{
  "id": 132176,
  "title": "Israeli cybersecurity firm Vega launches open AI threat detection standard",
  "url": "https://urgent.news/2026/08/04/israeli-cybersecurity-firm-vega-launches-open-ai-threat-detection",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-04T14:28:59.000Z",
  "source": {
    "name": "Jerusalem Post",
    "slug": "jerusalem-post",
    "url": "https://www.jpost.com/business-and-innovation/article-904562"
  },
  "original_language": "en",
  "account": "Israeli cybersecurity firm Vega has unveiled Detection Skills, an open standard aimed at enhancing threat detection, alert triage, investigation, and continuous improvement within security teams. This innovative framework combines AI-powered workflows with traditional cybersecurity practices to tackle the rapidly evolving threat landscape facilitated by artificial intelligence. The announcement was made ahead of Black Hat USA 2026 in Las Vegas, where Vega plans to showcase the technology.\n\nTraditional cybersecurity systems typically depend on pre-defined detection rules to identify malicious patterns. However, the emergence of AI-driven adversaries has made it increasingly difficult to maintain these rules, as they can now rapidly develop and alter their techniques. Detection Skills seeks to address this issue by documenting the conditions that should trigger alerts and the investigative processes followed by experienced cyber defense engineers to determine the legitimacy of these alerts.\n\nEach \"skill\" within Detection Skills specifies the evidence that an AI system should examine, the activities that should be escalated, and when an alert can be deemed a false positive and dismissed. The resulting investigation includes all collected evidence and an explanation of the system's decision-making process. Vega co-founder and chief technology officer Eli Rozen emphasized that AI-driven adversaries bypass static rules in existing Security Information and Event Management (SIEM) systems, highlighting the need for AI-powered reasoning to augment the judgment of experienced cyber defense engineers.\n\nThe framework is designed to integrate seamlessly with existing cybersecurity infrastructure, including SIEM platforms, cloud storage systems, and data lakes, without requiring the replacement of current security products or the migration of data to a centralized system. Vega's Security Analytics Mesh technology forms the backbone of the reference implementation, enabling detection and investigation processes to operate directly on data stored across various systems.\n\nSeveral industry leaders have expressed their interest in adopting the Detection Skills framework. Rushmere Fernandes, deputy chief information security officer at Peloton, highlighted the platform's ability to provide explicit control over AI checks, escalations, and dismissals, resulting in a trusted alert queue with fewer false positives. Shawn McGhee, chief information security officer at Exemplar Luxury Group, noted the framework's potential to help retailers maintain cybersecurity operations during periods of high customer activity, ensuring that expertise is consistently applied even during peak times.\n\nLamont Orange, chief information security and trust officer at Israeli data-security company Cyera, emphasized the importance of an open and transparent standard in fostering collective industry response to increasingly capable attackers. Vega, founded in 2024 and backed by notable investors including Accel, Cyberstarts, Redpoint, and CRV, currently serves Fortune 200 corporations, international banks, and healthcare providers. The company's booth will be located at Booth 3452 during Black Hat USA 2026, where it will further demonstrate the capabilities of Detection Skills.",
  "summary": "Vega publicly released the framework through DetectionSkills.io and GitHub ahead of Black Hat USA 2026 in Las Vegas, where the company is demonstrating the technology.",
  "key_points": [
    "Israeli cybersecurity firm Vega unveils Detection Skills open standard.",
    "Detection Skills combines AI workflows with traditional cybersecurity practices.",
    "Framework aims to enhance threat detection and investigation processes."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}