• Home
• News

Kaspersky has unveiled a new version of its Security Information and Event Management (SIEM) platform, featuring an AI-powered mechanism designed to detect potential account compromise. The updated platform also delivers enhanced data integrity and improved customization capabilities, providing organizations with stronger and more flexible cybersecurity protection.

According to a recent global survey conducted by Kaspersky, SIEM platforms rank among the top three most in-demand security solutions for organizations seeking to establish a Security Operations Center (SOC), with 40% of companies identifying SIEM as a core technology for advanced cybersecurity operations. Demand is even higher in the Middle East, where 42% of organizations planning to build a SOC intend to deploy a SIEM platform as part of their security stack.

In response to market needs, Kaspersky continues to roll out regular updates to its SIEM solution, equipping it with advanced threat detection capabilities and improved compliance with industry regulations. The latest update allows users to create, clone, and modify roles based on internal workflows, offering greater flexibility and alignment with organizational structures.

A key highlight of the release is the beta version of Correlator 2.0, which introduces fault tolerance and horizontal scalability to improve performance while reducing hardware requirements. The update also includes an AI-driven account theft detection feature that analyzes login activity, establishes behavioral baselines, and identifies anomalies to issue real-time alerts about potential account compromise.

The platform now supports secure backup and recovery through immutable archival files, ensuring data integrity during investigations, audits, and regulatory compliance processes. Additionally, background search processing enables analysts to run low-priority queries without disrupting ongoing tasks, significantly improving user experience and operational efficiency.

Commenting on the launch, Ilya Markelov, Head of Unified Platform Product Group at Kaspersky, said that integrating AI into the SIEM platform enables automated analysis of complex data and streamlines core processes, allowing security teams to focus on advanced investigations and proactive defense measures.