Network & Infrastructure Security

The best endpoint security practices are evolving and essential

Ever since the first mobile device hit the enterprise network, best endpoint security practices have been a major IT concern. What's happened since then has been a staggering proliferation of the number and types of devices on the network, complicated by increasing numbers of mobile and remote corporate employees, all of which have essentially ended the traditional idea of a corporate network security perimeter. Firewalls and other more traditional security appliances may still be in use, and rightly so, but endpoint security management is more critical than ever in keeping enterprise systems and data safe from malicious actors.

The summer Insider Edition, our Information Security magazine quarterly e-zine, looks at what's new in endpoint security management, from the best endpoint security tools to consider now, and what other efforts beyond tools infosec pros can employ to best secure all those pesky mobile endpoints wandering in and out of corporate corridors.

This Insider Edition offers expert assessments on the endpoint security technology vendors have developed to combat mutating ransomware like WannaCry -- from machine learning to multivendor partnerships to behavior analytics. Also included is an exploration of mobile endpoint security tools like application containers and app wrapping. CISOs must focus now on how the threats, and the technological advances to fight them, are changing and factor these considerations into any endpoint security strategy.

Readers will come away with a deeper understanding of the best endpoint security tools and techniques available and be able to consider the most advanced approaches available to locking down the company data and systems that endpoints can access.

 Continue Reading

Advanced endpoint protection takes on the latest exploits

Advanced endpoint protection is arriving from all quarters -- machine learning, crafty sandboxes, behavior analytics. Learn how tech advances are being applied to endpoints. Continue Reading

By

• David Geer, Geer Communications

Do thoughts of your least secure endpoint keep you up at night?

Some days, 'secure endpoint' feels like an oxymoron, but that soon may change. From smart sandboxes to advanced behavior analytics, learn what's new in endpoint security technologies. Continue Reading

By

• Brenda L. Horrigan, Executive Managing Editor

Router security issues highlighted by CIA's CherryBlossom project

The latest WikiLeaks release on CIA hacking tools includes the CherryBlossom project, which highlights router security issues, including a lack of firmware signing validation. Continue Reading

By

• Michael Heller, TechTarget

IPv6 update: A look at the security and privacy improvements

The recent IPv6 update from the IETF introduces new security and privacy recommendations. Expert Fernando Gont explains these changes and what they mean for organizations. Continue Reading

By

• Fernando Gont, SI6 Networks

Office 365 security features: As good as it gets?

Online and application security is never perfect, but Office 365 security features come close. Here's an overview of how Microsoft installed security in its popular suite. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Researchers port EternalBlue exploit to Windows 10

The EternalBlue exploit behind the WannaCry ransomware attacks has been successfully ported to an older version of Windows 10, but newer versions of the OS are protected. Continue Reading

By

• Michael Heller, TechTarget

IT security trends: 2017 prioritizes cloud, network, endpoints

The 2017 TechTarget IT Priorities Survey reports a number of key IT security trends about where enterprises and infosec professionals place their time and resources. Continue Reading

By

• Diana Hwang

Learn what breach detection system is best for your network

Breach detection systems are essential in these days of machine learning and artificial intellingence. Learn how to identify the features and functions your network needs. Continue Reading

By

• David Geer, Geer Communications

Can BGP anycast addressing be used for DDoS attacks?

The BGP anycast addressing technique could potentially be used for malicious purposes. Expert Judith Myerson explains how this might work and what types of attacks to look out for. Continue Reading

By

• Judith Myerson

Q&A: Juniper's Kevin Walker on data manipulation, ransomware threats

Juniper's Kevin Walker talks with SearchSecurity about the evolving threat landscape and how some attackers are incorporating data manipulation into their schemes. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

What is the SS7 protocol and what are its security implications?

The SS7 protocol has been a source of controversy lately because of its security vulnerabilities. Expert Judith Myerson explains what the protocol is and what its issues are. Continue Reading

By

• Judith Myerson

How effective is geofencing technology as a security method?

Geofencing technology is increasingly being used as a security tactic, such as to control access to servers with DNS settings. Expert Michael Cobb explains how it works. Continue Reading

By

• Michael Cobb

Mobile endpoint security: What enterprise infosec pros must know now

Do you know how to take care of mobile endpoint security in your enterprise? This guide walks you through all aspects of the issue, from policy and strategy to emerging threats. Continue Reading

Handbook of System Safety and Security

In this excerpt from chapter 10 of Handbook of System Safety and Security, editor Edward Griffor discusses cloud and mobile cloud architecture and security. Continue Reading

By

• SearchSecurity and Syngress

How does Ticketbleed affect session ID security?

The Ticketbleed bug in some F5 Networks products caused session IDs and uninitialized memory to leak. Expert Judith Myerson explains what a session ID is and how attackers use it. Continue Reading

By

• Judith Myerson

DARPA's SSITH program takes aim at hardware vulnerabilities

News roundup: DARPA's SSITH program tackles hardware vulnerabilities for better security. Plus, new risks placed in OWASP Top 10, SWIFT launches new anti-fraud tool, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Symantec CA woes debated by browser community

Compliance with CA/B Forum Baseline Requirements was debated after Symantec CA posted responses to 14 issues raised by Mozilla developers. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Preparing enterprise systems for the scriptless Linux exploit

The scriptless Linux exploit deviates from usual methods that security tools recognize as attacks. Expert Nick Lewis explains how the exploit works and how to prevent it. Continue Reading

By

• Nick Lewis

Risk & Repeat: Google slams Symantec certificates

In this episode of SearchSecurity's Risk & Repeat podcast, editors discuss Google's proposed plan to distrust Symantec certificates following more allegations of mis-issuance. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

HTTPS traffic has yet to surpass HTTP traffic, Fortinet study shows

News roundup: HTTPS traffic has yet to surge, despite its security benefits, according to a report. Plus, the latest in the Apple extortion; a Mirai attack lasted 54 hours; and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Android VPN apps: How to address privacy and security issues

New research on Android VPN apps revealed the extent of their privacy and security flaws. Expert Kevin Beaver explains how IT professionals can mitigate the risks. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

SonicWALL SSL VPN provides security for organizations of any size

The SonicWALL SSL VPN protects remote client devices by creating a secure connection to enterprise networks, with many options for customized security features. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Cisco IOS SSL VPN offers security through internet routers

Expert Karen Scarfone outlines the features of the Cisco IOS SSL VPN and explains how it secures enterprise communications. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Chrome backs out of TLS 1.3 support after proxy issues

After Google rolled out the latest version of Chrome, Blue Coat proxy software issues prompt rollback of TLS 1.3 support in latest version of Chrome browser. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

IoT malware: How can internet-connected devices be secured?

IoT botnet DDoS attacks have been growing in volume and impact. Expert Nick Lewis explains how you can ensure your internet-connected devices are secure from IoT malware. Continue Reading

By

• Nick Lewis

How does BENIGNCERTAIN exploit Cisco PIX firewalls?

The BENIGNCERTAIN exploit affects certain versions of Cisco systems using the IKEv1 protocol. Expert Nick Lewis explains what the protocol does and how the vulnerability works. Continue Reading

By

• Nick Lewis

Connected medical devices spark debate at RSA Conference session

An RSA Conference session on a new attack on connected medical devices led to a spirited debate on vulnerability disclosure and manufacturer responsibility. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Christopher Young: Don't sleep on the Mirai botnet

RSA Conference 2017 was full of talk about future IoT attacks, but Intel Security's Christopher Young said the Mirai botnet is still an enormous threat and demonstrated why that is. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How to use DNS reverse mapping to scan IPv6 addresses

Enterprises looking to perform IPv6 address scans can use DNS reverse mapping techniques. In part one of this tip, expert Fernando Gont explains how the process works. Continue Reading

By

• Fernando Gont, SI6 Networks

Rapid7's Brown and Beardsley address IoT security issues

Rapid7's Rebekah Brown and Tod Beardsley talk about IoT security issues, including new cars, blaming users for poor implementations and why NAT is the best firewall ever. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Corero Network Security on why DDoS mitigation strategy must improve

Corero Network Security's Dave Larson talks with SearchSecurity about how the Mirai botnet attacks have forced companies to change their DDoS mitigation strategy. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

What are the best anti-network reconnaissance tools for Linux systems?

Anti-network reconnaissance tools can prevent attackers from getting access to system information. Expert Judith Myerson goes over the best enterprise options. Continue Reading

By

• Judith Myerson

How does DNSChanger take advantage of WebRTC protocols?

WebRTC protocols are being targeted by a new version of the DNSChanger exploit kit. Judith Myerson explains how these attacks work and what enterprises should know. Continue Reading

By

• Judith Myerson

Monitoring outbound traffic on your network: What to look for

Outbound network traffic remains a weakness for many enterprises and is a major attack vector. Expert Kevin Beaver explains how to spot irregular occurrences in your network. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

In a post-Mirai world, the FTC wants more secure routers from D-Link

The Federal Trade Commission filed a lawsuit against D-Link, and experts said the move was likely to push more secure routers in the wake of the Mirai botnet attacks. Continue Reading

By

• Michael Heller, TechTarget

FTC launches competition to improve IoT device security

News roundup: FTC starts a contest to create a better IoT device security tool. Plus, ransomware is now illegal in California; Google patches 29 critical Android flaws; and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Industrial Network Security

In this excerpt from chapter 3 of Industrial Network Security, authors Eric D. Knapp and Joel Langill discuss the history and trends of industrial cybersecurity. Continue Reading

By

• SearchSecurity and Syngress

SWIFT network communications: How can bank security be improved?

The SWIFT network has increasingly been abused by cybercriminals to carry out bank fraud and theft. Expert Michael Cobb explains possible ways to boost security. Continue Reading

By

• Michael Cobb

Wireless intrusion prevention systems: A buyer's guide

In this SearchSecurity buyer's guide, learn why it's important to have a wireless intrusion prevention system to protect your Wi-Fi networks and how to pick the right WIPS product. Continue Reading

RSA NetWitness Logs and Packets: Security analytics product overview

Expert Dan Sullivan examines RSA's NetWitness Logs and Packets, security analytics tools that collect and review logs, packets and behavior to detect enterprise threats. Continue Reading

By

• Dan Sullivan

WinMagic SecureDoc: Full-disk encryption product overview

Expert Karen Scarfone examines the features of WinMagic's SecureDoc, a full-disk encryption product for laptops, desktops, mobile devices and servers. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Mojo AirTight WIPS overview

Expert Karen Scarfone looks at the features and functionality of Mojo Networks' AirTight WIPS, a wireless intrusion prevention system designed to detect and block WLAN attacks. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Aruba RFProtect WIPS: Product overview

Expert Karen Scarfone examines the features of Aruba RFProtect, a wireless intrusion prevention system to detect and block WLAN attacks against enterprise networks. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Check Point Next Generation Firewall: Product overview

Check Point Next Generation Firewall family combines firewalls with unified threat management technology, VPNs and more. Expert Mike O. Villegas takes a closer look. Continue Reading

By

• Mike O. Villegas, K3DES LLC

Cisco ASA with FirePOWER: NGFW product overview

Cisco combined the ASA series firewall with SourceFire's FirePOWER threat and malware detection capabilities. Expert Mike O. Villegas takes a closer look at this NGFW. Continue Reading

By

• Mike O. Villegas, K3DES LLC

How can Kerberos protocol vulnerabilities be mitigated?

Microsoft's Kerberos protocol implementation has long-standing issues with its secret keys. Expert Michael Cobb explains how to mitigate the authentication vulnerabilities. Continue Reading

By

• Michael Cobb

Proper network segments may prevent the next breach

Companies still fail to implement secure network segmentation and role-based access. Here's how to protect your sensitive data and stay out of the headlines. Continue Reading

By

• Robert Lemos

Voltage SecureMail encryption tool: Product overview

Expert contributor Karen Scarfone takes a look at Voltage SecureMail for encrypting email messages in the enterprise. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Symantec Desktop Email Encryption: Product overview

Expert contributor Karen Scarfone examines Symantec Desktop Email Encryption, a tool for encrypting email messages for individuals within the enterprise. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

What are the differences between active boards and passive boards?

Both active and passive boards of directors have different approaches to handling cybersecurity within their organizations. Here's how to tell which type you have. Continue Reading

By

• Mike O. Villegas, K3DES LLC

Securing VoIP: Keeping Your VoIP Networks Safe

In this excerpt of Securing VoIP: Keeping your VoIP Network Safe, author Regis (Bud) Bates outlines different approaches to VoIP security and offers best practices to ensure infrastructure security is intact. Continue Reading

By

• SearchSecurity and Syngress

Integrated Security Systems Design

In this excerpt of Integrated Security Systems Design, author Thomas L. Norman explains the tools of security system design, the place of electronics in the process, how to establish electronic security program objectives and the types of design efforts. Continue Reading

By

• SearchSecurity and Syngress

What enterprises need to know about Internet traffic blocking

Traffic blocking by Internet carriers has stirred up some controversy in the security industry. Expert Kevin Beaver discusses the pros and cons of blocking network traffic. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Breaking down the risks of VM escapes

The Xen hypervisor flaw highlighted the risks of VM escapes, but expert Ed Moyle explains why the flaw should serve as a warning for virtual containers as well. Continue Reading

By

• Ed Moyle, SecurityCurve

Windows 10 Wi-Fi Sense for hotspot sharing: Is it safe?

Microsoft's Windows 10 Wi-Fi Sense was designed to make hotspot sharing easy, but experts debate if the security risks are real and whether the new feature offers substantial benefits and relative safety. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Fortinet FortiGate UTM: Product overview

Expert Ed Tittel looks at Fortinet FortiGate UTM appliances, which combine different network infrastructure protection features into a single device. Continue Reading

By

• Ed Tittel

Cisco Meraki MX appliances: UTM product overview

Expert Ed Tittel examines Cisco's Meraki MX UTM Appliances, a series of UTM products that combines various network security and protection features into a single device. Continue Reading

By

• Ed Tittel

Should the RC4 cipher still be used in enterprises?

A newly discovered attack can break the RC4 cipher and decrypt user cookies. Expert Michael Cobb explains the attack and the relevance of RC4 in enterprises today. Continue Reading

By

• Michael Cobb

Symantec Messaging Gateway and Symantec Email Security.cloud: Product overview

Expert Karen Scarfone examines the Symantec Messaging Gateway and Symantec Email Security.cloud email security gateway products that detects and blocks messages that contain suspicious content and threats. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Proofpoint Enterprise Protection: Product overview

Expert Karen Scarfone examines the Proofpoint Enterprise Protection email security gateway product, which scans inbound and outbound email messages for malware, phishing and spam threats. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Why relying on network perimeter security alone is a failure

A network perimeter security strategy alone can no longer protect enterprises. Expert Paul Henry explains why organizations must adapt. Continue Reading

By

• Paul Henry, SANS Institute

McAfee Email Protection, Security for Email Servers: Product overview

Expert Karen Scarfone reviews the McAfee Email Protection and McAfee Security for Email Servers products that are used for monitoring, blocking and quarantining email messages. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Cisco Email Security Appliance: Product overview

Expert Karen Scarfone reviews Cisco's Email Security Appliance product that is designed for detecting and blocking email-borne threats. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Adjusting your network perimeter security

Expert Johna Till Johnson explains how the enterprise perimeter became obsolete, and how to replace network perimeter security with an approach to perimeterless security. Continue Reading

By

• Johna Till Johnson, Nemertes Research

How to manage system logs using the ELK stack tool

Centrally managing system logs is an important practice for enterprise security. Expert Dejan Lukan explains how to set up cloud servers, such as ELK stack, for this purpose. Continue Reading

By

• Dejan Lukan, Protean Security

Readers’ top picks for enterprise firewalls

The companies and key functionality organizations seek out when they upgrade or add firewall technology to their enterprise environments. Continue Reading

By

• Kathleen Richards

Secure Hash Algorithm-3: How SHA-3 is a next-gen security tool

Expert Michael Cobb details the changes in SHA-3, including how it differs from its predecessors and the additional security it offers, and what steps enterprises should take. Continue Reading

By

• Michael Cobb

Three criteria for selecting the right IPS products

Expert contributor Karen Scarfone examines important criteria for evaluating intrusion prevention system (IPS) products for use by an organization. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Vormetric Transparent Encryption: Product overview

Expert Ed Tittel takes a look at Vormetric Transparent Encryption, a component of Vormetric's Data Security Platform that encrypts data and does access control for that data. Continue Reading

By

• Ed Tittel

McAfee Database Activity Monitoring: Database security tool overview

Expert Ed Tittel takes a look at McAfee Database Activity Monitoring and McAfee Vulnerability Manager for Databases to see how they protect enterprises' databases and corporate data. Continue Reading

By

• Ed Tittel

Enterprise benefits of network intrusion prevention systems

Expert Karen Scarfone explains how most organizations can benefit from intrusion prevention systems (IPSes), specifically dedicated hardware and software IPS technologies. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Is a security cloud service your best endpoint defense?

Cloud technologies often have a bad reputation when it comes to security, but that may be unfair. Is the cloud the best answer for securing the endpoints in your enterprise? Continue Reading

By

• Karen Kent, Trusted Cyber Annex

The basics of network intrusion prevention systems

Expert Karen Scarfone explores intrusion prevention systems and their acquisition, deployment and management within the enterprise. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

The best SSL VPN products in the market

SSL VPNs are essential for securing network connections and communications. Here's a look at the best SSL VPN products in the industry. Continue Reading

By

• James Alan Miller, Senior Executive Editor

Should the Netdump flaw deter enterprise ODL SDN use?

The benefits of the ODL SDN platform are promising, but what about the recent Netdump flaw it experienced? Expert Kevin Beaver discusses why you may not want to pass on OpenDayligh just yet. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Certificate authorities are limited but new TLS versions can help

SSL/TLS, long the cornerstone of Web security, has become a security vulnerability due to problems with certificate authorities. Learn what solutions the industry is pursuing. Continue Reading

By

• Michael Cobb

From SSL and early TLS to TLS 1.2: Creating a PCI DSS 3.1 migration plan

PCI DSS 3.1 requires enterprises to deplete SSL and early TLS use by June 30, 2016. Expert Michael Cobb offers advice for putting a migration plan to TLS 1.2 in place. Continue Reading

By

• Michael Cobb

How UTM products can benefit your enterprise network environment

Expert Ed Tittel explains why unified threat management is the right holistic IT security approach for SMBs and how it can fit into the enterprise, as well. Continue Reading

By

• Ed Tittel

State of the Network study: How security tasks are dominating IT staff

The majority of networking teams are regularly involved in enterprise security tasks. Expert Kevin Beaver explains the phenomena and how to embrace it. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Network anomaly detection: The essential antimalware tool

Traditional perimeter defenses are no longer enough; network anomaly detection tools are now essential in the battle against advanced malware. Continue Reading

By

• Peter Sullivan

Introduction to unified threat management appliances

Expert Ed Tittel describes unified threat management (UTM) appliances and features, and explains its advantages to organizations of all sizes. Continue Reading

By

• Ed Tittel

Comparing the top SSL VPN products

Expert Karen Scarfone examines the top SSL VPN products available today to help enterprises determine which option is the best fit for them. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

The three enterprise benefits of SSL VPN products

Expert Karen Scarfone outlines the ways SSL VPN products can secure network connections and communications for organizations. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Symantec Endpoint Encryption: Full disk encryption product overview

Expert Karen Scarfone examines the features of Symantec Endpoint Encryption, a full disk encryption product for Windows laptops, desktops and servers. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Sophos SafeGuard: Full disk encryption product overview

Expert Karen Scarfone examines the features of Sophos SafeGuard, a full disk encryption product for laptops, desktops and servers. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Microsoft BitLocker: Full disk encryption software overview

Expert Karen Scarfone examines the features of BitLocker, Microsoft's native full disk encryption software for Windows laptops, desktops and servers. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

McAfee Complete Data Protection: Full disk encryption product overview

Expert Karen Scarfone examines the features of McAfee Complete Data Protection, a full disk encryption product for securing client-side computers and servers. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Dell Data Protection | Encryption: Full disk encryption product overview

Expert Karen Scarfone examines the features of Dell Data Protection | Encryption, a full disk encryption product for securing client-side devices. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Apple FileVault 2: Full disk encryption software overview

Expert Karen Scarfone examines the features of Apple's bundled full disk encryption software for Mac OS X, FileVault 2. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

The top full disk encryption products on the market today

Full disk encryption can be a key component of an enterprise's desktop and laptop security strategy. Here's a look at some of the top FDE products in the industry. Continue Reading

By

• James Alan Miller, Senior Executive Editor

AWS security groups vs. traditional firewalls: What's the difference?

AWS security groups provide network-based blocking mechanisms, much like traditional firewalls. Expert Dan Sullivan explains the differences between the two. Continue Reading

By

• Dan Sullivan

The secrets of proper firewall maintenance and security testing techniques

The Verizon 2015 PCI Compliance Report cited a lack of firewall maintenance and security testing as major causes for compliances breaches. Expert Kevin Beaver offers tips to successfully manage these tasks. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Six ways to use wireless intrusion prevention systems in the enterprise

Expert George V. Hulme presents six real-world use cases for the deployment of WIPS to beef up wireless network security in the enterprise. Continue Reading

By

• George V. Hulme

Introduction to wireless intrusion prevention systems in the enterprise

Expert contributor George V. Hulme explains how wireless intrusion prevention systems (WIPS) protect enterprise networks from attacks and prying eyes. Continue Reading

By

• George V. Hulme

SSL/TLS security: Addressing WinShock, the Schannel vulnerability

Schannel is the latest cryptographic library to encounter SSL/TLS security issues. Expert Michael Cobb discusses the WinShock vulnerability and how to mitigate enterprise risks. Continue Reading

By

• Michael Cobb

How emerging threat intelligence tools affect network security

Up and coming threat intelligence tools aim to improve data security and even standardize threat intelligence across the industry. Expert Kevin Beaver explains how. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

The importance of email encryption software in the enterprise

Expert Karen Scarfone explains how email encryption software protects messages and attachments from malfeasance. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

The POODLE vulnerability and its effect on SSL/TLS security

The POODLE vulnerability was patched in October, yet new vulnerabilities are causing concern. Expert Michael Cobb discusses how to maintain SSL/TLS security in the enterprise. Continue Reading

By

• Michael Cobb

Lessons learned: Network security implications of Shellshock

Shellshock had a tremendous impact on network security, affecting many popular vendors and products. Expert Kevin Beaver discusses what Shellshock means to network security, and the lessons that can be learned from the vulnerability. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC