Infrastructure Security: Page

Is cloud critical infrastructure? Prep now for provider outages

The cloud has quickly become critical infrastructure to many organizations. Learn about the top cloud provider outages, and discover tips on preventing disruption during downtime.

By Dave Shackleford • April 29, 2022

What are the benefits and challenges of microsegmentation?

Administrators are assessing microsegmentation to beef up access control and security. But deploying microsegmentation can be complex.

By Andrew Froehlich • April 25, 2022

Comparing network segmentation vs. microsegmentation

Network segmentation and microsegmentation both control access but vary in how they do it, as well as how granular their approach is. Learn the differences here.

By Andrew Froehlich • April 21, 2022

Traditional IT vs. critical infrastructure cyber-risk assessments

When it comes to critical infrastructure cybersecurity, the stakes are uniquely high. Assessing associated cyber-risk, in turn, is uniquely challenging.

By Paul Rostick • April 20, 2022

AWS Log4Shell hot patch vulnerable to privilege escalation

Amazon's initial Log4Shell fix had 'severe security issues,' a Palo Alto Networks security researcher said. Amazon released new patches to fix those issues Tuesday.

By Alexander Culafi • April 20, 2022

WLAN Authentication and Privacy Infrastructure (WAPI)

WLAN Authentication and Privacy Infrastructure (WAPI) is a wireless local area network security standard officially supported by the Chinese government.

By Rahul Awati • April 20, 2022

Should companies ask for a SaaS software bill of materials?

Though it isn't commonplace to ask for a SaaS software bill of materials, one can be beneficial for both SaaS providers and their customers. Learn why.

By Ed Moyle • April 7, 2022

content filtering

Content filtering is a process involving the use of software or hardware to screen and/or restrict access to objectionable email, webpages, executables and other suspicious items.

By Peter Loshin, Andrew Zola • April 5, 2022

How to implement OpenID Connect for single-page applications

The OpenID Connect authentication protocol can be used to secure a variety of applications. This excerpt teaches developers how it works with single-page applications.

By Kyle Johnson, Manning Publications Co. • April 4, 2022

Spring Framework vulnerabilities sow confusion, concern

Two different remote code execution vulnerabilities in a Java developer tool caused considerable confusion after one of the flaws was leaked online as a zero-day.

By Shaun Nichols • March 31, 2022

The benefits and challenges of SBOMs

While software bills of material present new challenges for security teams, they offer the benefits of improved visibility, transparency and security.

By Manjunath Bhat • March 28, 2022

Review Microsoft Defender for endpoint security pros and cons

Microsoft wants to make Defender the only endpoint security product companies need, but does the good outweigh the bad? Read up on its features and pitfalls.

By Johna Johnson • March 25, 2022

STG launches Skyhigh Security from McAfee cloud assets

The new company combines the McAfee Enterprise Security Service Edge portfolio with a name reminiscent of a previous McAfee acquisition: Skyhigh Networks.

By Alexander Culafi • March 22, 2022

Sandworm APT ramps up Cyclops Blink botnet with Asus routers

Trend Micro discovered that the Cyclops Blink botnet, which had originally targeted WatchGuard devices, is now spreading to Asus and 'at least one other vendor.'

By Alexander Culafi • March 17, 2022

Container vulnerability opens door for supply chain attacks

A CRI-O container engine vulnerability could allow attackers to bypass security controls and take over a host system, according to CrowdStrike researchers.

By Shaun Nichols • March 15, 2022

SentinelOne acquires Attivo Networks for $617M

SentinelOne is acquiring Attivo Networks for a $616.5 million price tag and plans to merge the company's identity threat detection services with its XDR offering.

By Arielle Waldman • March 15, 2022

screened subnet

A screened subnet, or triple-homed firewall, refers to a network architecture where a single firewall is used with three network interfaces.

By Rahul Awati • March 11, 2022

Use microsegmentation to mitigate lateral attacks

Attackers will get into a company's system sooner or later. Limit their potential damage by isolating zones with microsegmentation to prevent lateral movement.

By Andrew Froehlich • March 10, 2022

security identifier (SID)

In the context of Windows computing and Microsoft Active Directory (AD), a security identifier (SID) is a unique value that is used to identify any security entity that the operating system (OS) can authenticate.

By Peter Loshin • March 8, 2022

Intel touts security improvements in 12th-gen Core CPUs

Intel is courting enterprises with a new line of Core vPro CPUs that boast improved security protections ranging from firmware and OS to memory.

By Shaun Nichols • March 3, 2022

Implement API rate limiting to reduce attack surfaces

Rate limiting can help developers prevent APIs from being overwhelmed with requests, thus preventing denial-of-service attacks. Learn how to implement rate limiting here.

By Kyle Johnson, Manning Publications Co. • Feb. 28, 2022

API security methods developers should use

Developers can reduce the attack surface by implementing security early in the API development process and knowing methods to secure older APIs that can't be deprecated.

By Kyle Johnson • Feb. 28, 2022

(ISC)2 study finds long remediation times for Log4Shell

An (ISC)2 survey of cybersecurity professionals found Log4Shell remediation for many organizations took several weeks or more than a month, requiring work on weekends and holidays.

By Peyton Doyle • Feb. 25, 2022

Top 6 critical infrastructure cyber-risks

Cyber attacks on critical infrastructure assets can cause enormous and life-threatening consequences. Discover the top cyber-risks to critical infrastructure here.

By Paul Rostick • Feb. 22, 2022

Shifting security left requires a GitOps approach

Shifting security left improves efficiency and minimizes risk in software development. Before successfully implementing this approach, however, key challenges must be addressed.

By Melinda Marks • Feb. 17, 2022