

You'll Learn: 

- The best practices for maintaining sound decision-making during an active cyber crisis 
- How to navigate the interpersonal side of cyber attacks – like human biases, office politics and perceived personal fears
- Practical knowledge of building a comprehensive incident response strategy

Decoding Cyber Threats: Translating Binary into Industry Impact

Security Operations Center

Security Operations

Artificial Intelligence

Threat Detection

Incident Response

managed detection and response

Threat Intelligence

extended detection and response

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

2025 State of the SOC Report: The Impact of AI in SOCs

Presented by

About this talk

More from this channel