Expert Advice: Page
Practical guidance from industry experts on Cybersecurity
-
12 common types of malware attacks and how to prevent them
More than one billion active malware programs exist worldwide. Is your organization prepared to prevent these 12 types of malware attacks?
Sharon Shea • June 10, 2025 -
Symmetric vs. asymmetric encryption: Understand key differences
Explore the differences between symmetric vs. asymmetric encryption, including how they work and common algorithms, as well as their pros and cons.
Michael Cobb • June 10, 2025 -
Account lockout policy: Setup and best practices explained
Organizations must carefully balance security and UX when implementing account lockout policies.
Karen Kent • June 3, 2025 -
The DOGE effect on cybersecurity: Efficiency vs. risk
The DOGE effect on security is a complex issue. Pursuit of efficiency might be a legitimate goal, but experts caution it can conflict with cybersecurity defenses.
Staff report • June 2, 2025 -
Security risks of AI-generated code and how to manage them
Application security teams are understandably worried about how developers use GenAI and LLMs to create code. But it's not all doom and gloom; GenAI can help secure code, too.
Colin Domoney • May 29, 2025 -
How to choose a cloud key management service
Amazon, Microsoft, Google, Oracle and cloud-agnostic vendors offer cloud key management services. Read up on what each offers and how to choose the right KMS for your company.
Dave Shackleford • May 21, 2025 -
How to create a remote access policy, with template
Remote work, while beneficial, presents numerous security risks. Help keep your organization's systems safe with a remote access policy.
Paul Kirvan • May 20, 2025 -
Best practices for board-level cybersecurity oversight
Corporate boards must play an increasingly active role in overseeing cybersecurity strategies. Here's what they need to know, from SEC disclosure requirements to best practices.
Jerald Murphy • May 20, 2025 -
AI model theft: Risk and mitigation in the digital era
Enterprises are spending big bucks on developing and training proprietary AI models. But cybercriminals are also eyeing this valuable intellectual property.
Amy DeCarlo • May 19, 2025 -
9 IoT training certifications to take your next career step
IoT training certifications offering skills in IoT development, networking and security can give tech experts an advantage, especially when IoT skills are in high demand.
Mary Shacklett and Andy Patrizio • May 13, 2025 -
How to use arpwatch to monitor network changes
The arpwatch utility flags administrators in the event of any unexpected changes or unauthorized devices, which could signal ARP spoofing or credential-harvesting attacks.
Damon Garn • May 7, 2025 -
10 leading open source application security testing tools
Security testing enables companies to discover and remediate vulnerabilities and weaknesses in apps before malicious actors find them.
Colin Domoney • May 7, 2025 -
15 of the biggest ransomware attacks in history
From attacks on private organizations and manufacturers to healthcare organizations and even entire countries, ransomware has done extensive damage in recent years.
Mary Pratt • May 2, 2025 -
How payment tokenization works and why it’s important
Payment tokenization benefits merchants and customers alike. It not only helps protect financial transaction data, but also improves UX.
Ravi Das • April 28, 2025 -
7 stages of the ransomware lifecycle
It can be nearly impossible to predict if or how a ransomware group will target an organization, but there are knowable stages of a ransomware attack.
Char Sample and Andrew Froehlich • April 28, 2025 -
DLP vs. DSPM: What’s the difference?
Data loss prevention and data security posture management tools give organizations powerful features to protect data in the cloud and on-premises.
Ravi Das • April 24, 2025 -
How to create a CBOM for quantum readiness
Quantum is on the horizon -- is your organization ready to migrate to post-quantum cryptographic algorithms? Make a CBOM to understand where risky encryption algorithms are used.
Rob Shapland • April 21, 2025 -
Top 5 ransomware attack vectors and how to avoid them
Protecting your organization against ransomware attack entryways could mean the difference between staying safe or falling victim to a devastating breach.
Ed Moyle and Diana Kelley • April 21, 2025 -
Tips to find cyber insurance coverage in 2025
Most businesses have a form of cyber insurance, either through cyber liability and data breach endorsements in traditional business policies or through standalone cyber policies.
Kathleen Richards • April 17, 2025 -
How to effectively respond to a ransomware attack
Does your organization know what to do if its systems are suddenly struck by a ransomware attack? To be ready, prepare your ransomware response well ahead of time.
Dave Shackleford • April 15, 2025 -
How to ensure OT secure remote access and prevent attacks
OT systems face threats from attackers targeting their remote access capabilities. Segmenting networks is one important step. Learn other ways to safeguard your OT systems.
Amanda Scheldt • April 15, 2025 -
How to conduct ransomware awareness training for employees
As your organization's first line of defense, hold regular employee training on how to prevent, detect and respond to ransomware attacks.
Sharon Shea • April 14, 2025 -
How to create custom sudo configuration files in /etc/sudoers
Sudo offers administrators a lot of flexibility. Creating custom sudo configurations can go a long way toward easing management and service upgrade challenges.
Damon Garn • April 14, 2025 -
How to prevent and protect against ransomware
Organizations sometimes learn difficult lessons about gaps in their cybersecurity defenses. Here's what to know about ransomware preparation, detection, response and recovery.
Dave Shackleford • April 9, 2025 -
Ransomware payments: Considerations before paying
To pay or not to pay -- that's the question after a ransomware attack. Law enforcement recommends against it, but that doesn't stop some companies from paying up.
Kyle Johnson • April 8, 2025