The SOC Doesn't Need to Start Over with Every Alert

The article discusses how AI is changing the landscape of cyberattacks, not by creating entirely new attack types, but by making failed attacks cheaper to retry and assisting in their development. The key takeaway is that AI is augmenting attacker workflows, rather than acting as a standalone threat. The article highlights the 'lossy handshake' – the way information is lost when tasks are passed between different teams within a SOC, leading to a need for a more stateful approach to security operations.