Expert Advice: Page
Practical guidance from industry experts on Cybersecurity
-
Brand Experience Team/TechTarget
How to use arp-scan to discover network hosts
An arp-scan delivers a fast, focused scan of an organization's local subnet. It is not fancy, but it's an easily controlled method to learn exactly what's connected.
Damon Garn • Sept. 17, 2025 -
Brand Experience Team/TechTarget
Positive vs. negative security: Choosing an AppSec model
Understand the benefits and challenges of positive and negative security models to determine how to best protect web apps in your organization.
Paul Kirvan • Sept. 11, 2025 -
Brand Experience Team/TechTarget
CISO’s guide to security vendor consolidation
Organizations adopt a multitude of disparate security tools over time, which often results in tool overlap and added complexity for protecting systems and data.
Dave Shackleford • Sept. 10, 2025 -
Brand Experience Team/TechTarget
Cyber Trust Mark certification and how IoT devices will qualify
The U.S. Cyber Trust Mark aims to validate IoT devices that meet a certain security threshold. Explore key NIST recommendations informing certification requirements.
Karen Kent and Alissa Irei • Sept. 4, 2025 -
Brand Experience Team/TechTarget
What is Triple DES and why is it disallowed?
Triple DES offered 112-bit security through its three-step encryption process, but NIST deprecated it in 2018 and disallowed its use after 2023.
Michael Cobb • Sept. 3, 2025 -
Brand Experience Team/TechTarget
How to use Masscan for high-speed port scanning
Masscan delivers a quick assessment of open ports and listening services, but it helps to pair the utility with other scanning tools, such as Nmap.
Damon Garn • Aug. 27, 2025 -
Brand Experience Team/TechTarget
How AI malware works and how to defend against it
AI malware is evolving faster than traditional defenses. Learn how attackers weaponize AI and how organizations can implement effective countermeasures.
Matthew Smith and Sharon Shea • Aug. 27, 2025 -
Brand Experience Team/TechTarget
How to use Netdiscover to map and troubleshoot networks
Read installation info, basic commands and practical applications for Netdiscover, an ARP-based tool that identifies live hosts, detects unauthorized devices and enhances security.
Damon Garn • Aug. 26, 2025 -
Brand Experience Team/TechTarget
Red teams and AI: 5 ways to use LLMs for penetration testing
Red teams can harness the power of LLMs for penetration testing. From session analysis to payload crafting, discover five ways AI transforms security testing.
Ed Moyle • Aug. 25, 2025 -
Brand Experience Team/TechTarget
Red vs. blue vs. purple team: What are the differences?
Red teams attack, blue teams defend and purple teams facilitate collaboration. Together, they strengthen cybersecurity through simulated exercises and knowledge sharing.
Sharon Shea • Aug. 22, 2025 -
Brand Experience Team/TechTarget
Use an AI gateway to secure AI models and applications
AI gateways provide critical security controls for enterprise AI applications, preventing data loss while managing access.
Amy DeCarlo • Aug. 20, 2025 -
Brand Experience Team/TechTarget
Use ssh-keygen to generate new key pairs: A full tutorial
Use ssh-keygen to create new key pairs, copy host keys, use a single login key pair for multiple hosts, retrieve key fingerprints and more.
Damon Garn • Aug. 19, 2025 -
Brand Experience Team/TechTarget
Shift left with these 11 DevSecOps best practices
By starting small, automating selectively and making security the easiest path forward, organizations can improve DevOps security without sacrificing development speed.
Colin Domoney • Aug. 18, 2025 -
Brand Experience Team/TechTarget
How to write a data classification policy, with template
Data classification policies help organizations categorize, secure and manage sensitive information while maintaining regulatory compliance and reducing breach risks.
Paul Kirvan • Aug. 15, 2025 -
Brand Experience Team/TechTarget
SSH tunneling explained: A tutorial on SSH port forwarding
SSH tunneling creates secure encrypted connections through private and untrusted networks, enabling remote access, bypassing restrictions and protecting sensitive data transfers.
Damon Garn • Aug. 15, 2025 -
Brand Experience Team/TechTarget
How to prevent DoS attacks and what to do if they happen
The worst DoS attacks are like digital tsunamis that put critical business operations at risk. Learn how they work, ways to stop them and how systems can withstand the flood.
Rob Shapland • Aug. 8, 2025 -
Brand Experience Team/TechTarget
Prevent and manage cloud shadow AI with policies and tools
Unmanaged cloud-based AI tool use can result in data loss and reputational harm, among other risks. The time to stop and prevent cloud-based shadow AI use is now.
Dave Shackleford • Aug. 7, 2025 -
Brand Experience Team/TechTarget
How to recover from a ransomware attack: A complete guide
With a ransomware recovery plan, organizations can act quickly to prevent data loss without descending into chaos. Learn the crucial steps to incorporate into your plan.
John Burke • Aug. 4, 2025 -
Brand Experience Team/TechTarget
How to use the John the Ripper password cracker
Password crackers are essential tools in any pen tester's toolbox. This step-by-step tutorial explains how to use John the Ripper, an open source offline password-cracking tool.
Ed Moyle • Aug. 1, 2025 -
Brand Experience Team/TechTarget
How to remove ransomware, step by step
Prevention is the best weapon against a ransomware infection. But in the event of compromise, consider these responses to contain and remove ransomware.
Paul Kirvan • July 31, 2025 -
Brand Experience Team/TechTarget
How liveness detection catches deepfakes and spoofing attacks
Biometric liveness detection can stop fake users in their tracks. Learn how the technology works to distinguish real humans from deepfakes and other spoofing attacks.
Karen Kent • July 31, 2025 -
Brand Experience Team/TechTarget
The differences between inbound and outbound firewall rules
Firewalls can support both inbound and outbound firewall rules, but there are important differences between the two. Learn more about each and their uses.
Michael Cobb and Kevin Beaver • July 30, 2025 -
Brand Experience Team/TechTarget
How to discover and manage shadow APIs
Connecting applications, especially if external-facing, with unapproved APIs is a recipe for disaster. Detecting and managing shadow APIs is vital to keeping the company secure.
Dave Shackleford • July 25, 2025 -
Brand Experience Team/TechTarget
How to implement security control rationalization
Security control rationalization helps CISOs reduce cybersecurity tool sprawl, cut spending and improve efficiency -- all without compromising protection.
Dave Shackleford • July 25, 2025 -
Brand Experience Team/TechTarget
How extortionware, cyberextortion and ransomware differ
Prevention is the only line of defense against an extortionware attack. Learn how extortionware works and why it can be more damaging than ransomware.
Andrew Froehlich • July 24, 2025
Previous
