Infrastructure Security: Page

Author’s advice on Palo Alto firewall, getting started

Interfaces, licenses, policies -- getting started with a Palo Alto Networks firewall can be confusing. Here, the author of 'Mastering Palo Alto Networks' offers his advice.

By Kyle Johnson • March 22, 2021

With 5G, security by design is a must

New tech means new security strategies. Deloitte's Wendy Frank and Shehadi Dayekh explain why this is especially true with 5G. Security by design, they advise, is a critical approach.

By Wendy Frank and Shehadi Dayekh • March 19, 2021

Implement Kubernetes for multi-cloud architecture security

Uncover how orchestration tools benefit multi-cloud environments, and get help selecting the right deployment model for Kubernetes in multi-cloud architectures.

By Ed Moyle • March 16, 2021

Endpoint security vs. network security: Why both matter

As the security perimeter blurs, companies often debate the merits of endpoint security vs. network security. However, it shouldn't be an either-or decision.

By Andrew Froehlich • March 15, 2021

Microsoft Exchange Server attacks: What we know so far

More details continue to emerge since last week's disclosure of zero-day vulnerabilities and attacks on Microsoft Exchange Server, including the broad range of potential victims.

By Arielle Waldman • March 9, 2021

Microsoft’s security roadmap goes all-in on 365 Defender

Microsoft 365 Defender's new threat analytics feature includes step-by-step reports on attacks, vulnerabilities and more, as well as links to relevant alerts in each report.

By Alexander Culafi • March 4, 2021

Technical controls to prevent business email compromise attacks

Technical controls are at the heart of preventing successful business email compromise attacks. Learn about those and extra considerations to keep your business secure.

By Diana Kelley • March 3, 2021

Using content disarm and reconstruction for malware protection

Content disarm and reconstruction is a modern approach to removing malicious code from files, key to detecting and thwarting successful phishing and malware attacks.

By Michael Cobb • Feb. 9, 2021

Cloud security policy configuration in AWS, Azure and GCP

Explore cloud security policy configurations in AWS, Azure and GCP using native security tools in this excerpt of 'Multi-Cloud Architecture and Governance' by Jeroen Mulder.

By Packt Publishing, Katie Donegan • Feb. 3, 2021

How a social engineering campaign fooled infosec researchers

Impersonation tactics in social engineering attacks have become so elaborate that even highly aware members of the infosec community can fall victim to them.

By Arielle Waldman • Feb. 2, 2021

Endpoint security quiz: Test your knowledge

Test your knowledge of SASE, split tunneling, and device discovery tool capabilities and best practices in this endpoint security quiz for IT professionals.

By Katie Donegan • Dec. 23, 2020

Quiz: Web application security threats and vulnerabilities

Applications are still the biggest attack vector for malicious actors -- can you protect them? Test your knowledge with this web application security quiz.

By Sharon Shea • Dec. 22, 2020

5 myths about putting security into CI/CD pipelines

Companies looking to introduce security testing earlier into software development must look past myths and understand what to realistically expect before creating their strategy.

By Dan Cornell • Dec. 8, 2020

New IBM encryption tools head off quantum computing threats

IBM rolled out a series of cloud-based services that improve hybrid cloud users' cryptographic key protection, in part to future-proof incursions by quantum computers.

By Ed Scannell • Dec. 4, 2020

Choosing between proxy vs. API CASB deployment modes

Curious how to choose the right CASB deployment mode for your organization? Before you buy, compare how proxy vs. API CASB architectures work to secure SaaS applications.

By Ed Moyle • Nov. 17, 2020

Palo Alto Networks buys Expanse for $800 million

Palo Alto Networks continued its acquisition spree with an agreement to purchase San Francisco-based security vendor Expanse, which specializes in attack surface management.

By Rob Wright • Nov. 11, 2020

Using SDP as a VPN alternative to secure remote workforces

Software-defined perimeter has been touted as a VPN alternative for secure remote access. How do you know if SDP or a traditional VPN is right for your company?

By Dave Shackleford • Nov. 3, 2020

Weighing the future of firewalls in a zero-trust world

Cybersecurity pros have been predicting the firewall's demise for years, yet the device is still with us. But does it have a place in zero-trust networks? One analyst says yes.

By Alissa Irei • Nov. 2, 2020

Cybersecurity for remote workers: Lessons from the front

Tackle the security challenges COVID-19 wrought by using this playbook from an experienced disaster-zone responder.

By Rich Mogull • Nov. 2, 2020

COVID-19 cybersecurity data shows rising risk during remote pivot

When enterprises quickly pivoted to remote work during the pandemic, it prompted a wave of new threats while also widening existing gaps in cybersecurity postures.

By Jessica Scarpati • Nov. 2, 2020

Why SASE should be viewed as an evolution, not revolution

The hype around secure access service edge (SASE) is palpable. But by taking a step back, security leaders can align an emerging trend to their long-term goals.

By Mike McGlynn • Oct. 23, 2020

How enterprise cloud VPN protects complex IT environments

Do you know how enterprise cloud VPN differs from a traditional VPN? Explore how cloud VPN works and whether it's the right option for your hybrid IT environment.

By Ed Moyle • Oct. 16, 2020

Quiz: Network security authentication methods

There are many methods available to authenticate users requesting access to an organization's systems. Test your knowledge with this quiz on authentication in network security.

By Katie Donegan • Oct. 5, 2020

Oversee apps with these 3 application security testing tools

Unsecured applications can have dire consequences for enterprises. Discover how top app security testing tools on the market today protect apps and enhance developer productivity.

By Michael Cobb • Sept. 29, 2020

Critical IIoT security risks cloud IoT’s expansion into industry

The convergence of IoT with industrial processes increases productivity, improves communications and makes real-time data readily available. But serious IIoT security risks must be considered as well.

By Peter Sullivan • Sept. 28, 2020