Features

Features

• Vulnerability management needs an update for the AI era

  AI accelerates exploit timelines from months to hours. Organizations must shift from patch-all to risk-based prioritization using exploitability metrics.  Continue Reading

• The AI vulnerability storm is here: Is your security program ready?

  AI platforms are poised to accelerate vulnerability discovery and exploitation faster than humans can manage. It's time for CISOs to rethink their security strategies.  Continue Reading

• How agentic AI threat intelligence aids NGO cyber defense: Case study

  NGOs often lack the resources and expertise to defend against modern threat actors. Learn how one nonprofit is harnessing agentic AI threat intelligence to flip the script.  Continue Reading

• Florida public sector training on SimSpace cyber range: Case study

  Cyber ranges, once the domain of national defense agencies, are becoming more widely accessible. In the public sector, the state of Florida is leading the charge.  Continue Reading

• The prosecution gap: Why cybercrimes go unpunished

  Are cybersecurity criminals simply acting with impunity? It sometimes feels like it. Learn what defenders need to know and what investigators are doing about it.  Continue Reading

• EO 14390 raises stakes for enterprise cybersecurity

  Reframing cybercrime as a national security issue, EO 14390 could lead to stronger links between government and the private sector. Find out what it means for enterprise security.  Continue Reading

• Inside business email compromise attacks: Real-world examples

  From tech giants to nonprofits, no organization is immune to trust-eroding business email compromise attacks. Learn more about BEC scams and the fallout when employees get tricked.  Continue Reading

• Security platformization vs. best-of-breed: Risks and benefits

  With tool sprawl pushing costs and complexity to a breaking point, the choice between unified security platforms and best-of-breed tools has never been more critical.  Continue Reading

• Is SOAR dead or alive? Sort of

  Orchestration and automation capabilities remain critical elements in effective cyber defense. Just don't expect to hear much about SOAR anymore.  Continue Reading

• Cybersecurity in the age of AI means bigger, faster threats

  Cybersecurity professionals at SecureWorld Boston had a lot to say about identity management, AI threats and the challenges they face in achieving real-time visibility.  Continue Reading

• How to improve the SOC analyst experience -- and why it matters

  Burned-out security analysts miss threats, take longer to investigate incidents and are more likely to quit. Here's how CISOs can improve the SOC analyst experience.  Continue Reading

• SIEM isn't dead, its place in the SOC is just evolving

  Despite the predictions that SIEM is going away, its role is actually evolving. Learn why SIEM tools remain essential to enterprise security operations.  Continue Reading

• Should a CISO have an MBA?

  Cybersecurity leaders are often asked to weigh in more frequently on business decisions. This could give MBA-holding CISOs a more visible seat at the table.  Continue Reading

• LLM firewalls emerge as a new AI security layer

  The race by organizations to AI-enable their operations and business workflows is exposing them to new risks that AI firewalls aim to address.  Continue Reading

• How to build an incident response plan, with examples, template

  Threats from cyberattacks continue to grow in frequency and severity. Considering the potential disruptions from such events, an organization needs an incident response plan.  Continue Reading

• ASU's CISO: AI craze is a strategic opportunity for security

  All eyes in the C-suite are on AI, and Arizona State University's CISO is seizing the moment. Learn how AI is solving problems that cybersecurity has been flagging for years.  Continue Reading

• How CISOs can balance AI innovation and security risk

  AI represents a powerful new tool for cybersecurity professionals, but the technology is not without risk. Discover what CISOs need to know when deciding how to use AI.  Continue Reading

• Top 7 reasons incident response plans fail

  Incident response plans can fall apart when faced with real-world security events. Learn about the gaps that can lead to failure and how to avoid them.  Continue Reading

• 10 types of information security threats for IT teams

  Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them.  Continue Reading

• 10 must-have security technologies in 2026

  Discover the top security technologies for 2026, from AI-enabled tools to quantum-safe protocols, as CISOs brace for evolving cyberthreats and attack surfaces.  Continue Reading

• Cybersecurity conferences to attend in 2026

  Discover the top cybersecurity conferences of 2026 to sharpen skills, network with peers, learn the latest industry trends and stay ahead of emerging threats.  Continue Reading

• Experts weigh in on securing AI effectively

  Using AI comes with security risks. Learn what the top attack vectors and privacy threats are, then discover how to mitigate them through proper strategy, monitoring and more.  Continue Reading

• How to become a bug bounty hunter

  With the right strategy, tools and skills, software testers and security researchers can earn extra income as bug bounty hunters.  Continue Reading

• How AI threat detection is transforming enterprise cybersecurity

  AI-powered threat detection transforms cybersecurity by using machine learning to analyze network traffic, user behaviors and data access patterns.  Continue Reading

• 4 lessons in the new era of AI-enabled cybercrime

  Cyberattacks have evolved rapidly as GenAI use has become more widespread. An RSAC Conference 2025 panel shared what they've learned over the past two years.  Continue Reading

• QR code phishing: 14 quishing prevention tips

  Quishing is an offputting word for an on-the-rise attack method. Learn how to defend against it.  Continue Reading

• 3 types of deepfake detection technology and how they work

  Think you're talking to your boss on Zoom? You might want to think again. Deepfake technology has already cost enterprises millions of dollars. Here's how to fight fire with fire.  Continue Reading

• Incident response for web application attacks

  Web app security is like learning to ride a bike -- expect to struggle before getting it right. But don't be disheartened; learn from prior incidents to improve controls.  Continue Reading

• The mystery of the $75M ransom payment to Dark Angels

  The Dark Angels gang stole 100 TB of data from a Fortune 50 company last year for a record-setting ransom payment. But the victim organization still hasn't disclosed those details.  Continue Reading

• Navigate the 2025 threat landscape with expert insights

  AI technology and company employees can serve as both gateways and buffers against cyberthreats. Learn more from expert thought leaders on how to protect your environment in 2025.  Continue Reading

• How to configure and customize Kali Linux settings

  Learning how to use Kali Linux for ethical hacking and penetration testing? Read step by step how to configure and customize the distribution.  Continue Reading

• Types of cybersecurity controls and how to place them

  A unilateral cybersecurity approach is ineffective in today's threat landscape. Learn why organizations should implement security controls based on the significance of each asset.  Continue Reading

• Equipment to include in a computer forensic toolkit

  Computer forensic investigators require more than software to do their job. Learn what equipment constitutes a complete computer forensic toolkit.  Continue Reading

• 'Defunct' DOJ ransomware task force raises questions, concerns

  A report from the Office of the Inspector General reviewed the U.S. Department of Justice's efforts against ransomware and found its task force was largely ineffective.  Continue Reading

• Infosec experts detail widespread Telegram abuse

  Cybersecurity vendors say threat activity on Telegram has grown rapidly in recent years, and they don't expect the arrest of founder and CEO Pavel Durov to change that trend.  Continue Reading

• How AI-driven SOC tech eased alert fatigue: Case study

  Alert fatigue is real, and it can cause big problems in the SOC. Learn how generative AI can improve security outcomes and reduce analysts' frustration in this case study.  Continue Reading

• How AI-driven patching could transform cybersecurity

  At RSAC 2024, a Google researcher described how the search giant has already seen modest but significant success using generative AI to patch vulnerabilities.  Continue Reading

• Lessons learned from high-profile data breaches

  Equifax. Colonial Pipeline. Sony. Target. All are high-profile data breaches, and all offer key lessons to learn that prevent your organization from falling victim to an attack.  Continue Reading

• Why the Keitaro TDS keeps causing security headaches

  Keitaro insists it is on the side of the law, but threat actors continue to flock to the software company's traffic distribution system to redirect users to malicious domains.  Continue Reading

• Infosec pros weigh in on proposed ransomware payment bans

  Whether for or against a payment ban, security professionals are concerned regulations could negatively affect victims and result in fewer incident disclosures.  Continue Reading

• Top benefits and challenges of SOAR tools

  To ensure successful adoption, IT leaders need to understand the benefits of SOAR tools, as well as potential disadvantages. Explore pros, cons and how to measure SOAR success.  Continue Reading

• Top incident response service providers, vendors and software

  Get help deciding between using in-house incident response software or outsourcing to an incident response service provider, and review a list of leading vendor options.  Continue Reading

• How to create a CSIRT: 10 best practices

  The time to organize and train a CSIRT is long before a security incident occurs. Certain steps should be followed to create an effective, cross-functional team.  Continue Reading

• 10 types of security incidents and how to prevent them

  Cyberattacks are more varied and numerous than ever. Learn the key signs of common security incidents and how to respond to keep systems and data safe.  Continue Reading

• How to fix the top 5 cybersecurity vulnerabilities

  Check out how to fix five top cybersecurity vulnerabilities to prevent data loss from poor endpoint security, ineffective network monitoring, weak authentication and other issues.  Continue Reading

• Top incident response tools: How to choose and use them

  The OODA loop helps organizations throughout the incident response process, giving insight into the incident response tools needed to detect and respond to security events.  Continue Reading

• Top 30 incident response interview questions

  Job interviews are nerve-wracking, but preparation can minimize jitters and position you to land the role. Get started with these incident response interview questions and answers.  Continue Reading

• How to become an incident responder: Requirements and more

  Incident response is a growth area that provides career advancement options and a good salary. Here's an in-depth look at job requirements, salaries and available certifications.  Continue Reading

• 10 of the biggest zero-day attacks of 2023

  There were many zero-day vulnerabilities exploited in the wild in 2023. Here's a look at 10 of the most notable and damaging zero-day attacks last year.  Continue Reading

• How EDR systems detect malicious activity

  Endpoint detection and response tools help SOCs separate benign events from malicious activity. Learn how this EDR function works.  Continue Reading

• Security posture management a huge challenge for IT pros

  Enterprise Strategy Group's John Oltsik explains why executing security hygiene and posture management at scale remains an uphill battle for organizations, despite automation.  Continue Reading

• How to create a SOAR playbook in Microsoft Sentinel

  Using automation through tools such as SOAR and SIEM can improve incident response alert efficiency. One automated feature analysts can use is the SOAR playbook.  Continue Reading

• How SOAR helps improve MTTD and MTTR metrics

  By automating initial incident response tasks, SOAR can help SOC analysts improve MTTD and MTTR metrics and ensure they focus on true positive alerts.  Continue Reading

• How to use dynamic reverse engineering for embedded devices

  In this excerpt from 'Practical Hardware Pentesting,' read step-by-step instructions on how to find vulnerabilities on IoT devices using dynamic reverse engineering.  Continue Reading

• Adopt embedded penetration testing to keep IoT devices secure

  Regular embedded penetration testing can help discover vulnerabilities before attackers do. The author of 'Practical Hardware Pentesting' explains.  Continue Reading

• Why using ransomware negotiation services is worth a try

  If stakeholders decide to pay ransom demands, using a ransomware negotiation service could improve the situation's outcome and lower the payout.  Continue Reading

• Ransomware case study: Recovery can be painful

  In ransomware attacks, backups can save the day and the data. Even so, recovery can still be expensive and painful, depending on the approach. Learn more in this case study.  Continue Reading

• Wi-Fi AP placement best practices and security policies

  From a security standpoint, Wi-Fi network designers should consider the physical and logical placement of APs, as well as management, segmentation and rogue devices.  Continue Reading

• Manage security posture with Microsoft Defender for Endpoint

  Organizations need to implement security posture management to ensure their cybersecurity strategy can address malicious actions inside and out.  Continue Reading

• How to use Wfuzz to find web application vulnerabilities

  By learning how to use Wfuzz for web application fuzz testing, bug bounty hunters can automate vulnerability discovery. Learn more in this excerpt from 'Bug Bounty Bootcamp.'  Continue Reading

• The potential danger of the new Google .zip top-level domain

  How much should the average end user be concerned about the new .zip and .mov TLDs? They aren't as bad as some make them out to be, but it's still worth doing something about them.  Continue Reading

• How to start handling Azure network security

  Before adopting Microsoft Azure, it's important to consider how to secure the cloud network. That's where network security groups and Azure Firewall come in.  Continue Reading

• Studies show ransomware has already caused patient deaths

  No patient deaths have been definitively attributed to cyber attacks on hospitals, but some infosec experts say that statistical evidence shows a different, grim reality.  Continue Reading

• It's time to harden AI and ML for cybersecurity

  An RSA Conference panel said that now is the time to become proactive against AI and ML adversarial attacks -- before they become more sophisticated.  Continue Reading

• How Target built its DevSecOps culture using psychology

  Building a healthy DevSecOps culture isn't easy. Learn how Target used organizational psychology to get development and application security teams on the same page.  Continue Reading

• Practice Microsoft SC-100 exam questions with answers

  Use these practice multiple-choice questions, with answers, to assess your knowledge of the Microsoft Cybersecurity Architect exam.  Continue Reading

• ICS kill chain: Adapting the cyber kill chain to ICS environments

  As IT/OT convergence continues to gain traction, industrial control system security cannot be ignored. Performing pen tests based on the ICS Kill Chain can help.  Continue Reading

• An intro to the IDMZ, the demilitarized zone for ICSes

  Setting up an IDMZ -- a demilitarized zone between enterprise and industrial networks -- can prevent operational environments from becoming compromised by IT threats.  Continue Reading

• Reinforce industrial control system security with ICS monitoring

  Monitoring an industrial control system environment isn't that different from monitoring a traditional IT environment, but there are some considerations to keep in mind.  Continue Reading

• Why medical device vulnerabilities are hard to prioritize

  Vulnerabilities in critical medical devices could lead to loss of life. But opinions are mixed on how serious the risk is to patient safety and how best to address the flaws.  Continue Reading

• Publicly disclosed U.S. ransomware attacks in 2023

  TechTarget Editorial's ransomware database collects public disclosures, notifications and confirmed reports of attacks against U.S. organizations each month.  Continue Reading

• SMS pumping attacks and how to mitigate them

  Online forms that use SMS can be costly to organizations if they are vulnerable to SMS pumping attacks. Use the following methods to mitigate or prevent this fraud-based attack.  Continue Reading

• How to apply and edit Wireshark display filters

  Wireshark display filters enable users to narrow the scope of a network traffic scan. Use this tutorial to apply and edit display filters to make detailed network sniffing easier.  Continue Reading

• Customize workflows with Wireshark profiles

  Wireshark has a variety of uses, which is why creating multiple personalized Wireshark profiles is important. Learn about Wireshark profiles, how to share them and more.  Continue Reading

• Inside the PEIR purple teaming model

  Want to try purple team exercises but aren't sure how to do so? Try the 'Prepare, Execute, Identify and Remediate' purple teaming model.  Continue Reading

• Understanding purple teaming benefits and challenges

  Blue teams and red teams are coming together to form purple teams to improve their organization's security posture. What does this mean for the rivals? And how does it work?  Continue Reading

• No relief in sight for ransomware attacks on hospitals

  Despite being off limits for some hackers, hospitals continue to be lucrative targets for ransomware groups because of their valuable data and higher rate of paying ransoms.  Continue Reading

• Windows security tips for the enterprise

  Securing a Windows environment is no easy feat. Read up on low-hanging fruit to quickly address, as well as top tips from two security practitioners to get started.  Continue Reading

• 12 types of wireless network attacks and how to prevent them

  From packet sniffing and rogue access points to spoofing attacks and encryption cracking, learn about common wireless network attacks and how to prevent them.  Continue Reading

• WLAN security: Best practices for wireless network security

  Follow these wireless network security best practices to ensure your company's WLAN remains protected against the top threats and vulnerabilities.  Continue Reading

• Top 10 pen testing interview questions with answers

  Are you pursuing a career in pen testing? Prepare with this list of 10 pen testing interview questions and answers created by three security experts.  Continue Reading

• Top IT security manager interview questions

  Are you looking for a leadership role in cybersecurity? Three security experts offer their advice on how to answer the most common IT security manager interview questions.  Continue Reading

• Why Kali Linux is the go-to distribution for penetration testing

  Discover why penetration testers prefer to use the Kali Linux distribution for offensive security, from collecting useful tools together to being usable from multiple devices.  Continue Reading

• LinkedIn scams, fake Instagram accounts hit businesses, execs

  Even the most secure business and executive social media accounts that have strong passwords and multifactor authentication are vulnerable to cloning schemes.  Continue Reading

• How to prepare for the CompTIA CASP+ exam

  Are you pursuing the CompTIA Advanced Security Practitioner certification? The author of a CASP+ cert guide offers advice on how to prepare for the exam.  Continue Reading

• Ethical hacking: How to conduct a Sticky Keys hack

  Physical security is often overlooked by cybersecurity teams. Learn about physical cybersecurity attacks in step-by-step instruction on how to conduct a Windows Sticky Keys hack.  Continue Reading

• Importance of enterprise endpoint security during a pandemic

  Enterprises often focus greatly on communications security and less on endpoint security. Review the importance of enterprise endpoint security and best practices to implement it.  Continue Reading

• Clearing up cybersecurity architecture confusion, challenges

  There's no lack of cybersecurity frameworks, but there is a lack of resources to help small and midsize organizations build a cybersecurity architecture -- until now.  Continue Reading

• A 'CISO evolution' means connecting business value to security

  As cybersecurity has changed, so has the CISO role. 'The CISO Evolution: Business Knowledge for Cybersecurity Executives' aims to help security leaders succeed in the C-suite.  Continue Reading

• An enterprise bug bounty program vs. VDP: Which is better?

  Creating a bug bounty or vulnerability disclosure program? Learn which option might prove more useful, and get tips on getting a program off the ground.  Continue Reading

• Publicly disclosed U.S. ransomware attacks database

  Each day SearchSecurity looks for every publicly available instance of a ransomware attack in the U.S. and compiles this data into a list to keep readers updated on recent threats.  Continue Reading

• How to design architecture for enterprise wireless security

  Learn about a five-phase design methodology that will help your company plan for and create an enterprise wireless security architecture.  Continue Reading

• Implementing wireless security in the enterprise

  Learn how to properly secure your enterprise wireless network while considering UX, zero trust and commonly overlooked architectural mistakes.  Continue Reading

• Case study: Scaling DevSecOps at Comcast

  Comcast's DevSecOps transformation started small but quickly gained steam, resulting in 85% fewer security incidents in production. Learn more in this case study.  Continue Reading

• Case study: Why it's difficult to attribute nation-state attacks

  If two attacks look similar, don't assume they're from the same attacker. It's difficult to attribute nation-state attacks, as evidenced by the notorious 2016 Odinaff malware.  Continue Reading

• The importance of HR's role in cybersecurity

  HR teams must keep security top of mind when hiring and onboarding employees and enforcing data privacy policies. Get advice on the procedures and mechanisms to do so.  Continue Reading

• Cryptocurrency cyber attacks on the rise as industry expands

  Consumers, businesses and governments are finding new ways to use cryptocurrency, but a recent string of cyber attacks has highlighted security risks and shortcomings.  Continue Reading

• Tips for creating a cybersecurity resume

  Resumes help candidates leave an impression on potential employers. But did you know one resume often isn't enough? Learn this and other tips for creating a cybersecurity resume.  Continue Reading

• Implement API rate limiting to reduce attack surfaces

  Rate limiting can help developers prevent APIs from being overwhelmed with requests, thus preventing denial-of-service attacks. Learn how to implement rate limiting here.  Continue Reading

• Pros and cons of manual vs. automated penetration testing

  Automated penetration testing capabilities continue to improve, but how do they compare to manual pen testing? Get help finding which is a better fit for your organization.  Continue Reading