CISA "A Tale of Two SOCs": Detection and Containment from Two Red Team Assessments

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

CISA red teams reach domain-level compromise at two critical infrastructure organizations, but only one SOC detects and contains initial intrusion.