CISA red team exercises reveal critical infrastructure SOC detection gaps

CISA conducted red team operations against two critical infrastructure entities, resulting in a full compromise of one organization that failed to detect the intrusion. The second organization successfully identified and contained the phishing-based attack within 20 minutes, highlighting significant disparities in defensive monitoring capabilities.