Hello everyone. I am Wardell from Maryland, a full time truck driver who has spent the last 3 years using different AI models to create everything from videos to websites. I really like the technology and using it to create different tools. Recently after watching a few security videos including the latest from Crowdstrike at fal.con. I made a pivot to to cyber security and want to dig deeper into SOC and GRC. I came across this community in my feed on FB. I have a few more videos to go in getting my lab set up and actually had started building a security platform of my own. Looking forward to where this journey takes me. Oh yeah, it is my plan to enter this field full time soon. Happy learning everyone.

I want all my analyst to develop AI agents. If you don't use AI today, we are not giving you job. Our company is transitioning to AI First. I have spoken with HR, it's one of the first question they ask on screening. I have asked other cybersecurity professionals, how they use it. I was on the biggest AI event in central Europe spreading across 3 days. I listened how Amazon is transitioning AI into their system and how security of AI agents is critical for them. So I finally put a priority to my most important project, that I will share with you soon. It's multi agent platform for investigation. You can use any AI model, test different models, easily add new tools (skills). We will use this multi agent platform in our SOC and all the analyst will contribute to this platform. I believe this is the future of Cybersecurity. Utilising AI first, before it gets to you. I will share more once it's ready as I will share step by step guide how to use it. In the future, I will be sharing new tools, which you can add to this platform. You can create your own, share with others. Gain practical experience with cybersecurity and AI. I can write you recommendation for your contribution. You can put it your CV or during promotion negotiation. Most importantly? It's practical, something many teams and companies will need.

I'm excited for this one. Gemini models were always one of the best, if ...not the best for cybersecurity defenders. I don't need my model to create game in unreal engine (although it's very cool). So why Argon? 🛡️ Google says Argon can autonomously find, validate and patch critical software vulnerabilities. It also scored 77.9% on DeepSWE v1.1 and supports long-context work up to 1M tokens. That is a very serious combination for security engineering and triage. If you look current Thor Benchmarks for Cyber Defender Gemini 3.7 Flash ranked first there with: • 72.5% Quality Score • 72.5% Balanced OTS • 0.0% Critical Miss • 28.9% False Review • 100% Threat Capture For Blue Teams, 𝐂𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐌𝐢𝐬𝐬 is the metric I care about most here. Why? Because it measures real incidents that were incorrectly suppressed as false positives. A 0% result means no true-positive findings in this benchmark were suppressed as false positives. That does not prove one universal winner. THOR explicitly says there is no single best model. Review load, cost, latency and deployment constraints still matter. But I will keep an eye on Argon as this might be another leap with AI for cyber defense.

Microsoft is pushing the SOC further toward an agentic operating model. ISOC brings SIEM, XDR, Threat Intelligence, automation and AI together directly inside the Microsoft Defender portal. 🤖 AI agents can investigate, reason and help take action 🔄 Detection, investigation and response become one continuous workflow 🧠 Humans move more toward decision-making, engineering and directing the defense ⚡ Some SIEM capabilities are available without starting with a traditional Sentinel deployment Microsoft describes ISOC as a foundation for the agentic SOC — and I think that wording matters. We are slowly moving away from the traditional model where L1/L2 analysts manually process endless queues of alerts. The future SOC will likely be built around security engineers + AI agents + automation, all operating on the same context. ISOC is currently in preview. In this preview phase, it is available to eligible Microsoft Defender Suite, Microsoft 365 E5 and E7 customers that don't already have an active Microsoft Sentinel workspace. Definitely something worth watching. 👉 Learn more: https://www.microsoft.com/en-us/security/blog/2026/09/23/reimagining-the-soc-for-the-agentic-era-in-microsoft-defender/

This is a pretty important milestone for AI security. An OpenAI agent accessed an Australian government statistics portal in June while running an internal evaluation. OpenAI says it discovered the activity during a review in August, but Australian authorities were only contacted in September. Isn't this crazy? It happened in June, but nobody knew! 🤯 According to the BBC, the agent accessed both public and non-public files, although no personal information is currently believed to have been compromised. The interesting part isn't really the data. It's that an AI agent took actions its developers didn't intend and crossed into systems it wasn't supposed to access. As AI agents get more autonomy, security teams won't just need to defend against attackers using AI. We will also need to think about controlling, monitoring and securing the agents themselves. 🤖🔐 Every employee has access to pentesting tool now. Interesting times ahead...