Infrastructure Security: Page

How to apply and edit Wireshark display filters

Wireshark display filters enable users to narrow the scope of a network traffic scan. Use this tutorial to apply and edit display filters to make detailed network sniffing easier.

By Packt Publishing, Kyle Johnson • March 13, 2023

Customize workflows with Wireshark profiles

Wireshark has a variety of uses, which is why creating multiple personalized Wireshark profiles is important. Learn about Wireshark profiles, how to share them and more.

By Kyle Johnson • March 13, 2023

Exploitation attempts observed against Fortinet FortiNAC flaw

Hours after Horizon3.ai released a proof of concept exploit through GitHub, Shadowserver Foundation observed several IP addresses attempting to exploit the vulnerability.

By Arielle Waldman • Feb. 22, 2023

Top takeaways from first CloudNativeSecurityCon

TechTarget's Enterprise Strategy Group offers the main takeaways from the first vendor-neutral, practitioner-driven conference for security.

By Melinda Marks • Feb. 14, 2023

Windows Defender Exploit Guard

Microsoft Windows Defender Exploit Guard is antimalware software that provides intrusion protection for Windows 10 OS users.

By Alexander Gillis • Feb. 8, 2023

What reverse shell attacks are and how to prevent them

Attackers use reverse shells to covertly attack an organization's environment. Discover what a reverse shell is and how to mitigate such attacks.

By Ravi Das • Feb. 1, 2023

Top 10 ICS cybersecurity threats and challenges

Industrial control systems are subject to both unique and common cybersecurity threats and challenges. Learn about the top ones here and how to mitigate them.

By Ashwin Krishnan • Jan. 18, 2023

Microsoft fixes SSRF vulnerabilities found in Azure services

Orca Security, which discovered the Azure flaws, warned enterprises to be aware of SSRF attacks, which can result in a threat actor accessing or modifying sensitive data.

By Arielle Waldman • Jan. 17, 2023

BitSight, Schneider Electric partner to quantify OT risk

The new partnership aims to provide organizations with increased visibility and risk detection capabilities for operational technology environments and critical infrastructure.

By Arielle Waldman • Jan. 10, 2023

3 enterprise network security predictions for 2023

It's shaping up to be another banner year for network security. 2023 may see decryption-less threat detection, connected home-caused enterprise breaches and new SASE drivers.

By John Grady • Jan. 9, 2023

Windows security tips for the enterprise

Securing a Windows environment is no easy feat. Read up on low-hanging fruit to quickly address, as well as top tips from two security practitioners to get started.

By Kyle Johnson • Jan. 5, 2023

Fortinet confirms VPN vulnerability exploited in the wild

In an advisory Monday, Fortinet urged customers to take steps to immediately mitigate the critical flaw, which was disclosed earlier by French infosec firm Olympe Cyberdefense.

By Arielle Waldman • Dec. 12, 2022

Claroty unveils web application firewall bypassing technique

Claroty's attack technique bypasses web application firewalls, or WAFs, by tricking those that can't detect JSON as part of their SQL injection detection process.

By Alexander Culafi • Dec. 9, 2022

How to prevent SQL injection with prepared statements

One of the top defenses against SQL injection is prepared statements. In this book excerpt, learn what prepared statements are and how to extend their defense.

By The Pragmatic Programmers LLC, Sharon Shea • Nov. 29, 2022

WLAN security: Best practices for wireless network security

Follow these wireless network security best practices to ensure your company's WLAN remains protected against the top threats and vulnerabilities.

By Andrew Froehlich • Nov. 28, 2022

How Wireshark OUI lookup boosts network security

Learn why using Wireshark OUI lookup for tracking devices by their network interface's organizationally unique identifier is such an important tool for security pros.

By Peter Loshin • Nov. 16, 2022

Multichannel communications need more than email security

To remain protected against social engineering attacks in all communication channels, enterprises need new security strategies that extend beyond email to new collaboration tools.

By Dave Gruber • Nov. 9, 2022

Nozomi Networks CEO talks OT security and ‘budget muscle’

Nozomi Networks CEO Edgard Capdevielle sat down with TechTarget Editorial to discuss the evolution of OT security and the challenge of 'budget muscle' many organizations face.

By Alexander Culafi • Nov. 7, 2022

Honeywell weighs in on OT cybersecurity challenges, evolution

TechTarget Editorial sat down with Honeywell's Paul Griswold and Jeff Zindel to discuss the rapid growth and evolution of the operational technology cybersecurity industry.

By Alexander Culafi • Nov. 4, 2022

command-and-control server (C&C server)

A command-and-control server (C&C server) is a computer that issues directives to digital devices that have been infected with rootkits or other types of malware, such as ransomware.

By Kinza Yasar • Oct. 21, 2022

ProxyLogon researcher details new Exchange Server flaws

After testing Microsoft's mitigations for ProxyLogon, security researcher Orange Tsai discovered new Exchange Server bugs, including one flaw that took more than a year to fix.

By Arielle Waldman • Oct. 19, 2022

Wi-Fi Pineapple

A Wi-Fi Pineapple is a wireless auditing platform from Hak5 that allows network security administrators to conduct penetration tests.

By Ben Lutkevich • Oct. 14, 2022

APTs compromised defense contractor with Impacket tools

A CISA alert warned that APT actors compromised a defense contractor's Microsoft Exchange server and used Impacket, an open source Python toolkit, to move laterally in the network.

By Arielle Waldman • Oct. 5, 2022

Secureworks finds network intruders see little resistance

A report from Secureworks found that in many network intrusions, the attackers only need to employ basic, unsophisticated measures to evade detection.

By Shaun Nichols • Oct. 4, 2022

Solve ICS security issues with ICS and IT team convergence

It's predicted that threat actors will weaponize industrial control systems to harm or kill humans by 2025. Prepare by learning how to balance ICS and security convergence.

By Steve Durbin • Sept. 29, 2022