Tech Talk- AI Engine: A look at Transformative AI for Deep Insight into Anomalous Traffic

 

Graph-based anomaly detection transforms how network operators uncover threats and service issues by providing a deeper, relationship-driven understanding of all network activity traversing the eco-system. Unlike traditional methods that analyze isolated data points or rely on predefined rules, a graph-based approach leverages AI, ML, and graph theory to map and analyze the intricate relationships between users, devices, and services. This increased contextual awareness enables operators to detect nuanced, relational anomalies—such as abnormal lateral movement, unexpected dependencies, or deviations in traffic patterns—that signal early-stage threats, misconfigurations, or service degradation. By analyzing how entities interact rather than just their individual behaviors, graph algorithms offer unparalleled visibility into evolving risks across complex, high-traffic environments. This proactive approach empowers network teams to mitigate threats and performance issues well before they impact security, reliability, or user experience. Key Takeaways for You: * Learn how graph theory AI differs from other traditional ML/AI methods * See practical approaches for constructing graph representations from IPFIX data and applying data science and machine learning models for anomaly detection in real-time * Participate in the discussion on the importance of network induction in the active modeling of network topologies What does this mean for you/your business? * Enhanced Detection Capabilities * Deeper Insights into traffic * Proactive Network Management Practitioners leveraging AI graph-based anomaly detection gain improved visibility into network behaviors, enhancing their capability to respond proactively to security incidents and operational challenges. The technique empowers network administrators, security analysts, and IT professionals to better understand the underlying relational structure of network data and pinpoint issues before they escalate.

Ransomware Rinse & Repeat: Why SMBs Are in the Crosshairs in 2025

 

Ransomware attacks may be declining in volume, but for SMBs, the costs—and the consequences—are only rising. The 2025 Sophos Cybercrime on Main Street report reveals that of SMB's impacted: 70% of small business attacks involve ransomware Over 90% for medium-sized businesses According to the report, compromised network edge devices, such as firewalls and VPNs, are a common entry point for attackers. With SMEs accounting for 90% of all businesses worldwide and 40% of the US economy, it's crucial to prioritize cybersecurity. We dig into the latest trends, real-world incidents (Marks & Spencer, Co-op UK), and how platforms like Plixer One deliver the visibility, analytics, and control to break the attack cycle. Let’s talk observability, accountability—and survival. https://news.sophos.com/en-us/2025/04/16/the-sophos-annual-threat-report-cybercrime-on-main-street-2025/?amp=1 https://www.darkreading.com/cyberattacks-data-breaches/uk-retailers-reeling-ransomware-attacks

AI Without the Hype: Behavioral Anomaly Detection Explained | Join Us May 6!

 

AI is everywhere these days, and every vendor is claiming magic. But here at Plixer, we’re cutting through the noise. Join Peter Silva and Plixer Data Scientist Adam Howarth for another Tech Talk in our “No-Fluff AI” series—this time on Behavioral Anomaly Detection, happening Tuesday, May 6th at 9AM Pacific. We’ll go beyond the buzzwords and talk real AI: ✔️ What behavioral anomaly detection actually is ✔️ Why temporal vectors matter ✔️ How Plixer applies it for real-time network visibility ✔️ And of course—real use cases and tangible benefits for your security operations Last time we covered Graph AI—this time it’s all about how AI learns and responds to changes in network behavior. If you’re serious about advanced detection, this is for you. 💡 Bring your questions. Bring your curiosity. 🗓️ Tuesday, May 6 | 9:00AM PT 🔗https://plixer.zoom.us/webinar/register/7017453336482/WN_97Flq66yRrabBjlgHOwXsQ#/registration

The 2025 Verizon Data Breach Report: What You Need to Know

 The most anticipated data breach report of the year is here: Verizon’s 2025 DBIR. With over 22,000 incidents analyzed, the numbers around system intrusion, vulnerability exploits, ransomware, and supply chain attacks are eye-opening. The 2025 DBIR is packed with critical insights! In its 18th year, this report analyzes 22,000+ cyber incidents, including 12,195 confirmed breaches. From a 36% surge in system intrusions to a 34% rise in vulnerability exploits, and ransomware payouts averaging $115,000, the stats are eye-opening. Learn why 30% of breaches stem from supply chains, how human error fuels 60% of incidents, and why backups and training are non-negotiable.

I'm Peter, and today I’m breaking down the critical takeaways you need to know—from rising ransomware costs to why patching isn't keeping up. Plus, how an Observability and Defense platform like #PlixerOne can help you stay ahead of today’s threats. Like and subscribe for more practical cybersecurity insights! https://www.verizon.com/business/resources/reports/dbir/#top-takeaways https://www.verizon.com/business/resources/infographics/2025-dbir-infographic.pdf https://www.securityweek.com/verizon-dbir-flags-major-patch-delays-on-vpns-edge-appliances/ https://cybersecuritynews.com/verizon-dbir-report-small-businesses-emerges-as-prime-targets/ https://www.infosecurity-magazine.com/news/verizon-dbir-jump-vulnerability/

Bad Bots are Blossoming Bigger than Ever

 

According to the 2025 Bad Bot Report by Thales and Imperva, malicious bots now make up 37% of all internet traffic, and real human traffic at just 49%! Fueled by AI and LLMs, today’s bots aren’t just scraping data—they’re evading detection, launching API attacks, and mimicking browsers using residential IPs and VPNs. Industries like travel, retail, and finance are under siege, with bots targeting APIs in 44% of cases. From SQL injections to account takeovers, the tactics are evolving fast. As a business leader, it's essential to stay ahead of these threats and protect your organization's digital assets. You can combat bad bots with real-time monitoring, advanced threat detection and discover the importance of clearing out noise to focus on the really bad activity. Of course, #PlixerOne can help you cut through the noise to focus on true threats. Get yours at Plixer.com https://www.imperva.com/resources/resource-library/reports/2025-bad-bot-report/ https://www.scworld.com/news/malicious-bots-now-make-up-more-than-a-third-of-web-traffic https://www.malwarebytes.com/blog/uncategorized/2025/04/hi-robot-half-of-all-internet-traffic-now-automated

What Are Email Bombs? The Sneaky Scam Hiding in Your Inbox

 Email spam is nothing new—but a dangerous twist is making it past filters and putting users at risk. Forget basic spam. “Email bombs” are the latest trick cybercriminals use to flood inboxes, disguise attacks, and socially engineer users into giving up access. In this video, we break down how “email bombs” work, how attackers use them as a smokescreen for phishing and social engineering, and what you can do to defend your network. From user awareness to anomaly detection with tools like Plixer One, here's how to stay ahead of this growing threat.

Don’t forget to like and subscribe for more network security insights! https://www.darkreading.com/cyberattacks-data-breaches/threat-actors-spam-bombing-malicious-motives https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/email-bombing-why-you-need-to-be-concerned/ https://www.signifyd.com/blog/email-bomb-spam-attacks/

Don't Get Caught in the Flux: DNS Back in the Spotlight with the Fast Flux Threat

 

Imagine a world where you have to remember dozens of number combinations just to access your favorite websites. Luckily, the Domain Name System (DNS) translates domain names into IP addresses, making it easy to navigate the internet. However, DNS is also a prime target for cybercriminals, with threats like DNS spoofing, amplification attacks, and the latest Fast Flux DNS tactic. This week, CISA issued a warning about Fast Flux DNS, a sneaky tactic used by cybercriminals to stay hidden and resilient. In this video, we'll break down what Fast Flux DNS is (single and double flux), how attackers constantly rotate IP addresses and name servers to evade detection, and most importantly, how you can protect your DNS systems from these threats. Learn how Plixer One’s Observability & Defense Platform helps you detect and stop DNS abuse fast. So yeah, you don’t have to give a flux… but you kinda should. Learn about #PlixerOne: Plixer.com https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-093a https://www.csoonline.com/article/3954873/cyber-agencies-urge-organizations-to-collaborate-to-stop-fast-flux-dns-attacks.html https://www.bleepingcomputer.com/news/security/cisa-warns-of-fast-flux-dns-evasion-used-by-cybercrime-gangs/ https://www.darkreading.com/cyber-risk/cisa-dns-trick-fast-flux-thriving