ExtraHop

Empowering organizations with the high-fidelity context they need to power security and IT AI automation, detect risks faster, and respond with confidence.

[ExtraHop @ExtraHop]

Threat actors are already using ARTEX, an open-source LLM-driven penetration testing framework, to automate intrusions across banks, telecoms, and government ministries—with 1,465 consoles exposed online.

Once inside, ARTEX agents run parallel attack paths at machine speed, hunting for Windows hosts without EDR sensors and hiding Active Directory abuse and web shells inside encrypted traffic.

Because every autonomous agent must cross the network to scan, authenticate, and move laterally, real-time network traffic and line-rate decryption expose the intrusion before data is exfiltrated.

🔗 Read the blog: https://t.co/EZex13JoTr

#ThreatDetection #NDR #InfoSec #Cybersecurity

[ExtraHop @ExtraHop]

Exploitation of PHP2Shell began before PHP released a patch, enabling threat actors to potentially exploit vulnerabilities worldwide.

While building a detector, ExtraHop researchers found that the most dangerous attack traffic looks unlike ordinary web traffic and slips past tools that watch only standard web requests.

RevealX customers can add the detector in a single step to find every PHP server, detect exploitation as it happens, and hunt for exploitation that occurred before the patch was available.

🔗 Read the blog: https://t.co/kX0JhrV9Rj

#PHP2Shell #ThreatHunting #NDR

[ExtraHop @ExtraHop]

Your must-stop spot for #FalCon2026: Booth #1422 🎉

🤝 Learn more about why ExtraHop is the context layer foundation for the Agentic SOC.
🎤 Hear from industry leaders paving the way for future of cybersecurity.
🖥️ Try our award-winning platform to see ExtraHop network intelligence in action.

More details: https://t.co/imhMFM0eLZ

[ExtraHop @ExtraHop]

Director of Engineering in the Insurance (except health) Industry gives RevealX 5/5 Rating in Gartner Peer Insights™ Network Detection and Response Market.

Read the full review here: https://t.co/9a27FLC5xr

[ExtraHop @ExtraHop]

Manager Of Student Support Services in the Education Industry gives RevealX 5/5 Rating in Gartner Peer Insights™ Network Detection and Response.

Read the full review here: https://t.co/xIaRGdyiNO

[ExtraHop @ExtraHop]

Network Manager in the Banking Industry gives RevealX 5/5 Rating in Gartner Peer Insights™ Network Detection and Response Market.

Read the full review here: https://t.co/etOGbS5Mkk

[ExtraHop @ExtraHop]

Last day at #BHUSA! 👋 Heading out to the expo floor one final time? Make Booth #5512 your first stop.

It's your last chance to catch live demos of our platform, meet with our team and #AgenticSOCAlliance partners, and learn how uncompromised network truth makes AI automation actually work.

Don't head home without stopping by!

[ExtraHop @ExtraHop]

Good morning, #BHUSA! We're back for day 2 of the Business Hall and the conversation around the agentic SOC is heating up 🔥

If you’re building your team's automation strategy, don’t miss Paul Giorgi TODAY for his presentation: "Exhaust from the Contrails: Network Runtime as Ground Truth for the Agentic SOC."

Catch him in one of two sessions:
🍽️ 12:05 PM | Lunch & Learn
🎤 2:05 PM | Theater Session

When you're not in a session, come hang out with us at Booth #5512 to see live agentic SOC demos in action!

[ExtraHop @ExtraHop]

We've arrived at Black Hat USA ☀️ The expo floor is about to open and the ExtraHop team is waiting for you at booth #5512!

While you're here...

🤖 Stop by for a live demo to see how our platform delivers the high-fidelity context autonomous AI agents need to act with confidence.

🧠 Our own Paul Giorgi will be taking the #BHUSA stage to show you what it takes to build an agentic SOC and how to successfully automate your defense.

🤝 Meet with our security experts and the #AgenticSOCAlliance members on-site to learn how your security stack can work together to stop machine-speed threats.

See you soon!

[ExtraHop @ExtraHop]

IT Problem Management Manager in the Banking Industry gives RevealX 5/5 Rating in Gartner Peer Insights™ Network Detection and Response Market.

Read the full review here: https://t.co/0XdEfjTg4Z

[ExtraHop @ExtraHop]

Seeing the Agentic SOC Alliance light up the Nasdaq tower in Times Square today was incredible! 🏙️ 🌟

Beyond the celebration, the mission behind this initiative is what truly matters.

Adversaries are now operating at machine speed. Using AI, they can find vulnerabilities, weaponize them, and move laterally in minutes. Security operations centers (SOCs) can't keep relying on human-speed, manual triage to fight back.

Thank you, Nasdaq, for celebrating with us and helping get this critical message out to the world!

Want to learn more about the Agentic SOC Alliance and our incredible team of partners? Click here: https://t.co/zPlMcfpaCo

[ExtraHop @ExtraHop]

If you give an AI agent the authority to take independent action, how do you ensure it isn't scaling a bad decision?

If you are heading to Black Hat next week, you'lI want to add this sponsored session to your schedule!

🎙️ Exhaust from the Contrails: Network Runtime as Ground Truth for the Agentic SOC
📅 Wednesday, August 5
🕐 2:05 PM

[ExtraHop @ExtraHop]

The most dangerous assumption in cloud security? Believing that a compromised Kubernetes pod is a contained incident.

In reality, the K8s attack surface extends far beyond the pod itself.

Here is what the modern K8s attack surface actually looks like:

☁️ Container Escapes: Attackers are moving past the application layer, using kernel vulnerabilities to shatter container isolation and take over the host.

☁️ Credential Harvesting: Stolen service account tokens give attackers the keys to the kingdom, paving the way for massive data exfiltration.

☁️ Blind Lateral Movement: Because K8s networking is highly dynamic and ephemeral, traditional security tools often lose the thread when an attacker moves east-west between internal services.

Our latest blog unpacks these complex attack paths and explains how to build a more resilient K8s defense.

Read it here: https://t.co/jJbuk3Usop

[ExtraHop @ExtraHop]

Context. Harness. Model.

That's the operating model behind the Agentic SOC Alliance, a new coalition made up of 16 of the most innovative names in security and AI.

Adversaries are already moving at machine speed. Most SOCs, and most "AI" tools in the SOC today, can't keep up.

The Alliance is closing that gap with an open standard for real-time context, governed autonomy, and interchangeable AI models, so agentic security operations are fast, accurate, and defensible.

The outcome: less noise, faster response, a fewer incidents.

Learn more about how the Agentic SOC Alliance is making autonomous security a reality for organizations around the globe: https://t.co/zPlMcfpaCo

[ExtraHop @ExtraHop]

The ExtraHop research team is breaking down VECT 2.0, a new threat marketed as a professional Ransomware-as-a-Service.

Under the hood, a massive coding error means it permanently destroys most enterprise files.

For security leaders and SOC teams, this changes everything. You aren't dealing with a typical extortion event where paying the ransom is a worst-case fallback. It is a permanent data-loss event.

To make incident response even harder, VECT 2.0 is built to cover its tracks. It actively wipes system logs and blinds local security tools, leaving defenders completely in the dark if they only rely on endpoint data.

So, how do you defend your environment when the host goes dark?

🔗 Read the full analysis: https://t.co/oBmPm1otTK

[ExtraHop @ExtraHop]

Information Security Engineer 1 in the Healthcare and Biotech Industry gives RevealX 5/5 Rating in Gartner Peer Insights™ Network Detection and Response Market.

Read the full review here: https://t.co/K59jBoReUm

[ExtraHop @ExtraHop]

Machine-speed threats require an open, industry-wide response. That's why we're proud to introduce the Agentic SOC Alliance.

🚨 The Problem

For two decades, the SOC was built the assumption that human judgment can sit at the center of every alert, triage, and response decision.

When AI-driven attacks find vulnerabilities, write exploits, and move laterally in minutes, that assumption collapses. Bolting an AI copilot onto a legacy SIEM queue doesn't fix a machine-speed problem...

It just relocates the bottleneck.

🌐The Power of an Open Alliance

One vendor can't solve this problem.

The future of autonomous defense belongs to an open, interoperable ecosystem where best-of-breed technologies work together seamlessly across three core layers.

1️⃣ Real-Time Context: Ground-truth wire and network telemetry that eliminates AI hallucinations and delivers decision-grade evidence.

2️⃣ A Governed Harness: A dedicated control plane with strict guardrails and audit trails so autonomous agents take action safely.

3️⃣ Multi-Model Flexibility: A flexible AI framework that lets security teams adopt specialized models as technology evolves—without re-architecting their underlying infrastructure.

The Agentic SOC Alliance brings together leaders across network detection, endpoint, identity, threat intelligence, and AI-native platforms to make this open operating model a reality for every security team.

🔗 Read ExtraHop CEO Greg Clark’s full perspective on rebuilding the SOC for the agentic era: https://t.co/gH8VWLHTgv

[ExtraHop @ExtraHop]

🚨 BIG NEWS FOR CYBERSECURITY! 🚨

We are thrilled to announce the launch of the Agentic SOC Alliance alongside a powerhouse coalition of founding partners!

Modern security operations are facing a massive paradigm shift. Adversaries now use AI to automate attacks and move laterally in minutes.

...But human-speed pipelines can't keep up.

Rushing to deploy autonomous AI agents, however, brings a whole new set of operational headaches: model hallucinations, runaway token costs, and rigid vendor lock-in.

Machine-speed defense requires moving away from piecemeal automation and adopting an open operating model that breaks down data silos, grounds AI agents in real-time context, and gives security teams the freedom to evolve without tearing down their stacks.

That's why we are joining forces with an incredible group of industry leaders to drive this initiative forward.

AuthMind | @ArmadinSecurity | @cmdzero_io | @CrowdStrike | @DropzoneAI | @ExaforceAI | Fig Security | @IntezerLabs | @KindoAI | @LangChain | @ProphetSec | @ReversingLabs | @TENEXai | @torq_io

👉 Learn more about the Agentic SOC Alliance here: https://t.co/AnRQN8AAk5

[ExtraHop @ExtraHop]

How do we actually trust automated agents to make the right decisions?

AI is only as smart as the telemetry feeding it. If your automated systems rely on delayed logs, fragmented visibility, or easily disabled endpoint agents, you run the risk of automating bad decisions at scale.

To safely hand over the keys to AI, you need an unalterable, real-time source of truth that attackers can’t tamper with or evade.

You need network context.

If you’re looking to skip the hype and dive into the actual data architecture needed to make your agentic SOC work, join ExtraHop’s Paul Giorgi for lunch at #BHUSA!

📅 Wednesday, August 5 | 12:05 PM
📍 Mandalay Bay Convention Center, Level 2 (Lagoon Conference Rooms)

We’ll break down the shift required to turn the network into the high-fidelity ground truth your automated tools need to operate safely and effectively.

Can't make the lunch? Catch Paul's stage presentation later in the afternoon, or drop by Booth #5512 on the expo floor to learn more!

[ExtraHop @ExtraHop]

In the age of the AI adversary, the timeline from initial compromise to full blown cyberattack shrinks from weeks to minutes.

Join us this Thursday, July 23 to learn how SOC teams can keep pace.

We'll be covering:
▪️ How threat actors are using AI today
▪️ What to keep an eye out for
▪️ How to build resilience against tomorrow's threats

Register to save your spot: https://t.co/6NZnVgp9dM