In this episode of Beyond the Horizon, hosts Hilda Colon and Will Ledesma unpack the latest findings from the State of the SOC report. Drawing on decades of frontline cybersecurity experience, they explore the evolving threat landscape—from the unrelenting rise of ransomware to the growing complexity of cloud-based attacks. The conversation dives deep into the data: 500,000 alerts in just three months, 83,000 escalations, and a staggering 8-minute breakout time for some threats.They also examine the human side of cybersecurity, and how emotional responses, fear-based tactics, and organizational inertia can undermine even the best defenses. The hosts share real-world war stories, including a recent “art of fear” attack that weaponized open-source intelligence to trigger panic without breaching a single system.AI’s role in the SOC is front and center, with insights into how automation is accelerating detection, reducing analyst fatigue, and reshaping the balance between human judgment and machine speed. Whether you're a CISO, analyst, or just cyber-curious, this episode offers a sharp, honest look at what’s changing—and what’s coming next—in the world of security operations.Key Talking PointsKey findings from the 2025 State of the SOC report Ransomware remains dominant, with 2,684 cases in 3 months Cloud attacks now make up 44% of threats—up from 30% last year The rise of “fear-based” attacks using fake screenshots and OSINT AI’s role in accelerating detection and reducing analyst burnout The “Layer 8” problem: human resistance to disruption Hybrid environments and the risks of misaligned identity controls Zero trust: powerful in theory, difficult in practice SOC automation sweet spot: 70% AI, 30% human Real-world story: AI found 3 more IOCs in seconds vs. 60 minutes manually Want the full picture? The insights shared in this episode are just the beginning. Dive deeper into the data, trends, and expert analysis shaping the future of cybersecurity in the full 2025 State of the SOC Report. Whether you're leading a security team or just trying to stay ahead of the curve, this report is your essential guide to what’s happening inside today’s Security Operations Centers. Click here to downloadDisclaimer: This podcast provides educational information about issues that may be relevant to information technology service providers. Nothing in the podcast should be construed as any recommendation or endorsement by N-able, or as legal or any other advice. The views expressed by guests are their own and their appearance on the podcast does not imply an endorsement of them or any entity they represent. Views and opinions expressed by N-able employees are those of the employees and do not necessarily reflect the view of N-able or its officers and directors. The podcast may also contain forward-looking statements regarding future product plans, functionality, or development efforts that should not be interpreted as a commitment from N-able related to any deliverables or timeframe. All content is based on information available at the time of recording, and N-able has no obligation to update any forward-looking statements. https://www.n-able.com

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related