10 posts tagged with "SIEM Plus"

What Japan's October cyber wave shows, and five questions leadership should be able to answer this week.

In early October 2026, a run of data leaks caused by unauthorised access drew an unusually direct response from the Japanese government. On 8 October, the government convened an inter-ministerial meeting. Toshiharu Furukawa, Japan's Minister for Digital Transformation, who also oversees cybersecurity, said companies would be asked to fix system vulnerabilities, strengthen authentication and prevent the misuse of leaked information, and that these measures should extend to outsourced contractors.

The next day, the Cabinet Secretariat's National Cybersecurity Office (NCO) published an official notice, 「不正アクセスによる漏えい等の事案を踏まえた対応について」 (roughly, Response to incidents of leaks caused by unauthorised access; the notice is published in Japanese only). It confirms multiple cases in which attackers broke into the systems of organisations holding large volumes of personal data and stole it. The NCO names three routes: exploited web-system vulnerabilities, compromise through the supply chain, and weak data management. At a meeting of the Liberal Democratic Party's National Cybersecurity Strategy Headquarters on 9 October, its head Masaaki Taira said cybersecurity had entered a new phase and that the country now faced "a state of emergency, a contingency" (非常事態、有事). The LDP published its account of the meeting on 14 October. That is a political warning, not a legal declaration. It came just over a week after key provisions of Japan's Active Cyber Defence legislation took effect on 1 October.

We're announcing that SIEM+ now has full, native support for Microsoft Sentinel, joining our existing integrations with Devo, Splunk, and QRadar. If your organization runs Sentinel as its SIEM, you can now add SIEM+'s alert consolidation and AI-powered triage on top of it without changing anything about your existing Sentinel deployment.

Alert fatigue isn't a SOC inconvenience. It's an enterprise risk.​

When security leaders talk about alert fatigue, the conversation usually stays inside the SOC: analysts burning out, dashboards full of red, MTTR creeping up quarter over quarter. That framing isn't wrong — it's just too small.

At the enterprise level — in financial services, pharma, semiconductor, and large-scale manufacturing — alert fatigue isn't an operational nuisance. It's a business risk that shows up on the balance sheet, in audit findings, and in board-level conversations about resilience.

We are proud to share that Eventus has been featured by the Japan External Trade Organization (JETRO) in its latest Investing in Japan newsroom article: Eventus Hong Kong Limited Establishes Japanese Subsidiary in Tokyo to Provide AIoMT Platform.

Published on August 24, 2026, the feature recognizes Eventus’s expansion from Hong Kong into Japan and introduces our work in AIoMT—Artificial Intelligence of Medical Things. It also highlights how our Tokyo subsidiary, Eventus K.K., is helping bring practical healthcare and cybersecurity solutions to the Japanese market.

Security teams are not short on alerts. They are short on time, context, and attention.

A 2025 survey of 2,058 security leaders found that 59% receive too many alerts, while 52% described their SOCs as overworked. Security Magazine’s summary of the research also found that many teams lose investigation time because their security data is difficult to manage and disconnected across tools.

The human cost is just as clear. In the 2025 ISC2 Cybersecurity Workforce Study, 48% of respondents said they felt exhausted from trying to keep up with new threats and technologies, while 47% felt overwhelmed by their workload. ISC2’s study surveyed more than 16,000 cybersecurity professionals and decision-makers.

This is alert fatigue: the point where every notification starts to look the same, every investigation feels urgent, and analysts have to spend more energy deciding what to ignore than determining what matters.

It is not a company-specific problem. It is an operational problem affecting security teams everywhere.