Expert Advice: Page
Practical guidance from industry experts on Cybersecurity
-
Why organizations need cloud attack surface management
Cloud environments constantly change, expanding attack surfaces beyond traditional tools. Cloud ASM delivers continuous visibility to identify exposures, misconfigurations and risk.
Dave Shackleford • Feb. 6, 2026 -
Top open source and commercial threat intelligence feeds
Cybersecurity threat intelligence feeds provide critical data on attacks, including IPs, domains and malware hashes, helping teams detect and respond to threats effectively.
Karen Kent • Feb. 4, 2026 -
5 deepfake detection tools to protect enterprise users
Deepfakes are wreaking havoc worldwide -- and they're likely just getting started. To fight fire with fire, CISOs should consider AI-enabled deepfake detection tools.
Karen Kent • Jan. 30, 2026 -
CERT vs. CSIRT vs. SOC: What’s the difference?
What's in a name? In incident response parlance, there are subtle -- and sometimes confusing -- distinctions among a CERT, a CSIRT, a CIRT and a SOC.
Ed Moyle • Jan. 29, 2026 -
5 steps to approach BYOD compliance policies
BYOD endpoints are difficult to secure because IT does not own or preconfigure the device. Learn about policies and controls that help organizations stay compliant.
Will Kelly, Mike Chapple • Jan. 27, 2026 -
18 enterprise email security best practices for 2026
Safeguard your organization. Train employees to avoid password reuse, spot phishing attempts and encrypt messages, among other email security best practices.
Sharon Shea • Jan. 22, 2026 -
Use the CIA triad to shape security automation use cases
Automating IT security with the CIA triad framework helps improve scalability, reduce misconfigurations and enhance threat detection and remediation.
Damon Garn • Jan. 20, 2026 -
10 important incident response metrics and how to use them
In incident response, security teams can improve their work by knowing how long it takes to respond to and remediate threats. These are the key metrics to track.
John Burke • Jan. 15, 2026 -
Vibe coding security risks and how to mitigate them
Vibe coding with generative AI is transforming software development, accelerating innovation and introducing new security risks to manage.
Matthew Smith • Jan. 14, 2026 -
Deepfake phishing is here, but many enterprises are unprepared
Deepfake phishing attacks are on the rise, as attackers use AI to deceive and defraud end users and their employers. Learn what CISOs can do to protect their organizations.
Amy DeCarlo • Jan. 13, 2026 -
How to create an incident response playbook
Learn how to build actionable, repeatable incident response playbooks that guide your team through every step of handling cybersecurity events effectively.
Karen Kent • Jan. 9, 2026 -
CISO reporting structure key to strong cybersecurity outcomes
Find out which CISO reporting structure a cybersecurity expert recommends, based on objective security performance metrics from hundreds of organizations.
John Burke and Alissa Irei • Jan. 8, 2026 -
CISO’s guide to nonhuman identity security
Nonhuman identities are one of the fastest-growing yet least-governed access risks in the enterprise today. Learn how to address them.
Dave Shackleford • Jan. 7, 2026 -
Real-world AI voice cloning attack: A red teaming case study
Thanks to AI, social engineering campaigns are becoming more effective than ever. In this red team case study, see how voice cloning helped trick a seasoned business user.
Rob Shapland • Jan. 5, 2026 -
Top web app security vulnerabilities and how to mitigate them
These common web application vulnerabilities have been thorns in the side of IT security for years. They are not new -- and neither are their fixes.
Sharon Shea and Ravi Das • Dec. 29, 2025 -
2026 guide to digital forensics tools for enterprises
After a data breach, organizations and law enforcement need to understand what happened. These 10 digital forensics tools collect the key evidence required for an investigation.
Rob Shapland • Dec. 22, 2025 -
DevSecOps vs. SecDevOps: Which is better for your organization?
How far left should security shift? DevSecOps and SecDevOps both integrate security into DevOps but differ conceptually and practically. Learn which model suits your needs.
Matthew Smith • Dec. 18, 2025 -
How to detect a deepfake with visual clues and AI tools
Forewarned is forearmed, but too many employees don't realize how sophisticated deepfakes have become. Integrate these deepfake detection tips into security awareness training.
Alissa Irei and Andrew Froehlich • Dec. 17, 2025 -
Incident response: How to implement a communication plan
Communication is critical to an effective incident response plan. Here are best practices for communication planning and an editable template to help you get started.
Paul Kirvan • Dec. 16, 2025 -
Beyond the SBOM: What CISOs should know about CBOMs and HBOMs
SBOMs, CBOMs and HBOMS -- oh my! Learn how these bills of materials help manage supply chain risk and assess which of the three your organization needs.
Paul Kirvan and Alissa Irei • Dec. 11, 2025 -
Top data loss prevention tools for 2026
Discover essential features of enterprise DLP tools and explore six top offerings to protect sensitive data across endpoints, networks, and cloud services.
Karen Kent • Dec. 9, 2025 -
Guide to using digital twins for cybersecurity testing
The digital twin market is growing rapidly as more security teams use the technique to run what-if scenarios to determine if their enterprise networks are vulnerable.
Damon Garn • Dec. 8, 2025 -
12 key application security best practices
Developing applications involves many important practices, but one that might matter most is to be sure the team is addressing security at every stage of the SDLC.
Paul Kirvan • Dec. 4, 2025 -
What CISOs should know about SOC modernization
To achieve security outcomes that align with their organizations' risk appetites and business objectives, CISOs with struggling SOCs must consider upgrades. Learn more.
Paul Kirvan • Dec. 4, 2025 -
How to use the ZMap network scanner
ZMap provides security admins with valuable information about a network's structure and functionality. But it can also generate a DoS situation if it isn't managed correctly.
Damon Garn • Dec. 2, 2025