Habr•July 30, 2026•🇷🇺Translated from Russian

R-Vision SIEM Debuts at Standoff 17 Cyber Battle and Processes 8.8 Million Correlation Events

R-Vision has published a detailed account of its first participation with R-Vision SIEM at the Standoff 17 cyber battle. The system was deployed for the akPots defender team to monitor a telecom-operator infrastructure, detect attacks and investigate incidents under conditions that closely resemble a real SOC environment.

Preparation began two weeks before the event. Approximately 80 percent of the event sources used in the Standoff infrastructure were already supported natively. The remaining 20 percent required the addition of two new sources, normalization adjustments for four sources, four new correlation rules and modifications to fifteen existing rules.

During the four-day exercise the system triggered 46 correlation rules, producing more than 8.8 million correlation events and 40 thousand alerts. The most frequent detections involved behavioral analysis from PT NAD, PT Container Security events, privilege-escalation attempts, web attacks and vulnerability exploitation.

Analysts actively used the platform, creating 13 custom widgets, 14 quick filters and running more than 9,000 search queries. Average query execution time was 1.5 seconds, with the heaviest query completing in four seconds while consuming 1.58 GB of ClickHouse memory.

The deployment was sized for an expected maximum of 3,000 events per second. Actual resource usage stayed modest: the collector averaged 0.7 CPU cores and 1.9 GB RAM, never exceeding 2.9 CPU cores and 3.5 GB RAM at peak. Team members gave the product scores of 4 or 5 out of 5 and indicated they would recommend it to colleagues, citing raw-text search, the RQL query language and event-grouping capabilities as the most valuable features.

Related articles

Habr•Other

Digital Painting 'Night Consolidation of the Threat' Depicts Hooded Mushrooms as Cyber Actors in Satirical Auction Lot

An anonymous digital artwork titled 'Night Consolidation of the Threat' presents a nocturnal scene of toxic mushrooms operating laptops while wearing hoodies. The piece uses generative techniques to explore themes of anonymity, identity crisis, and the visual language of cyber threats. Art critics interpret the hooded toadstools as metaphors for marginalized entities gaining agency through technology. The composition extends the hoodie motif across wooden posts, crosses, the moon, and even star constellations to suggest an omnipresent principle of concealment. The auction listing emphasizes that the exact activities of the fungi remain deliberately ambiguous, highlighting societal assumptions about hackers based solely on visual tropes. The work is offered with an estimate of 80,000 to 120,000 dollars and carries a disclaimer regarding internet connectivity risks.

Habr•Other

Netflix Scales Data Access Management with Data Projects to Handle Team Changes

Netflix has introduced Data Projects, a new abstraction layer that groups related tables, workflows, and resources under persistent service accounts instead of tying permissions to individual employees. The platform previously managed access at the level of single tables via ACLs and ran scheduled jobs under the creating engineer's personal account. Frequent reorganizations and employee departures caused widespread access failures across millions of tables and tens of thousands of workflows. Data Projects solves both problems by providing a logical container with its own stable Netflix application account and optional AWS IAM role. New resources created by project-owned jobs are automatically attached to the project through a gravity mechanism. The system is already managing tens of thousands of resources in production pipelines such as Streaming Quality of Experience and Member Analytics.

AntiMalware•Other

VK Tech Reports Revenue Growth to 14.4 Billion Rubles Driven by AI and Productivity Services

VK Tech achieved revenue of 14.4 billion rubles over nine months of 2026, marking approximately 35 percent growth. Generative AI solutions contributed 1 billion rubles to this total. VK WorkSpace productivity services grew 61 percent and served as a second major growth driver. The client base expanded 42 percent to around 38 thousand customers, with stronger gains from small and medium businesses. Recurring revenue rose 52 percent and now accounts for 86 percent of total revenue. EBITDA increased 21 percent to 1.8 billion rubles while operating expenses grew 37 percent to 12.6 billion rubles, lowering EBITDA margin from 14 to 12 percent. The company continues adding AI agents with multi-level memory and compliance tools to its platforms.

安全客•Other

AI Agents Rewrite SaaS Monetization Models as Marketplace Platforms Drive Global ISV Growth

The 2026 narrative of SaaS apocalypse driven by AI has reversed following strong earnings from major vendors. Companies including Salesforce, Palantir, Kingdee and Yonyou began reporting AI-related revenue, while IDC and Nvidia CEO Jensen Huang argued that AI agents amplify rather than replace software. At the 2026 Amazon Web Services Software Enterprise Summit in Shenzhen, AWS launched an ISV go-global accelerator and six new AI agents on Marketplace to streamline sales, compliance and partner management. Marketplace now hosts over 30,000 products from 6,000 sellers, with Agentic AI listings growing from 800 to more than 3,000 since July 2025. Chinese ISVs such as PingCAP, Zilliz, Manus and Plaud AI are shifting from simple listings to localized operations and bundled solutions. The platform projects hundreds of billions in transaction volume for 2026, supported by a network of 130,000 global partners. Industry leaders emphasize that future growth depends on embedding AI as core product logic rather than add-on chat interfaces.