News for today (end-of-week wrap-up):
- Redesigning SOC alerts to enable the SOC analyst. Radiant Security outlines the thinking behind why it redesigned its AI-driven SOC platform for the analyst, not for an AI agent. Introducing AI into existing alert structures meant more content on the page. With access to everything an AI Agent has been trained to research and produce, the natural instinct was to surface all of it. Why filter when you can provide? A philosophy of “if we have it, they should see it”became a common approach. A philosophy that looked impressive in demos but quietly worked against the SOC analysts. More text, more scrolling, more context, and ironically, more analyzing to understand how AI arrived at the suggested next steps. The new structure is built for scanning (using tabs for more), has better timestamps, and a consistent fact set, among others. Radiant Security
- Real-time, continuously updated network map for microsegmentation. Zero Networks announced Network Map 2.0, offering a real-time, continuously updated map of network activity. With Network Map 2.0, security teams can see exactly what is happening across on-prem, cloud, IoT/OT, and Kubernetes environments in a single unified view. The platform highlights privileged access, high-risk ports, external exposure, and anomalous communication paths, focusing teams on what materially increases business risk instead of overwhelming them with raw telemetry. Zero Networks
- Continuous observability on AI agents and autonomous recovery. Cohesity and Datadog are working together to strengthen production AI environments, with a new combination of Datadog’s continuous observability capabilities with Cohesity’s automated data recovery smarts. Through this integration, Datadog provides real-time monitoring across cloud infrastructure, object stores, AI workloads, and application services, enabling enterprises to establish behavioral baselines and detect anomalous activity—such as unexpected data deletions, abnormal mutations, or suspicious agent behavior patterns. Cohesity extends those insights into automated, API-driven recovery actions, allowing organizations to restore affected data assets to verified point-in-time states with speed and precision. Cohesity
- Making AI agents trustworthy by design. Cohesity is also working with ServiceNow on AI agent resilience. ServiceNow brings capabilities for building, registering, and orchestrating AI agents with governance, visibility, and security, while Cohesity assures against disruptions by protecting and restoring data when needed. When corrupted data, misconfigurations, or malicious prompt injections cause agents to behave unexpectedly, disabling the agent alone is not enough. Organizations must be able to restore both the agent and the systems it operates to a trusted state without rebuilding from scratch or creating prolonged downtime. Together, ServiceNow and Cohesity deliver end-to-end AI agent resilience across the enterprise lifecycle. Organizations can build and register AI agents natively within the ServiceNow AI Platform, while the Cohesity Data Cloud safeguards the data systems—enabling rapid restoration to a point-in-time verified data state without manual reconstruction. Cohesity
- MCP Server from Datadog now generally available. Datadog’s MCP Server is ready for everyone, offering live observability data and real-time telemetry within code environments (AI or not). Datadog MCP Server is a purpose-built interface designed for agentic systems, extending Datadog’s unified observability platform directly into AI workflows. Datadog