Infrastructure Security: Page

Critical Sophos Firewall bug under active exploitation

Sophos said the exploitation of the critical firewall vulnerability has, at this time, affected "an extremely small subset of organizations" predominantly located in South Asia.

By Alexander Culafi • Sept. 26, 2022

Google dork query

A Google dork query, sometimes just referred to as a dork, is a search string or custom query that uses advanced search operators to find information not readily available on a website.

By Rahul Awati, Ivy Wigmore • Sept. 23, 2022

How DKIM records reduce email spoofing, phishing and spam

Learn how implementing DomainKeys Identified Mail helps protect against phishing, spam and email forgery by digitally signing outgoing messages.

By Peter Loshin • Sept. 20, 2022

How to create and add an SPF record for email authentication

Learn how to create Sender Policy Framework records to list authenticated mail servers for an email domain to fight spam, phishing, email forgery and other malicious email.

By Peter Loshin • Sept. 1, 2022

How SPF records prevent email spoofing, phishing and spam

Forged email has long been used by hackers to break into protected systems. Learn how the Sender Policy Framework protocol helps stop spoofing, phishing and other malicious mail.

By Peter Loshin • Aug. 25, 2022

How CI/CD pipelines are putting enterprise networks at risk

At Black Hat USA 2022, NCC Group researchers demonstrated how threat actors can compromise CI/CD pipelines and break out into enterprise networks and cloud environments.

By Rob Wright • Aug. 11, 2022

VMware: The threat of lateral movement is growing

The majority of incident response professionals surveyed for VMware's 'Global Incident Response Threat Report' observed lateral movement in at least some attacks in the past year.

By Alexander Culafi • Aug. 8, 2022

Importance of enterprise endpoint security during a pandemic

Enterprises often focus greatly on communications security and less on endpoint security. Review the importance of enterprise endpoint security and best practices to implement it.

By Kyle Johnson, Taylor & Francis • Aug. 5, 2022

Amazon CSO Steve Schmidt talks prescriptive security for AWS

In part two of this Q&A, Amazon CSO Steve Schmidt discusses why AWS has taken a more prescriptive approach to customer security and how it influences areas like incident response.

By Rob Wright, Arielle Waldman • Aug. 4, 2022

AWS adds anti-malware and PII visibility to storage

New tools unveiled by AWS at re:Inforce 2022 add new anti-malware capabilities to AWS block storage and a way to find personally identifiable information with S3 object storage.

By Tim McCarthy • July 28, 2022

SSH2 vs. SSH1 and why SSH versions still matter

The Secure Shell protocol, SSH, was redesigned and released as SSH2 in 2006. While SSH1 lingers for legacy uses, find out how the protocols differ and why it's important.

By Peter Loshin, Mike Chapple • July 27, 2022

3 steps for getting started with security service edge

Before getting started with security service edge (SSE), formulate a migration strategy. Check out these three expert tips for tackling SSE with maximum efficiency and ease.

By Karen Kent • July 14, 2022

5G networks vulnerable to adversarial ML attacks

A team of academic researchers introduced an attack technique that could disrupt 5G networks, requiring new ways to protect against adversarial machine learning attacks.

By Shaun Nichols • July 6, 2022

Top 4 best practices to secure the SDLC

NIST's Secure Software Development Framework is a set of practices for mitigating software vulnerabilities. Learn about the top SDLC best practices included in this framework.

By Karen Kent • June 24, 2022

What’s driving converged endpoint management and security?

Security and IT teams face challenges in managing and securing a growing number of endpoints, which is driving organizations to look for converged capabilities, according to ESG.

By Mark Bowker • June 22, 2022

How to address security risks in GPS-enabled devices

GPS-enabled devices not only pose personal risks but also pose risks to organizations. Learn about the security risks associated with tracking devices and how to address them.

By Nabil Hannan • June 21, 2022

How to evaluate security service edge products

As organizations become more cloud-centric and adapt to remote work, a new technique known as security service edge is gaining traction.

By Ed Moyle • June 15, 2022

Skyhigh Security CEO, VP talk life after McAfee

Gee Rittenhouse discusses the process of building Skyhigh Security, a new company created by Symphony Technology Group as a rebirth of McAfee's enterprise cloud security portfolio.

By Alexander Culafi • June 13, 2022

CrowdStrike demonstrates dangers of container escape attacks

CrowdStrike gave a live demonstration at RSA Conference 2022 of how an attacker can use a recently discovered Kubernetes flaw to obtain full control over a container's host system.

By Shaun Nichols • June 9, 2022

Implementing wireless security in the enterprise

Learn how to properly secure your enterprise wireless network while considering UX, zero trust and commonly overlooked architectural mistakes.

By Kyle Johnson • June 1, 2022

How to design architecture for enterprise wireless security

Learn about a five-phase design methodology that will help your company plan for and create an enterprise wireless security architecture.

By Wiley Publishing, Kyle Johnson • June 1, 2022

5 reasons software updates are important

When it's time to update your software programs, don't delay. Updates can prevent security issues and improve compatibility and program features.

By Amanda Hetler • May 18, 2022

Critical bug in Zyxel firewalls, VPNs exploited in the wild

Initially discovered by Rapid7, the vulnerability poses a critical risk to enterprise networks and could allow attackers to gain remote access to Zyxel security products.

By Arielle Waldman • May 16, 2022

3 ways to apply security by design in the cloud

Applying security-by-design principles to the cloud may not seem straightforward, but there are several ways to do so. These three areas are a good place to start.

By Dave Shackleford • May 12, 2022

The top secure software development frameworks

Keeping security top of mind when developing software is paramount. Learn how to incorporate security into the SDLC with the top secure software development frameworks.

By Paul Kirvan • May 9, 2022