R-Vision SIEM Debuts at Standoff 17 Cyber Battle and Processes 8.8 Million Correlation Events
R-Vision has published a detailed account of its first participation with R-Vision SIEM at the Standoff 17 cyber battle. The system was deployed for the akPots defender team to monitor a telecom-operator infrastructure, detect attacks and investigate incidents under conditions that closely resemble a real SOC environment.
Preparation began two weeks before the event. Approximately 80 percent of the event sources used in the Standoff infrastructure were already supported natively. The remaining 20 percent required the addition of two new sources, normalization adjustments for four sources, four new correlation rules and modifications to fifteen existing rules.
During the four-day exercise the system triggered 46 correlation rules, producing more than 8.8 million correlation events and 40 thousand alerts. The most frequent detections involved behavioral analysis from PT NAD, PT Container Security events, privilege-escalation attempts, web attacks and vulnerability exploitation.
Analysts actively used the platform, creating 13 custom widgets, 14 quick filters and running more than 9,000 search queries. Average query execution time was 1.5 seconds, with the heaviest query completing in four seconds while consuming 1.58 GB of ClickHouse memory.
The deployment was sized for an expected maximum of 3,000 events per second. Actual resource usage stayed modest: the collector averaged 0.7 CPU cores and 1.9 GB RAM, never exceeding 2.9 CPU cores and 3.5 GB RAM at peak. Team members gave the product scores of 4 or 5 out of 5 and indicated they would recommend it to colleagues, citing raw-text search, the RQL query language and event-grouping capabilities as the most valuable features.
Related articles
Bitrix24 Introduces Cowork/Code AI Agent for Corporate Task Automation and App Building
Bitrix24 has launched Cowork/Code, an AI application that combines file management, company data access, and application development inside a controlled corporate environment. The tool features an AI agent capable of executing multi-step workflows such as locating records, comparing documents, generating tables, and saving results to shared folders. It operates in two modes: Cowork for one-time tasks like overdue task reports or client preparation, and Code for creating reusable tools such as dashboards or notification bots. A memory technology called Radiant stores context from chats, tasks, meetings, and employee data to deliver more accurate, personalized responses over time. The platform addresses common risks of vibe coding by keeping code, data access, and distribution within the Bitrix24 ecosystem hosted on Russian infrastructure. A free tier provides limited usage, with paid plans required for sustained team operation.
Klark and Klara Launch Self-Hosted Corporate Messenger and Task Manager for On-Premise Data Control
Klark and Klara are two integrated products designed to keep corporate communication and task management entirely within company infrastructure. Klark functions as a Telegram-like messenger with personal chats, supergroups, channels, voice messages, file sharing, and video calls powered by LiveKit. Klara serves as a streamlined task and knowledge base system replacing complex setups like Jira and Confluence. Both run via Docker Compose on customer servers using PostgreSQL, Redis, FastAPI, and React, with built-in antivirus scanning via ClamAV. Key security measures include mandatory TOTP two-factor authentication, LDAP integration, content security policies, and automatic session invalidation on token reuse. The combination allows direct task creation from chat messages and displays tasks alongside conversations in a unified interface.
Russia's Taxi Market Overrun by Illegal Drivers Using Fake Accounts and Gray Intermediaries
Russian taxi aggregators are increasingly relying on complex chains of intermediaries that allow drivers without proper licenses, experience, or even Russian permits to operate. These gray schemes involve dispatch services, car fleets, individual entrepreneurs, and so-called podklyuchashki that sell ready-made accounts for 3-7 thousand rubles after minimal verification. A high-profile incident in Odintsovo exposed how a driver refusing service to a disabled veteran of the special military operation was later deported, revealing a corporate maze where the vehicle, the connecting IP, and the driver had no direct link to the aggregator. Official data shows over 900,000 vehicles registered in the FGIS Taxi system, yet more than 1.5 million drivers may be operating outside legal requirements. With Russians taking around 10 million taxi trips daily, the lack of accountability has contributed to over 3,100 accidents involving taxis in 2025, resulting in 143 deaths and more than 3,800 injuries. Courts remain inconsistent in assigning liability across aggregators, fleets, and individual drivers. Experts are calling for aggregators to be designated as carriers with mandatory checks and joint liability.
Russians Offered Unofficial 5G Activation on iPhone for 399 Rubles with No Guarantees
A Russian service called 5G First is selling a tool that removes Apple's 5G restrictions on iPhones for 399 rubles without requiring a jailbreak. The method works by modifying carrier profile settings that control which network features are permitted for a given SIM card. A free alternative named CarrierSIM achieves the same result by forcing the device to adopt the Vodafone Hungary carrier profile where 5G is already enabled. Both solutions are described as experimental, depend on specific iOS versions, operators and SIM cards, and offer no assurance they will survive future system updates. The Ministry of Digital Development is already in discussions with Apple about enabling 5G officially on Russian iPhones. Successful activation of the 5G menu option does not create network coverage where Russian operators have not yet deployed it.