Blog

How SOC Analysts Use AI: Q&A on Speed, Validation & PHP2Shell Response

Three Critical Start SOC leaders take seven live questions on where AI saves analyst time, where humans still make the call, and how the team handled PHP2Shell in under 24 hours.
November 3, 2026
•
7 min read
Webinar

Ask Our SOC Anything: The Halloween Edition

Critical Start’s SOC leaders answer your toughest questions on AI-assisted investigations, AiTM phishing, rules of engagement, and what really breaks when alert volume spikes 10X.
November 3, 2026
•
25 min
Blog

You Asked. Savannah Answered. Live SOC Session 3 Recap

Savannah Overly, Senior SOC Engineer, answers eight audience questions on SOC AI, the Trusted Behavior Registry®, phishing red flags and how to help your SOC work faster.
Critical Start
October 26, 2026
•
5 min read
Webinar

Ask Our SOC Anything: What Your SOC Wishes You Knew

From alert fatigue to AI accuracy to the phishing tricks that make analysts’ radar light up, Critical Start’s Savannah Overly answers customers’ most pressing SOC questions, unfiltered.
Savannah Overly, Senior SOC Engineer, Critical Start
October 26, 2026
•
28 minutes
Threat Intel

PHP2SHELL RCE Vulnerabilities

Two critical flaws in the PHP runtime (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) can let unauthenticated attackers run code on web servers, and patching alone doesn’t finish the job. Here’s what CRU recommends in the first 24 hours.
Gerard Chukwu, CTI AI Technologist
October 21, 2026
•
12 min read
Webinar

Ask our SOC anything: AI in the SOC

Critical Start’s Senior Manager, Security Operations answers six attendee questions, covering how SOC AI is validated by humans, why AI shifts attacker speed rather than attacker behavior, and how a 90% analyst retention rate is built.
Seth Thompson, Senior Manager, Security Operations
October 21, 2026
•
28 minutes