Trellix SecondSight Actionable Threat Hunting Strengthens Cyber Resilience

New Trellix SecondSight Threat Hunting Report highlights the need for proactive defense against critical campaigns

Trellix , the company delivering the future of AI-powered cybersecurity, today announced Trellix SecondSight , a threat hunting service designed to proactively identify low-noise advanced threats often undetected, reducing organizational risk for Trellix customers.

"Threat actors' use of AI has significantly increased alert fatigue for security analysts," said John Fokker, VP Threat Intelligence Strategy, Trellix. "While automated systems flag high-level alerts, they often miss subtle, low-noise signals enabling actions like lateral movement. Trellix SecondSight is a critical component, offering analysts a 'second set of eyes' to actively monitor for these low-noise signals, acting as a force multiplier.”

The threat landscape is defined by "weak signals" bypassing traditional defenses, such as the APT28 multi-stage espionage campaign. Trellix SecondSight provides specialized hunting capabilities to expose these weak signals and stop advanced attacks. Applying human intuition and AI-driven analytics to telemetry from Trellix EDR , Trellix Email Security Cloud , and Trellix NDR , Trellix Threat Hunters identify sophisticated threats and provide proactive notifications to help security operations teams stay ahead of adversaries, while also improving Trellix detection capabilities. Benefits include:

"Proactive, actionable threat intelligence is no longer a nice-to-have; it’s a necessity for keeping pace with advanced actors,” said Niklas Chachalatos, Business Manager Security Services at Advania Sweden. “Trellix SecondSight goes a level deeper, proactively hunting for threats for our customers and providing actionable guidance to thwart attacks and build cyber resilience.”

Released today, the Trellix SecondSight Threat Hunting Report highlights the top five critical campaigns observed last year with recommendations to defend against these types of attacks. Like the UTA0355 spear-fishing campaign use case, which highlights the actor’s transition to OAuth abuse to circumvent traditional perimeter security and demonstrates the importance of cross-referencing public threat intelligence against telemetry using campaign patterns, infrastructure IOCs, and targeting profiles. Insights from Trellix SecondSight, expert threat hunters, and a global network of telemetry and intelligence underscore why proactive hunting remains one of the most effective defenses against modern threats like targeted espionage operations, OAuth abuse, and zero-day exploits .

Additional Resources:

Trellix Trellix is a global company redefining the future of cybersecurity. The company’s comprehensive, open, and native cybersecurity platform helps organizations confronted by today’s most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through artificial intelligence, automation, and analytics to empower over 50,000 business and government customers with responsibly architected security. More at .

Follow Trellix on and X .

Media Megan Haley media@trellix.com

View source version on businesswire.com:

The articles, information, and content displayed on this webpage may include materials prepared and provided by third parties. Such third-party content is offered for informational purposes only and is not endorsed, reviewed, or verified by Morningstar.

Morningstar makes no representations or warranties regarding the accuracy, completeness, timeliness, or reliability of any third-party content displayed on this site. The views and opinions expressed in third-party content are those of the respective authors and do not necessarily reflect the views of Morningstar, its affiliates, or employees.

Morningstar is not responsible for any errors, omissions, or delays in this content, nor for any actions taken in reliance thereon. Users are advised to exercise their own judgment and seek independent financial advice before making any decisions based on such content. The third-party providers of this content are not affiliated with Morningstar, and their inclusion on this site does not imply any form of partnership, agency, or endorsement.