New & Notable
News
Max-severity GitLab flaw lets attackers run code on servers
A high-impact GitLab flaw lets unauthenticated attackers run code on self-managed servers. Every release since 2014 is affected.
News
PHP2Shell disclosure unravels after leaks forced early patch drop
Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.
Manage
Just-in-time access: A CISO's guide to reducing standing privilege
Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.
News
PHP2Shell: 22M exposed servers at risk as emergency patches released
AI gave defenders a head start, but PHP2Shell has sparked a chaotic race against automated exploits across 22 million vulnerable servers.
Sponsored Sites
-
AI & Emerging Tech
SHI + Google - Gemini SMB Adoption Campaign
Insights into how SHI and Google Cloud provide proven implementation strategies for SMBs to successfully transform their operations and achieve measurable ROI through a strategic enterprise AI approach.
-
Artificial Intelligence
Intel & Red Hat: Leading the way in Enterprise AI
Combining Intel’s silicon experience with Red Hat’s software innovation to enable AI-driven hybrid multi-cloud solutions.
-
Security
One Identity | Integrated Cybersecurity for all Your Identities
Learn how One Identity provides integrated cybersecurity solutions, delivering a truly unified identity platform and streamlining management across on-premises and cloud resources.
Find Solutions For Your Project
-
Evaluate
AI in the SOC: 5 high-value use cases for enterprise SOCs
AI helps enterprise SOCs prioritize alerts, speed up investigations, improve threat hunting, streamline incident response and reporting, and manage risks with human oversight.
-
How AI threat detection is transforming enterprise cybersecurity
-
Best practices to evaluate LLM-based AI security tools
-
The CISO role isn't universal: 5 industry perspectives
-
-
Problem Solve
Just-in-time access: A CISO's guide to reducing standing privilege
Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.
-
5 cybersecurity training program mistakes most companies make
-
CIRCIA reporting deadline puts OT data integrity under the microscope
-
Beyond Arup: CISOs combat escalating deepfake fraud
-
-
Manage
Help desk deepfakes: Why CISOs must rethink verification
Protecting the help desk from deepfake threats doesn't necessarily mean deploying the latest detection tools. Prioritizing policy over detection can stop deepfakes in their tracks.
-
Cloud repatriation: What CISOs need to know
-
How to build an effective cybersecurity awareness program
-
White-glove security training closes executive vulnerability gap
-
Cybersecurity Basics
-
Get Started
How to conduct a cyber-resilience assessment
Regularly reviewing cybersecurity plans and procedures helps organizations prepare for cyberattacks. This checklist outlines key steps for assessing cyber resilience.
-
Get Started
How to build a successful security champions program
Security champions integrate security into daily team decisions. Learn who should be a champion and how to establish an effective program.
-
Get Started
Rethink Cybersecurity Awareness Month: 4 different approaches
Instead of measuring Cybersecurity Awareness Month by training completion, use October to fix problems, eliminate risk, test critical capabilities and drive accountability.
Multimedia
Vendor Resources
- Cyber Resilience In Action –Research Content
- Cyber Resilience In Action –Research Content
- Dell PowerProtect Data Domain Security Omdia Analyst Report –Analyst Report
-
News
View All -
Threat Detection & Incident Response
Max-severity GitLab flaw lets attackers run code on servers
A high-impact GitLab flaw lets unauthenticated attackers run code on self-managed servers. Every release since 2014 is affected.
-
Threats, Cyberattacks & Vulnerabilities
PHP2Shell disclosure unravels after leaks forced early patch drop
Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.
-
Threats, Cyberattacks & Vulnerabilities
PHP2Shell: 22M exposed servers at risk as emergency patches released
AI gave defenders a head start, but PHP2Shell has sparked a chaotic race against automated exploits across 22 million vulnerable servers.
Cybersecurity Definitions
- What is incident response? A complete guide
- What is identity and access management? Guide to IAM
- What is data masking?
- What is antivirus software?
- What is a stealth virus and how does it work?
- What is file integrity monitoring (FIM)?
- What is information security (infosec)?
- What is governance, risk and compliance (GRC)?