New & Notable
News
Max-severity GitLab flaw lets attackers run code on servers
A high-impact GitLab flaw lets unauthenticated attackers run code on self-managed servers. Every release since 2014 is affected.
News
PHP2Shell disclosure unravels after leaks forced early patch drop
Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.
Manage
Just-in-time access: A CISO's guide to reducing standing privilege
Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.
News
PHP2Shell: 22M exposed servers at risk as emergency patches released
AI gave defenders a head start, but PHP2Shell has sparked a chaotic race against automated exploits across 22 million vulnerable servers.
Sponsored Sites
-
Network and Security
The Future of Networking, Today.
Experience a revolution in network security with Secure Network Transformation solutions. Learn how TATA Communications’ comprehensive approach ensures unparalleled protection, performance, and flexibility for your network infrastructure.
-
AI & Emerging Tech
Verizon 5G Connected Laptops
A survey of 438 companies reveals a widening gap between AI adoption and network security, with 95% concerned about risks outside the office. While 5G connected laptops may offer a path forward, many enterprises have dormant 5G hardware.
-
Security
Leading the Way in Corrections Technology
From creating safer facilities to supporting stronger reentry outcomes, Aventiv, and its family of brands: Securus Technologies, Securus Monitoring and JPay, delivers technology solutions that safely and securely transform corrections environments for everyone.
Find Solutions For Your Project
-
Evaluate
AI in the SOC: 5 high-value use cases for enterprise SOCs
AI helps enterprise SOCs prioritize alerts, speed up investigations, improve threat hunting, streamline incident response and reporting, and manage risks with human oversight.
-
How AI threat detection is transforming enterprise cybersecurity
-
Best practices to evaluate LLM-based AI security tools
-
The CISO role isn't universal: 5 industry perspectives
-
-
Problem Solve
Just-in-time access: A CISO's guide to reducing standing privilege
Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.
-
5 cybersecurity training program mistakes most companies make
-
CIRCIA reporting deadline puts OT data integrity under the microscope
-
Beyond Arup: CISOs combat escalating deepfake fraud
-
-
Manage
Cloud repatriation: What CISOs need to know
Moving workloads off the public cloud can offer greater control over costs and data, but it also brings new security responsibilities and operational demands.
-
How to build an effective cybersecurity awareness program
-
White-glove security training closes executive vulnerability gap
-
When a critical supplier gets breached: CISO's response guide
-
Cybersecurity Basics
-
Get Started
How to conduct a cyber-resilience assessment
Regularly reviewing cybersecurity plans and procedures helps organizations prepare for cyberattacks. This checklist outlines key steps for assessing cyber resilience.
-
Get Started
How to build a successful security champions program
Security champions integrate security into daily team decisions. Learn who should be a champion and how to establish an effective program.
-
Get Started
Rethink Cybersecurity Awareness Month: 4 different approaches
Instead of measuring Cybersecurity Awareness Month by training completion, use October to fix problems, eliminate risk, test critical capabilities and drive accountability.
Multimedia
Vendor Resources
- Cyber Resilience In Action –Research Content
- Cyber Resilience In Action –Research Content
- Dell PowerProtect Data Domain Security Omdia Analyst Report –Analyst Report
-
News
View All -
Threat Detection & Incident Response
Max-severity GitLab flaw lets attackers run code on servers
A high-impact GitLab flaw lets unauthenticated attackers run code on self-managed servers. Every release since 2014 is affected.
-
Threats, Cyberattacks & Vulnerabilities
PHP2Shell disclosure unravels after leaks forced early patch drop
Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.
-
Threats, Cyberattacks & Vulnerabilities
PHP2Shell: 22M exposed servers at risk as emergency patches released
AI gave defenders a head start, but PHP2Shell has sparked a chaotic race against automated exploits across 22 million vulnerable servers.
Cybersecurity Definitions
- What is incident response? A complete guide
- What is identity and access management? Guide to IAM
- What is data masking?
- What is antivirus software?
- What is a stealth virus and how does it work?
- What is file integrity monitoring (FIM)?
- What is information security (infosec)?
- What is governance, risk and compliance (GRC)?