Ignoring low-severity alerts risks opening the door to real threats

New analysis of alerts across endpoint, cloud, identity, network, and phishing telemetry finds that nearly one percent of confirmed incidents originated from alerts initially labeled as low-severity. At endpoints, that figure rose to almost two percent. While those percentages may seem low thy mean that for a typical enterprise generating hundreds of thousands of alerts annually, this can translate into approximately 50 real threats and potential cyber breaches per year that are likely never investigated. The research from AI SOC platform Intezer is based on analysis of more than 25 million security alerts across live enterprise environments. It shows that… [Continue Reading]