Grateful and humbled. Another RSA in the books, great conversations, and new hardware to show for it. Thanks to all who stopped by and chatted with us. #RSAC2026 #Graylog #SIEM #CyberSecurity

Most SIEMs reward complexity. We don't. Come see us at Booth S-3118 to learn more! Experience a #SIEM that actually works for lean security teams. #cybersecurity #RSAC2026

At #RSAC? Find us at Booth S-3118. @socalledseth.com and the @graylog.bsky.social team are showing how to turn telemetry into real-time threat detection and faster response. Less noise. Better decisions. Faster outcomes.

Cyber resilience isn’t about stopping every attack—it’s about how fast you recover. Disruption is expected. Downtime doesn’t have to be. Here’s what resilient organizations do differently 👇 graylog.org/post/cyber-r...

Stop by 𝐛𝐨𝐨𝐭𝐡 𝐒-𝟑𝟏𝟏𝟖 at #RSAC2026 to see our new hardware in person!

Two awards. One booth. Zero tolerance for SIEM that creates more work than it closes. Graylog won Hot Company SIEM and Best Solution Central Log Management at #RSAC 2026. Come see us at Booth S-3118 this week. Full story: graylog.org/news/graylog... #RSAC2026 #SIEM #CyberSecurity #LogManagement

Find Graylog at RSA Booth S-3118 (Moscone South, March 23–26) and see how teams are: ✔ Prioritizing real threats—not noise ✔ Closing investigations faster ✔ Learning how to use explainable AI If your SIEM is slowing you down… we should talk. #RSAC #RSA #RSAC2026

Australia’s Essential Eight provides the baseline security practices for reducing cyber risk and strengthening compliance. Read more: graylog.org/post/the-ess... #CyberSecurity #EssentialEight #Compliance

SIEMs in 2026 are very expensive noise machines with a billing problem. The 2026 State of SIEM Report: Top 10 threats ranked. 12-point buying checklist. 12-month roadmap. Built for 1-10 practitioner teams who need decisions, not more tabs to open. graylog.org/resources/st...

A cyberattack on medical device maker Stryker disrupted systems used by healthcare providers and emergency responders worldwide. Key lessons: endpoint monitoring, MDM, centralized logs, and visibility. Read more: graylog.org/post/the-str... #CyberSecurity #HealthcareIT #SIEM

Modern IT systems generate millions of log events every day. Log correlation connects those events across systems to uncover threats, performance issues, and root causes faster. Learn how correlation engines turn fragmented logs into actionable insights. graylog.org/post/log-cor...

Their SIEM shouldn't need more care than their patients. Kennedy Krieger Institute swapped infrastructure headaches for Graylog Cloud and got faster investigations, compliance-ready log retention, and costs that don't spike mid-quarter. Full story: graylog.org/resources/cu...

What is the ENS Framework? Spain’s Esquema Nacional de Seguridad defines cybersecurity requirements for public sector systems and vendors. Learn who it applies to and how centralized log management supports ENS compliance. Read more: graylog.org/post/underst... #Cybersecurity #ENS #Compliance

Learn what Docker logs capture, their limitations, and best practices for centralizing and analyzing them for better observability and security. Read the blog: graylog.org/post/central... #Docker #DevOps #Observability

Most dashboards technically work. Fewer actually inform. The key? Let the question choose the chart. When the right visualization meets the right question, the answer should appear instantly. That’s when message data stops being noise and becomes insight. New post: graylog.org/post/your-da...

Lean security teams don’t lose to threats first. They lose to time. Logs & Lattes Ep. 5 covers the top 10 threats hybrid orgs face in 2026 and why triage slows when evidence is scattered across email, identity, VPN, cloud, endpoints, and network tools. youtu.be/Wobkafs-Ca8

OpenTelemetry is observability sanity. Telemetry multiplies, schemas drift, costs climb… and root cause turns into “find the right format.” Add guardrails (retention, context, sampling) and correlation stops being a craft project. graylog.org/post/what-is... #OpenTelemetry #SRE

MCP is what makes “AI in the SOC” usable. Not the model. The integration layer. Standard connections to tools and data with controls that security teams can live with. Breakdown: graylog.org/post/what-is... #MCP #SecurityEngineering

CVE-2025-49144 is a local privilege escalation in the Notepad++ installer that abuses how regsvr32.exe is called during setup. We break down: • what it looks like on real systems • why Sysmon catches it cleanly • a high-signal Graylog search + Sigma rule graylog.org/post/detecti...

Security teams buy “one more tool” to reduce toil. Then investigations turn into nine tabs and a Slack thread. As @socalledseth.com puts it: AI only pays off when it reduces steps inside the analyst’s flow — not when it becomes tab #10. Read the blog: graylog.org/post/the-hum...

Security today is “Where’s Waldo” at terabyte scale. ML-powered anomaly detection helps teams spot the behaviors that don’t fit the norm, from zero-days to insider threats without drowning in alerts. Click here: graylog.org/post/anomaly... #CyberSecurity #MachineLearning #Graylog

Monitoring detects issues — observability helps you understand why they happen. In modern distributed systems, you need both. New blog: Monitoring vs. Observability + the pillars of telemetry (logs, metrics, traces). 👉 graylog.org/post/observa... #Observability #DevOps #Graylog

Audit logs aren’t just “logs”. They’re proof. Who acted? What changed? When? Where? Discover audit logging basics, log types, compliance use cases, and best practices for security. 📌 graylog.org/post/complia... #CyberSecurity #Compliance #AuditLogging

Atlassian audit logs aren’t useless. They’re shaped wrong. Nested JSON and shifting arrays turn simple questions into manual work. Dashboards break. The fix isn’t more parsing in the SIEM. It’s modeling audit data at the edge. graylog.org/post/from-at... #SecurityOperations #SIEM #AuditLogs

Kubernetes without good logging is just mystery pings. This post breaks down: • How Kubernetes logging works • The key log types every cluster generates • Practical best practices for centralization & retention 👉 graylog.org/post/kuberne... #Kubernetes #Observability #DevOps #CloudNative #Security

AI pressure is already hitting the SOC. Boards want ROI. Teams inherit risk. The issue isn’t AI—it’s tools that add noise, unchecked automation, and zero proof of impact. 7 bubble-proof moves to invest in AI you can defend. Read more: graylog.org/post/how-to-... #securityAI #SOC #ExplainableAI

We’ve released the first-ever Graylog Helm Chart for Kubernetes — now available in beta. Graylog in K8s using standard Helm workflows, without hiding the important knobs. No duct-taped manifests. No surprises. graylog.org/post/introdu... #Kubernetes #graylog

If your SIEM automation still leaves analysts buried in alerts, it’s not helping. It’s just louder. Good automation cuts noise, adds context, and speeds response. What actually works (and what doesn’t): 👉 graylog.org/post/siem-au...

Runtime risk isn’t harder to analyze. It’s easier to misread. A UNC Wilmington study of 31k+ vulns shows LLMs can infer CVSS but fail without runtime context. The same applies to MITRE mappings. Seth Goldhammer explains why AI needs SIEM data. graylog.org/post/using-l... #cybersecurity #SIEM #AI

Graylog is hiring in the USA!! We are looking for a Director of Revenue Operations and a Solutions Engineer. Come join us! These positions are remote. Click this link for more info. lnkd.in/dzKkMNh2 hashtag#hiring hashtag#NowHiring hashtag#WeAreHiring

That's a wrap! Starting off 2026 at Graylog with our Annual Kickoff and awards ceremony. Great momentum, great people!

600+ micro-services. 10x faster log processing. Latency cut from 30 seconds to under 3. Kaizen Gaming uses Graylog Enterprise to keep Betano visible, stable, and responsive even during peak global events. #logmanagement #observability graylog.org/resources/ho...

Gyms fill in January, empty in February. Security AI mirrors it: fast launches, big promises—then analysts validate outputs. Skip explainability, governance, and context, and AI stalls. Seth Goldhammer @socalledseth.com : graylog.org/post/why-ai-...

On-prem or cloud? Choosing a SIEM deployment isn’t just about technology. It’s about control, compliance, scale, and operational reality. Learn how to match your SIEM deployment model to your environment, whether that’s on-prem, cloud, or hybrid. #siem #logmanagement graylog.org/post/cloud-v...

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers.

Cyber incident responders from DigitalMint and Sygnia plead guilty and are facing 20 years in prison for launching ALPHV/Black Cat ransomware attacks themselves. The two separately tried to flee to Europe before being arrested therecord.media/ransomware-r...

Are you using your #SIEM to detect #security threats in the most efficient & effective ways possible❓🤔 Doing so will help you strengthen your security posture & better align strategically with business objectives. Here are 6 steps to help you get there.👇 graylog.org/post/6-steps... #CyberSecurity

Should you use supervised #AI in your SOC? 🤖👀 Yes! When applied to 1st-pass alert triage, it strengthens the human decision layer rather than removing it. 🌟💪 It helps by prioritizing #security alerts based on how similar events were previously validated by analysts. More: graylog.org/post/supervi...

❄️Winter break is the perfect time to brush up on your #Sigmarules! With v2.0 rules you can create vendor-agnostic detections without being limited by proprietary log formats. Learn about the key changes & supporting Sigma v2.0 mapped to MITRE ATT&CK framework. graylog.org/post/sigma-s... #CyberSec

IT increasingly runs on Linux. And, as more & more of your dev & IT environments rely on #Linux, focusing your collection & monitoring efforts on these top 25 logs will help you investigate performance issues & #security incidents faster.🙌 graylog.org/post/25-linu... #OpenSource #SecurityOperations

IT increasingly runs on Linux. And, as more & more of your dev & IT environments rely on #Linux, focusing your collection & monitoring efforts on these top 25 logs will help you investigate performance issues & #security incidents faster.🙌 graylog.org/post/25-linu... #OpenSource #SecurityOperations

Got some extra time on your hands this week? This is the perfect thing for you.🫵 See how you can create a lightweight #API endpoint on the ESP32, poll ot regularly using #Graylog’s HTTP API input, and visualize the results in a live dashboard.📊👀 graylog.org/post/iot-sen... #HomeLab #CyberSecurity

Curious what the top 2025 SOC trends were? Take a look.👀👇 🤖 #AI outpaced oversight 📊 Dashboards expanded while context thinned ⛅ Cloud costs quietly dictated #cybersecurity decisions And there are more! See all of the top trends plus our prediction for the SOC in 2026. graylog.org/post/2025-se...

There's a new look to #ransomware attacks (no) thanks to the #RaaS ecosystem. As attacks are more automated, identifying & mitigating them becomes more challenging. But, implementing email security, centralizing #security data, integrating #threatintel, & more—can help. graylog.org/post/underst...

Don’t miss out! 🚨 Our Early Bird discount is still live. Save 20% with code BS312-EB20 and join us at #BSides312 on May 16, 2026. See you there! 👋 bsides312.org for more information. #BSides

Attacker interest in the vulnerability is magnified by an unparalleled number of publicly available exploits, earning the defect the highest verified public exploit count of any CVE ever. via @mattkapko.com cyberscoop.com/react2shell-...

Wondering how #DevOps, development, & AI-powered #dev tools will impact the industry in 2026? Experts offer thoughtful, insightful, & even some controversial predictions in this DevOps Digest article. Hear from industry luminaries on the topic of AI-powered SDLC. www.devopsdigest.com/2026-devops-...

Got questions about the DOJ's new #DataSecurity Program (DSP)? Do your current compliance programs need more controls to comply? Learn what's required of you.👇 It's possible to streamline your compliance processes while improving your overall #security posture. See how. graylog.org/post/underst...

Is your #finserv institution as safe as it could be from #ransomware & other #cyberthreats? Groups like #FIN7, #LazarusGroup & #Carbanak often target #banks with attacks like SWIFT compromises. 🏦 But have no fear, #Graylog + Model Context Protocol are here to help! 🦸 💪 graylog.org/post/how-to-...

A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection.