Infrastructure Security: Page

How automated certificate management helps retain IT talent

Organizations shouldn't waste their IT pros' time on unnecessary tasks -- especially during a skills shortage. Learn about the benefits of automated digital certificate management.

By Tim Callan • Feb. 9, 2022

Microsoft disables VBA macros by default

Microsoft's change in the default settings of five Office applications aims to shut down a widely used and longstanding threat vector to enterprises.

By Arielle Waldman • Feb. 8, 2022

Protect APIs against attacks with this security testing guide

API security cannot be overlooked. Learn how security testing can detect API vulnerabilities and weaknesses before attackers can take advantage of them.

By Michael Cobb • Jan. 28, 2022

Nmap use cases, tools and product comparisons

Nmap is historically known for port scanning, but thanks to several subprojects, its use cases have expanded. Learn how Nmap is used, along with other comparable tools.

By Sharon Shea • Jan. 28, 2022

What is shellcode and how is it used?

Shellcode is a set of instructions that executes a command in software to take control of or exploit a compromised machine. Read up on the malware term and how to mitigate the risk.

By Michael Cobb • Jan. 25, 2022

Top cloud security standards and frameworks to consider

Cloud security standards and frameworks are key to securing systems and maintaining privacy. Read up on available options and advice for selecting the best for your organization.

By Paul Kirvan • Jan. 21, 2022

Cloud-native security architecture principles and controls

Building a sound cloud security framework is challenging, and it's even more so when implementing a cloud-native architecture. Here are steps you can take to make the job easier.

By Dave Shackleford • Jan. 18, 2022

VMware ESXi 7 users vulnerable to hypervisor takeover bug

A recent security update addressed a hypervisor takeover vulnerability in several VMware products, but the patch omitted one key server platform in ESXi 7.

By Shaun Nichols • Jan. 10, 2022

How to make security accessible to developers

Apps are too often released with flaws and vulnerabilities. Learn how to make security accessible to developers by integrating best practices into the development lifecycle.

By Aakash Shah, Om Vyas • Dec. 28, 2021

Apple v. NSO Group: How will it affect security researchers?

While the full extent of impact won't be revealed until the lawsuit concludes, negative impacts on security researchers are possible.

By Arielle Waldman • Dec. 20, 2021

Critical bugs could go unpatched amid Log4j concern

Many organizations are focused on finding and patching Log4Shell, but there are other vulnerabilities, including Patch Tuesday bugs, already under active exploitation.

By Shaun Nichols • Dec. 20, 2021

The importance of automated certificate management

Managing the plethora of digital certificates can no longer be done in a spreadsheet by hand. Discover the importance of automated certificate management here.

By Tim Callan • Dec. 15, 2021

spam filter

A spam filter is a program used to detect unsolicited, unwanted and virus-infected emails and prevent those messages from getting to a user's inbox.

By Andrew Zola • Dec. 15, 2021

What is a micro VM (micro virtual machine)?

A micro VM (micro virtual machine) is a virtual machine program that serves to isolate an untrusted computing operation from a computer's host operating system.

By Stephen Bigelow, Sharon Shea • Dec. 14, 2021

virtual local area network hopping (VLAN hopping)

Virtual local area network hopping (VLAN hopping) is a method of attacking the network resources of a VLAN by sending packets to a port not usually accessible from an end system.

By Andrew Zola • Dec. 10, 2021

Cloud application developers need built-in security

Enterprises plan to increase cloud application security spending in 2022. Find out how security vendors and cloud application developers can meet their needs.

By Melinda Marks • Dec. 9, 2021

OCSP (Online Certificate Status Protocol)

OCSP (Online Certificate Status Protocol) is one of two common schemes used to maintain the security of a server and other network resources.

By Andrew Zola • Dec. 9, 2021

USB-over-Ethernet bugs put cloud services at risk

SentinelOne says vulnerabilities in the Eltima SDK, which connects USB devices on virtual workstations, can put enterprises at risk of privilege escalation attacks.

By Shaun Nichols • Dec. 7, 2021

CISA taps CrowdStrike for endpoint security

The U.S. government's cybersecurity authority will be watched over by security vendor CrowdStrike as part of the larger government IT security overhaul.

By Shaun Nichols • Dec. 1, 2021

walled garden

On the internet, a walled garden is an environment that controls the user's access to network-based content and services.

By Andrew Froehlich • Nov. 30, 2021

Elastic Stack Security tutorial: How to create detection rules

This excerpt from 'Threat Hunting with Elastic Stack' provides step-by-step instructions to create detection rules and monitor network security events data.

By Packt Publishing, Kyle Johnson • Nov. 29, 2021

3 ways to balance app innovation with app security

New innovations come with an onslaught of risks and vulnerabilities. Use these three concepts to promote innovation, while ensuring web application security.

By Mark Ralls • Nov. 16, 2021

Microsoft releases out-of-band update for Windows Server

Less than a week after November's Patch Tuesday, Microsoft released an unscheduled security update for Windows Server to address an authentication vulnerability.

By Shaun Nichols • Nov. 15, 2021

How to overcome 3 multi-tenancy security issues

Explore three major multi-tenancy security challenges and how to fix them, including lack of visibility, privilege overallocation and poor data security management.

By Dave Shackleford • Nov. 9, 2021

API security strategies must evolve to include API protection

An API security strategy must include the ability to protect APIs post-deployment, but questions abound about ownership, which tools to use and how to get started.

By Sharon Shea • Nov. 9, 2021