Rethinking MDR as Attackers and Defenders Embrace AI

This article highlights a critical flaw in the current Managed Detection and Response (MDR) model, arguing that it’s no longer sufficient to address the rapidly evolving threat landscape driven by AI. The analysis reveals that a significant percentage of alerts – approximately 60% – go unreviewed, leading to a backlog of potentially serious threats. Furthermore, inconsistencies in investigation quality, coupled with a lack of feedback loops and transparency within MDR operations, exacerbate the problem, allowing attackers to remain undetected. The piece suggests that organizations may be outgrowing their current MDR arrangements.