Expert Advice: Page
Practical guidance from industry experts on Cybersecurity
-
How to use Core Shell SSH, the PuTTY alternative for macOS
Core Shell is a utility every Mac user who connects to remote resources needs to know. Learn about its exceptional capabilities for managing any number of SSH connections.
Damon Garn • Dec. 1, 2025 -
How to use GPG to encrypt and decrypt files
Learn how GPG encryption protects your data through authenticity, integrity and nonrepudiation. This guide covers installation and symmetric and asymmetric cryptography basics.
Damon Garn • Nov. 25, 2025 -
5 steps for a smooth SIEM implementation
SIEM migration doesn't have to be chaotic. Smart planning and phased deployment can prevent a rocky rollout and pave the way for a smooth transition. Here's your roadmap.
Karen Kent • Nov. 24, 2025 -
How to use Netcat: Commands and use cases
The versatile utility is small, powerful and gives security and network engineers a variety of ways to incorporate it as part of an overall security strategy.
Ed Moyle • Nov. 21, 2025 -
When to consider Kubernetes security posture management
Securely using Kubernetes to build, manage and automate application and infrastructure deployments is a growing challenge for security teams.
Dave Shackleford • Nov. 19, 2025 -
How to use Hashcat to recover passwords
This tutorial and accompanying video on using Hashcat for ethical password recovery covers installation, hash types, dictionary attacks and rule variations for security testing.
Rob Shapland • Nov. 18, 2025 -
What agentic AI means for cybersecurity
Agentic AI technology promises a more autonomous and proactive approach to protecting enterprise assets. But deploying tools that require less human intervention also carries risk.
Amy DeCarlo • Nov. 17, 2025 -
U.S. data privacy protection laws: 2026 guide
Privacy laws aim to prevent unauthorized data access, ensure owner consent for collection and provide rights to review and delete personal info.
Paul Kirvan • Nov. 12, 2025 -
CNAPP vs. CSPM: Comparing cloud security tools
CNAPP or CSPM? Understand the key differences between these cloud security tools to make an informed choice that aligns with your organization's maturity level.
Dave Shackleford • Nov. 10, 2025 -
To maximize their influence, CISOs need diverse skills
In many organizations today, when the CISO talks, the CEO and board listen. CISOs who successfully rise to the occasion have broad skillsets.
John Burke • Nov. 3, 2025 -
Browser detection and response fills gaps in security programs
BDR is the latest tool to address detection and response as more and more communication occurs over Edge, Chrome and their counterparts. But does your organization really need it?
Dave Shackleford • Nov. 3, 2025 -
How to write an information security policy, plus templates
Faced with multiplying security threats and complex IT environments, companies need comprehensive policies that detail how they will protect their systems and respond to attacks.
Paul Kirvan • Oct. 29, 2025 -
SIEM benefits and features in the modern SOC
Security information and event management has evolved significantly since it was first introduced 20 years ago. Today's SIEMs offer a wide range of capabilities.
Karen Kent • Oct. 23, 2025 -
Top 7 password hygiene tips and best practices
Passwords enable users to access important accounts and data, making them attractive targets to attackers, too. Follow these password hygiene tips to keep your organization safe.
Sharon Shea and Diana Kelley • Oct. 22, 2025 -
CSPM vs. DSPM: Complementary security posture tools
CSPM delivers important information on cloud configuration status. DSPM details the security posture of data, whether it's in the cloud or an on-premises environment.
Dave Shackleford • Oct. 21, 2025 -
7 top deception technology vendors for active defense
Once reserved for the most mature organizations, cyber deception technology is picking up steam on the ground and in practice. Here are seven platforms for CISOs to consider.
Karen Kent • Oct. 16, 2025 -
How to use Gophish to fortify security awareness training
Stop phishing attacks before they happen. Discover how Gophish simulates real threats to identify training gaps and strengthen employee awareness.
Damon Garn • Oct. 14, 2025 -
How CISOs can get out of security debt and why it matters
Like technical debt, security debt accumulates quickly, due to unpatched software, rushed security testing and poor visibility. When the bill comes due, it could mean a breach.
Ashwin Krishnan • Oct. 9, 2025 -
What CISOs should know about DeepSeek cybersecurity risks
DeepSeek poses significant risks to U.S. enterprises -- even those that don't greenlight it for internal use. CISOs should take steps to reduce the threat.
Jerald Murphy • Oct. 8, 2025 -
Top 15 IT security frameworks and standards explained
Several IT security frameworks and standards exist to help protect company data. Here's advice for choosing the right ones for your organization.
Paul Kirvan • Oct. 8, 2025 -
6 confidential computing use cases that secure data in use
Confidential computing bridges a critical security gap by encrypting data in use. Learn about its enterprise use cases, from AI protection to data sovereignty.
Ravi Das • Oct. 3, 2025 -
7 key types of application security testing
Modern application development moves at unprecedented speed. Is your security testing keeping pace so that apps are secure when they reach production?
Colin Domoney • Sept. 26, 2025 -
What to know about 5G security threats in the enterprise
Learn about key 5G security threats facing enterprises, plus practical defense strategies for CISOs.
Karen Kent • Sept. 26, 2025 -
7 API discovery best practices for complete visibility
Secure your API landscape with these API discovery best practices spanning the entire SDLC. Find hidden endpoints, audit integrations and monitor continuously.
Colin Domoney • Sept. 24, 2025 -
8 best practices for securing RESTful APIs
The REST architectural style helps applications communicate with each other. Be sure RESTful APIs have the protections necessary to keep attackers at bay.
Ravi Das • Sept. 22, 2025