#graylog — Public Fediverse posts

I had to empty parts of my brain to make room. Enjoy.

https://blog.faucher.net/2026/08/graylog-ai-mcp-and-opencode-or-claude.html

#OpenCode #Graylog #MCP

I had to empty parts of my brain to make room. Enjoy.

https://blog.faucher.net/2026/08/graylog-ai-mcp-and-opencode-or-claude.html

#OpenCode #Graylog #MCP

We are proud to power the NOC at @BSidesLV, watching the traffic nobody else gets to see.

#BSidesLV #graylog #NOC #cybersecurity #InfoSec

We are proud to power the NOC at @BSidesLV, watching the traffic nobody else gets to see.

#BSidesLV #graylog #NOC #cybersecurity #InfoSec

Suricata produces rich network telemetry, alerts, anomalies, flow data, DNS, TLS, SSH, Kerberos, and more, but raw EVE JSON isn't investigation ready on its own.

The Suricata IDS/IPS Content Pack for Graylog parses, enriches, and maps that data to the Graylog Information Model, with a dashboard built in. Setup covers Filebeat via Sidecar or syslog forwarding.
Full breakdown here: https://graylog.org/post/suricata-ids-ips-data-in-graylog/
#Graylog #Suricata #SIEM #ThreatHunting #InfoSec #NetworkSecurity

Suricata produces rich network telemetry, alerts, anomalies, flow data, DNS, TLS, SSH, Kerberos, and more, but raw EVE JSON isn't investigation ready on its own.

The Suricata IDS/IPS Content Pack for Graylog parses, enriches, and maps that data to the Graylog Information Model, with a dashboard built in. Setup covers Filebeat via Sidecar or syslog forwarding.
Full breakdown here: https://graylog.org/post/suricata-ids-ips-data-in-graylog/
#Graylog #Suricata #SIEM #ThreatHunting #InfoSec #NetworkSecurity

AWS WAF sees every request hitting your ALB, CloudFront, API Gateway, or AppSync, and makes a block/allow/count/CAPTCHA/challenge decision on each one. The question is whether your security team can actually see and search those decisions.

The AWS WAF Content Pack for Graylog parses the WAF JSON payload, normalizes the fields, and maps enforcement actions to the Graylog Information Model so they flow straight into detection and investigation workflows. Dashboard included.

Details: https://graylog.org/post/aws-waf-data-in-graylog/
#SIEM #AWS #CloudSecurity #Graylog

AWS WAF sees every request hitting your ALB, CloudFront, API Gateway, or AppSync, and makes a block/allow/count/CAPTCHA/challenge decision on each one. The question is whether your security team can actually see and search those decisions.

The AWS WAF Content Pack for Graylog parses the WAF JSON payload, normalizes the fields, and maps enforcement actions to the Graylog Information Model so they flow straight into detection and investigation workflows. Dashboard included.

Details: https://graylog.org/post/aws-waf-data-in-graylog/
#SIEM #AWS #CloudSecurity #Graylog

New blog: Building Efficient Cyber Investigation Workflows

A cyber investigation is a structured process, not just reacting to alerts. We cover the 5 key stages (identification, preservation, extraction/analysis, documentation, presentation) and share best practices for centralizing telemetry, reducing alert fatigue, and building repeatable workflows for lean security teams.

https://graylog.org/post/building-efficient-cyber-investigation-workflows/
#CyberSecurity #InfoSec #SOC #IncidentResponse #Graylog

New blog: Building Efficient Cyber Investigation Workflows

A cyber investigation is a structured process, not just reacting to alerts. We cover the 5 key stages (identification, preservation, extraction/analysis, documentation, presentation) and share best practices for centralizing telemetry, reducing alert fatigue, and building repeatable workflows for lean security teams.

https://graylog.org/post/building-efficient-cyber-investigation-workflows/
#CyberSecurity #InfoSec #SOC #IncidentResponse #Graylog

WinRM is built into Windows and beloved by attackers for lateral movement.

Graylog's Microsoft WinRM Content Pack turns raw operational event logs into structured, GIM-tagged security intelligence, with parsing, enrichment, and a dashboard included.

Detect brute force, trace attacker paths, meet audit requirements.
https://graylog.org/post/microsoft-winrm-data-in-graylog/
#Graylog #WinRM #SIEM

WinRM is built into Windows and beloved by attackers for lateral movement.

Graylog's Microsoft WinRM Content Pack turns raw operational event logs into structured, GIM-tagged security intelligence, with parsing, enrichment, and a dashboard included.

Detect brute force, trace attacker paths, meet audit requirements.
https://graylog.org/post/microsoft-winrm-data-in-graylog/
#Graylog #WinRM #SIEM

🌡️ New lab guide: hook up an ESP32 + DHT22 sensor, create a tiny HTTP endpoint, and stream live temperature & humidity data straight into Graylog for a real-time dashboard.

Who said log management couldn't be fun? 🛠️

👉 https://graylog.org/post/iot-sensor-lab-guide/

#Graylog #IoT #HomeLab #ESP32 #LogManagement #DIY #MakerCommunity

🌡️ New lab guide: hook up an ESP32 + DHT22 sensor, create a tiny HTTP endpoint, and stream live temperature & humidity data straight into Graylog for a real-time dashboard.

Who said log management couldn't be fun? 🛠️

👉 https://graylog.org/post/iot-sensor-lab-guide/

#Graylog #IoT #HomeLab #ESP32 #LogManagement #DIY #MakerCommunity

The What’s New in #Graylog 7.1 webinar replay is now available! 🎬

Cover in 30 min: case-based triage, auto investigation creation, Impossible Travel & Log Fluctuation detection, dynamic shard sizing, Azure Blob Storage support, and a revamped Inputs page.

Free to watch → https://graylog.org/resources/webinar-whats-new-in-7-1/

#OpenSource #LogManagement #SIEM #Infosec #SysAdmin

The What’s New in #Graylog 7.1 webinar replay is now available! 🎬

Cover in 30 min: case-based triage, auto investigation creation, Impossible Travel & Log Fluctuation detection, dynamic shard sizing, Azure Blob Storage support, and a revamped Inputs page.

Free to watch → https://graylog.org/resources/webinar-whats-new-in-7-1/

#OpenSource #LogManagement #SIEM #Infosec #SysAdmin

Graylog 7.1 just shipped

Auto-investigations from asset risk thresholds. One-click Slice-By triage. Anomaly detection plugged directly into your alert workflow.

May the 4th be with your alert queue.

See what's new: https://graylog.org/post/may-the-logs-be-with-you-graylog-7-1-is-here/

#graylog #SIEM #MayThe4th

Graylog 7.1 just shipped

Auto-investigations from asset risk thresholds. One-click Slice-By triage. Anomaly detection plugged directly into your alert workflow.

May the 4th be with your alert queue.

See what's new: https://graylog.org/post/may-the-logs-be-with-you-graylog-7-1-is-here/

#graylog #SIEM #MayThe4th

Collecting and analyzing log data becomes challenging in a multi-tiered architecture or a dynamic microservice environment. The LPI DevOps Tools Engineer 2.0 exam covers log management and analysis in objective 704.3.

Learn more from Fabian Thorns and Uirá Ribeiro: https://lpi.org/5swa

#devops #logmanagement #observability #opensource #elasticsearch #graylog #promtail #loki #applicationlogging #systemlogging #kubernetes #syslog #linux #LPICertification

Collecting and analyzing log data becomes challenging in a multi-tiered architecture or a dynamic microservice environment. The LPI DevOps Tools Engineer 2.0 exam covers log management and analysis in objective 704.3.

Learn more from Fabian Thorns and Uirá Ribeiro: https://lpi.org/5swa

#devops #logmanagement #observability #opensource #elasticsearch #graylog #promtail #loki #applicationlogging #systemlogging #kubernetes #syslog #linux #LPICertification

#homeLab fun...
Randomly checked my #graylog dashboard for self hosted webserver. Oh someone was trying various WordPress vulns again... Let's see the inbound IPs...
Oh,... Oh no. The call is coming from inside the network! In the 192.168.1.0/24 group...
K, check that host... Oh yeah 🤦‍♂️ that's the node that hosts the externally visible reverse proxy service.
Derp,
Well, at least reconfiguration of the proxy and webserver to carry the real client IP was fairly straightforward. Just something I missed during my initial, and subsequent, configuration.

Though somewhat risky, connecting computers to the wild network is always a learning experience. My autodidactic ass learns so much from seeing that something can be done then trying naively to do it myself. Bumping up against each and every hurdle informs the why then the how of the best in class solutions. I may not always succeed but I get a better understanding of the tools and technology landscape we exist in.

Grateful and humbled. Another RSA in the books, great conversations, and new hardware to show for it.

Thanks to all who stopped by and chatted with us.

#RSAC2026 #Graylog #SIEM #CyberSecurity

Grateful and humbled. Another RSA in the books, great conversations, and new hardware to show for it.

Thanks to all who stopped by and chatted with us.

#RSAC2026 #Graylog #SIEM #CyberSecurity

Dank #elasticsearch und #graylog geht uns der Plattenplatz aus. Wir haben pro Tag etwa 60GB pro #rechenzentrum

Macht macht man also? Neue Platten kaufen. Wären in unserem Fall: 33 x 3TB. Kosten aktuell: 100.000€ .. und vermutlich wären das die letzten Platten, die wir 2026 bekommen .. zu einem Preis, den man noch "normal" nennen darf. Angebot endet morgen um 23:59 ...

Ich bin gespannt, ob die Firma das genehmigt.

Dank #elasticsearch und #graylog geht uns der Plattenplatz aus. Wir haben pro Tag etwa 60GB pro #rechenzentrum

Macht macht man also? Neue Platten kaufen. Wären in unserem Fall: 33 x 3TB. Kosten aktuell: 100.000€ .. und vermutlich wären das die letzten Platten, die wir 2026 bekommen .. zu einem Preis, den man noch "normal" nennen darf. Angebot endet morgen um 23:59 ...

Ich bin gespannt, ob die Firma das genehmigt.

⚠️ CVE-2026-1435 (CRITICAL): Graylog Web Interface 2.2.3 fails to expire old sessions, enabling token reuse & unauthorized access. Restrict access, enable MFA, and monitor sessions until patch is released. Details: https://radar.offseq.com/threat/cve-2026-1435-cwe-613-insufficient-session-expirat-34761982 #OffSeq #Graylog #Vuln #Security

"Starting with Graylog 7.0, the use of Elasticsearch as a search backend is deprecated. It will be removed entirely in Graylog 8.0. Users are encouraged to migrate to Data Node or OpenSearch."

Nice.

#Graylog #OSS

Security analysts face an impossible challenge: finding the one suspicious signal hidden inside billions of normal events.

That’s why anomaly detection with machine learning matters. By learning behavioral baselines, ML can surface:
- unusual logins
- lateral movement
- zero-day malware behaviors
- insider risk patterns

High-fidelity detection without the noise.
Click here: https://graylog.org/post/anomaly-detection-with-machine-learning-to-improve-security/
#CyberSecurity #MachineLearning #Graylog

Security analysts face an impossible challenge: finding the one suspicious signal hidden inside billions of normal events.

That’s why anomaly detection with machine learning matters. By learning behavioral baselines, ML can surface:
- unusual logins
- lateral movement
- zero-day malware behaviors
- insider risk patterns

High-fidelity detection without the noise.
Click here: https://graylog.org/post/anomaly-detection-with-machine-learning-to-improve-security/
#CyberSecurity #MachineLearning #Graylog

We’ve released the first-ever Graylog Helm Chart for Kubernetes — now available in beta.

Graylog in K8s using standard Helm workflows, without hiding the important knobs. No duct-taped manifests. No surprises.

https://graylog.org/post/introducing-the-first-graylog-helm-chart-beta-v1-0-0/

#Kubernetes #graylog

We’ve released the first-ever Graylog Helm Chart for Kubernetes — now available in beta.

Graylog in K8s using standard Helm workflows, without hiding the important knobs. No duct-taped manifests. No surprises.

https://graylog.org/post/introducing-the-first-graylog-helm-chart-beta-v1-0-0/

#Kubernetes #graylog

⚡ 10x faster log processing
⏱️ Latency reduced from 30 seconds to under 3 seconds
📈 99.95% availability sustained during peak global events

Kaizen Gaming modernized log management across more than 600 microservices supporting the Betano platform. SRE and Platform Engineering teams gained real-time visibility, faster incident response, and predictable performance during major sporting events.

Led by Marinos Giamouridis and Miltiadis Tsatsakis, the Kaizen team combined high-throughput ingestion, Illuminate content, and Data Lake storage with Graylog Enterprise to reduce noise, improve signal quality, and control operational costs. The result is an observability platform built for scale, speed, and reliability across hybrid environments.
https://graylog.org/resources/how-kaizen-gaming-cut-log-latency-10x-with-graylog-enterprise/
#observability #SRE #logmanagement #graylog

⚡ 10x faster log processing
⏱️ Latency reduced from 30 seconds to under 3 seconds
📈 99.95% availability sustained during peak global events

Kaizen Gaming modernized log management across more than 600 microservices supporting the Betano platform. SRE and Platform Engineering teams gained real-time visibility, faster incident response, and predictable performance during major sporting events.

Led by Marinos Giamouridis and Miltiadis Tsatsakis, the Kaizen team combined high-throughput ingestion, Illuminate content, and Data Lake storage with Graylog Enterprise to reduce noise, improve signal quality, and control operational costs. The result is an observability platform built for scale, speed, and reliability across hybrid environments.
https://graylog.org/resources/how-kaizen-gaming-cut-log-latency-10x-with-graylog-enterprise/
#observability #SRE #logmanagement #graylog

Here's a holiday project for your lab! Got some extra time on your
hands this week? This is the perfect thing for you. 🫵

See how you can create a lightweight #API endpoint on the ESP32, poll
it regularly using #Graylog’s HTTP API input, and visualize the
results in a live dashboard. 📊 👀

Follow along with Jeff Darrington as he walks you through this fun DIY
lab guide. 🛠️👇

https://graylog.org/post/iot-sensor-lab-guide/ #HomeLab

Here's a holiday project for your lab! Got some extra time on your
hands this week? This is the perfect thing for you. 🫵

See how you can create a lightweight #API endpoint on the ESP32, poll
it regularly using #Graylog’s HTTP API input, and visualize the
results in a live dashboard. 📊 👀

Follow along with Jeff Darrington as he walks you through this fun DIY
lab guide. 🛠️👇

https://graylog.org/post/iot-sensor-lab-guide/ #HomeLab

Wondering how #DevOps, development, and AI-powered #dev tools will evolve and impact the industry in 2026? Several experts offer thoughtful, insightful, and even some controversial predictions — in this DevOps Digest article. ⬇️

🎤 Hear from several industry luminaries on the topic of AI-powered SDLC, including:
🔹 Sunil Senan, Infosys
🔹 Ensar Seker, SOCRadar
🔹 Rishi Chohan, GFT Technologies
🔹 Lee McClendon, Tricentis
🔹 Jithin Bhasker, ServiceNow
🔹 Emilio Salvador, GitLab
🔹 Greg Ingino, Litera
🔹 Nuha Hashem, Cozmo AI
🔹 Rohan Gupta, R Systems
🔹 Robert Rea, Graylog, Inc.
🔹 Ian Livingstone, Keycard

"In 2026, DevOps culture will be defined by systems that coach, correct, and collaborate alongside engineers." — Robert Rea CTO, #Graylog

https://www.devopsdigest.com/2026-devops-predictions-6 #CyberSecurity #InfoSec #SIEM #AI

Wondering how #DevOps, development, and AI-powered #dev tools will evolve and impact the industry in 2026? Several experts offer thoughtful, insightful, and even some controversial predictions — in this DevOps Digest article. ⬇️

🎤 Hear from several industry luminaries on the topic of AI-powered SDLC, including:
🔹 Sunil Senan, Infosys
🔹 Ensar Seker, SOCRadar
🔹 Rishi Chohan, GFT Technologies
🔹 Lee McClendon, Tricentis
🔹 Jithin Bhasker, ServiceNow
🔹 Emilio Salvador, GitLab
🔹 Greg Ingino, Litera
🔹 Nuha Hashem, Cozmo AI
🔹 Rohan Gupta, R Systems
🔹 Robert Rea, Graylog, Inc.
🔹 Ian Livingstone, Keycard

"In 2026, DevOps culture will be defined by systems that coach, correct, and collaborate alongside engineers." — Robert Rea CTO, #Graylog

https://www.devopsdigest.com/2026-devops-predictions-6 #CyberSecurity #InfoSec #SIEM #AI

Is your financial institution as safe as it could be from #ransomware and other cyber threats? 🤔 Groups like FIN7, Lazarus Group, and Carbanak often specifically target banks with sophisticated attacks, like SWIFT compromises and more. 🏦 💰

But have no fear, Graylog + Model Context Protocol (MCP) are here to help! 🦸💪 Today, Seth Goldhammer is walking you through a real world example where a bank in the north east, with a simple #Anthropic prompt, learned that it needed to understand the threat landscape and map it to their current log sources — to enable threat detection content in their current #Graylog deployment.

See how they mastered the challenge and enabled real-time, context-aware recommendations based on their actual environment, in our latest Graylog Labs article.👇

https://graylog.org/post/how-to-use-mcp-to-optimize-your-graylog-security-detections/

#CyberThreats #FinServ #GraylogLabs #TDIR #ThreatDetection

Is your financial institution as safe as it could be from #ransomware and other cyber threats? 🤔 Groups like FIN7, Lazarus Group, and Carbanak often specifically target banks with sophisticated attacks, like SWIFT compromises and more. 🏦 💰

But have no fear, Graylog + Model Context Protocol (MCP) are here to help! 🦸💪 Today, Seth Goldhammer is walking you through a real world example where a bank in the north east, with a simple #Anthropic prompt, learned that it needed to understand the threat landscape and map it to their current log sources — to enable threat detection content in their current #Graylog deployment.

See how they mastered the challenge and enabled real-time, context-aware recommendations based on their actual environment, in our latest Graylog Labs article.👇

https://graylog.org/post/how-to-use-mcp-to-optimize-your-graylog-security-detections/

#CyberThreats #FinServ #GraylogLabs #TDIR #ThreatDetection

Congratulations! 🎉 You've almost made it to holiday break time. Looking forward to some lazy days with a lot of R & R at the end of this month? That could be the perfect chance to take advantage of #Graylog's FREE online training academy classes. 🆓 🧑‍🏫

We've even got a couple brand new training modules for you to check out. In these courses you can learn all about Graylog's data lake — a repository for storing large volumes of log data that is not immediately needed for search and analysis but is still important to retain. Plus, take a look at what's new in Graylog 7.0.

What could be better than free training? See all the course offerings here:
https://graylog.org/post/graylog-academy-free-training-available/

#CyberSecurity #Security #SecurityTraining #SIEM

Congratulations! 🎉 You've almost made it to holiday break time. Looking forward to some lazy days with a lot of R & R at the end of this month? That could be the perfect chance to take advantage of #Graylog's FREE online training academy classes. 🆓 🧑‍🏫

We've even got a couple brand new training modules for you to check out. In these courses you can learn all about Graylog's data lake — a repository for storing large volumes of log data that is not immediately needed for search and analysis but is still important to retain. Plus, take a look at what's new in Graylog 7.0.

What could be better than free training? See all the course offerings here:
https://graylog.org/post/graylog-academy-free-training-available/

#CyberSecurity #Security #SecurityTraining #SIEM

If you didn't make it to HOU.SEC.CON, or if you did but didn't catch this awesome preso by #Graylog's Jim Nitterauer — you can watch it here. 📺 👏👇

It's time to rein in that tool sprawl! Get actionable strategies, discover ways to minimize your spend and maximize your return on dollars spent, and more.💡

Jim looks at dissecting the hidden costs and strategic risks of uncontrolled tool proliferation through the lens of the National Institute of Standards and Technology (NIST) #Cybersecurity Framework (CSF).

Learn about the pillars of:
🔍 Identify
🛡️ Protect
🕵‍♀️ Detect
🔁 Respond
😌 Recover

👉 https://www.cybrsecmedia.com/taming-the-hydra-managing-security-tool-sprawl-through-strategic-governance/?ref=cybr-sec-media-biweekly-updates-newsletter #CyberSecurity #InfoSec #SIEM #Security Cybersecurity Framework (CSF) Resource Center

If you didn't make it to HOU.SEC.CON, or if you did but didn't catch this awesome preso by #Graylog's Jim Nitterauer — you can watch it here. 📺 👏👇

It's time to rein in that tool sprawl! Get actionable strategies, discover ways to minimize your spend and maximize your return on dollars spent, and more.💡

Jim looks at dissecting the hidden costs and strategic risks of uncontrolled tool proliferation through the lens of the National Institute of Standards and Technology (NIST) #Cybersecurity Framework (CSF).

Learn about the pillars of:
🔍 Identify
🛡️ Protect
🕵‍♀️ Detect
🔁 Respond
😌 Recover

👉 https://www.cybrsecmedia.com/taming-the-hydra-managing-security-tool-sprawl-through-strategic-governance/?ref=cybr-sec-media-biweekly-updates-newsletter #CyberSecurity #InfoSec #SIEM #Security Cybersecurity Framework (CSF) Resource Center

A functional and useful dashboard for #OPNsense that utilizes #InfluxDB, #Grafana, #Graylog, and #Telegraf.

https://github.com/bsmithio/OPNsense-Dashboard

#lgdl #networking #opensource #sysadmin #freesoftware #security #firewall

A functional and useful dashboard for #OPNsense that utilizes #InfluxDB, #Grafana, #Graylog, and #Telegraf.

https://github.com/bsmithio/OPNsense-Dashboard

#lgdl #networking #opensource #sysadmin #freesoftware #security #firewall

We've got new cloud-native integrations with AWS Security Hub and Amazon #EventBridge! 🎉 Now you can get real-time event ingestion and support for the Open #Cybersecurity Schema Framework (OCSF)—which streamlines AWS log analysis and accelerates threat detection. And, with this new Amazon EventBridge integration events now flow into #Graylog the moment they occur, enabling real-time threat detection and faster response to incidents. 🙌

Learn more about OCSF support for seamless #AWS Security Hub integration, how these new capabilities are designed specifically for cloud-first teams using Graylog, and more. 👇

https://www.businesswire.com/news/home/20251202476132/en/Graylog-Boosts-Security-Visibility-with-Real-Time-Event-Ingestion-and-OCSF-Support-with-AWS-Security-Hub?_gl=1*1mn0cnh*_gcl_au*NzcyNDU4NjQzLjE3NjAwMzE1NjI.*_ga*MjUxODEwNDk4LjE3NjAwMzE1NjI.*_ga_ZQWF70T3FK*czE3NjQ3MDIwNTkkbzUxJGcxJHQxNzY0NzAyODkwJGo1NCRsMCRoMA #CyberSecurity #SIEM #ThreatDetection

We've got new cloud-native integrations with AWS Security Hub and Amazon #EventBridge! 🎉 Now you can get real-time event ingestion and support for the Open #Cybersecurity Schema Framework (OCSF)—which streamlines AWS log analysis and accelerates threat detection. And, with this new Amazon EventBridge integration events now flow into #Graylog the moment they occur, enabling real-time threat detection and faster response to incidents. 🙌

Learn more about OCSF support for seamless #AWS Security Hub integration, how these new capabilities are designed specifically for cloud-first teams using Graylog, and more. 👇

https://www.businesswire.com/news/home/20251202476132/en/Graylog-Boosts-Security-Visibility-with-Real-Time-Event-Ingestion-and-OCSF-Support-with-AWS-Security-Hub?_gl=1*1mn0cnh*_gcl_au*NzcyNDU4NjQzLjE3NjAwMzE1NjI.*_ga*MjUxODEwNDk4LjE3NjAwMzE1NjI.*_ga_ZQWF70T3FK*czE3NjQ3MDIwNTkkbzUxJGcxJHQxNzY0NzAyODkwJGo1NCRsMCRoMA #CyberSecurity #SIEM #ThreatDetection

Elizabeth Corner of the World Pipelines Podcast recently spoke with #cybersecurity expert Ross Brewer of #Graylog about how pipelines can stay resilient amid cyber threats.🔒💪

Listen in as they discuss:
😱 Some of the biggest challenges that pipeline operators are facing today
⚠️ The fact that connectivity is key, but with it comes the risk
⛅ The resiliency (or lack of) in cloud based infrastructure
🤝 How cybercriminals can exploit the interconnectedness of pipeline networks
🧑‍💻 Insider threats
➕ Much more

Shifting geopolitical pressures, the energy transition, and increasingly digital infrastructure are combining to raise this industry’s risk profile. Ross shares critical info in this podcast on how to develop a proper defense.

🎧 🎙️ 👉 https://www.worldpipelines.com/podcasts/fight-while-wounded-how-pipelines-can-stay-resilient-amid-cyber-threats/ #SIEM #Energy #Security #CyberThreats

Elizabeth Corner of the World Pipelines Podcast recently spoke with #cybersecurity expert Ross Brewer of #Graylog about how pipelines can stay resilient amid cyber threats.🔒💪

Listen in as they discuss:
😱 Some of the biggest challenges that pipeline operators are facing today
⚠️ The fact that connectivity is key, but with it comes the risk
⛅ The resiliency (or lack of) in cloud based infrastructure
🤝 How cybercriminals can exploit the interconnectedness of pipeline networks
🧑‍💻 Insider threats
➕ Much more

Shifting geopolitical pressures, the energy transition, and increasingly digital infrastructure are combining to raise this industry’s risk profile. Ross shares critical info in this podcast on how to develop a proper defense.

🎧 🎙️ 👉 https://www.worldpipelines.com/podcasts/fight-while-wounded-how-pipelines-can-stay-resilient-amid-cyber-threats/ #SIEM #Energy #Security #CyberThreats

Regulations are changing the way orgs communicate, approach, and think about #security. New standards like the EU's DORA, and the US's Secure-by-Design Principles are shifting accountability from aspiration to expectation. And, the orgs that are successfully adapting to this evolving security landscape are embracing several fundamental cultural shifts — like internalizing accountability and treating transparency, architecture, and communication as everyday disciplines rather than once-a-year compliance events.

#Graylog's Robert Rea explains how forward-looking leaders can use regulation as a blueprint for maturity with three practical strategies:
1️⃣ Building compliance into the design process
2️⃣ Focusing on security basics
3️⃣ Measuring metrics that truly matter

Read more about these practical steps for getting ahead, in this article via CyberScoop.

https://cyberscoop.com/how-cybersecurity-regulation-is-driving-accountability/ #CyberSecurity #InfoSec

Regulations are changing the way orgs communicate, approach, and think about #security. New standards like the EU's DORA, and the US's Secure-by-Design Principles are shifting accountability from aspiration to expectation. And, the orgs that are successfully adapting to this evolving security landscape are embracing several fundamental cultural shifts — like internalizing accountability and treating transparency, architecture, and communication as everyday disciplines rather than once-a-year compliance events.

#Graylog's Robert Rea explains how forward-looking leaders can use regulation as a blueprint for maturity with three practical strategies:
1️⃣ Building compliance into the design process
2️⃣ Focusing on security basics
3️⃣ Measuring metrics that truly matter

Read more about these practical steps for getting ahead, in this article via CyberScoop.

https://cyberscoop.com/how-cybersecurity-regulation-is-driving-accountability/ #CyberSecurity #InfoSec

Let's take a look back today at #Graylog's first-ever Engineering Hackathon! 👩‍💻 🎉 In October, we gave our engineers a full week to build whatever they believed would make #Graylog better. This allowed them to step away from their day-to-day work, explore new ideas, experiment with technologies, and more.

Some highlights included:
🌎 Watching new collaborations take place across our teams & different continents
💻 A project built primarily via vibe coding
🛠️ The project "Portal Gun" team turning a 10-year old POC into a dynamic, usable UI element that you can try out in Graylog 7.1 Alpha 1

Read all about it, in our latest blog by Dev Team Engineering Directors Rob Curtis and Martina Kohn!👇

https://graylog.org/post/the-first-graylog-engineering-hackathon/ #Hackathon #CyberSecurity #Devs #GraylogLabs

Agentic workflows are now enabled by new interoperability standards, such as the Model Context Protocol (MCP), which means that an #LLM can query a #SIEM, gather logs, analyze trends and propose next steps—all within a single interface. This collaboration enables #security teams to streamline repetitive tasks, and so much more. 🤝 🙌

In this SecurityInfoWatch article, #Graylog's Robert Rea explains the benefits of this for analysts and leadership alike, how agentic workflows are designed to enhance (not override) human judgment, why this is more accessible now than ever, and how it's a major strategic shift for modern #security teams.

https://www.securityinfowatch.com/cybersecurity/article/55327720/automating-the-soc-without-losing-the-human-in-the-loop #CyberSecurity #LogAnalysis #InfoSec

Model Context Protocol (MCP) gives large language models (#LLMs) a secure way to interact with your #Graylog data and workflows. 🔄 Instead of writing complex queries, you can ask questions in plain English! 💥 What's not to like⁉️ Analysts gain speed, administrators maintain control, and your #security stays intact. Ta-da! 🪄✨

Now it's time to learn about:
✔️ How MCP works
✔️ Setting up MCP
✔️ Using MCP tools
✔️ Security factors
And more...

The ever-entertaining Seth Goldhammer is back at it again, in our latest video on real-time LLM access to your data. Watch Seth here, learn all about why MCP matters, and download the MCP guide.

👉 https://graylog.org/post/mcp-explained-conversational-ai-for-graylog/ #CyberSecurity #SIEM

With so much "AI-everything" out there today, it's hard to navigate all the challenges brought on by such a rapidly evolving landscape. So, here are some industry perspectives on everything from fostering data fluency and transparency to leveraging multimedia and Answer Engine Optimization—to help you. 🙌

"Leadership now means helping others ask better questions, challenge assumptions, and think through the downstream impact of every AI decision. Because without that, we’re not leading, we are gambling." —Jim Nitterauer, Senior Director of Information Security, Graylog

This article via Techronicler shares insights from #Graylog's Jim Nitterauer, along with Tom Lawrence, Ski Swiatkowski, Stephen C. Webster, Robert Hourie, Sarah Evans, Christopher Migliaccio, Dionne Mitchell, and Hanzel Talorete.

https://techronicler.com/countering-ai-disruption-amplifying-thought-leadership-to-stay-ahead/ #AI #GenAI #CyberSecurity