Infrastructure Security: Page

How to start an enterprise bug bounty program: A CISO’s guide

Bug bounty programs offer flexible rewards, global expertise and enhanced security, helping organizations address vulnerabilities before exploitation.

By Rob Shapland • March 11, 2026

Comparison of 5 top next-generation firewall vendors

Top NGFWs excel in reliability, scalability, and advanced features such as post-quantum cryptography, but users face steep learning curves and complex licensing.

By Karen Kent • March 5, 2026

LLM firewalls emerge as a new AI security layer

The race by organizations to AI-enable their operations and business workflows is exposing them to new risks that AI firewalls aim to address.

By Jaikumar Vijayan • Feb. 25, 2026

Enhance security audits with Nmap and NSE scripts

The Nmap Scripting Engine feature enables security admins to automate scans, detect vulnerabilities and validate network security settings.

By Damon Garn • Feb. 23, 2026

MLSecOps: Bridging security and AI development processes

MLSecOps ensures AI security by automating controls, fostering collaboration and addressing vulnerabilities early in the development lifecycle.

By Ed Moyle • Feb. 19, 2026

How to evaluate NGFW products to strengthen cybersecurity

Next-generation firewalls are critical tools in today's evolving threat landscape. Learn how to evaluate and select an NGFW that will bolster your company's cybersecurity posture.

By Karen Kent • Feb. 18, 2026

Secure MCP servers to safeguard AI and corporate data

Model Context Protocol servers act as bridges between AI models and enterprise resources. But they can also give threat actors the keys to the castle if not secured.

By Amy DeCarlo • Feb. 6, 2026

Why organizations need cloud attack surface management

Cloud environments constantly change, expanding attack surfaces beyond traditional tools. Cloud ASM delivers continuous visibility to identify exposures, misconfigurations and risk.

By Dave Shackleford • Feb. 6, 2026

5 network security predictions for 2026

What does 2026 have in store for network security? Omdia analyst John Grady shares his top five predictions for the upcoming year.

By John Grady • Dec. 15, 2025

Guide to cloud container security risks and best practices

Containers are an integral part of a growing number of production environments. But they can become security risks if not managed correctly.

By Dave Shackleford • Dec. 12, 2025

12 key application security best practices

Developing applications involves many important practices, but one that might matter most is to be sure the team is addressing security at every stage of the SDLC.

By Paul Kirvan • Dec. 4, 2025

How to use the ZMap network scanner

ZMap provides security admins with valuable information about a network's structure and functionality. But it can also generate a DoS situation if it isn't managed correctly.

By Damon Garn • Dec. 2, 2025

How to use Core Shell SSH, the PuTTY alternative for macOS

Core Shell is a utility every Mac user who connects to remote resources needs to know. Learn about its exceptional capabilities for managing any number of SSH connections.

By Damon Garn • Dec. 1, 2025

How to use Netcat: Commands and use cases

The versatile utility is small, powerful and gives security and network engineers a variety of ways to incorporate it as part of an overall security strategy.

By Ed Moyle • Nov. 21, 2025

F5-CrowdStrike network security partnership: Is EDR enough?

A new F5-CrowdStrike partnership extends EDR to vulnerable network infrastructure, but is it enough? Research shows NDR outperforms EDR in many places.

By John Grady • Nov. 20, 2025

When to consider Kubernetes security posture management

Securely using Kubernetes to build, manage and automate application and infrastructure deployments is a growing challenge for security teams.

By Dave Shackleford • Nov. 19, 2025

CNAPP vs. CSPM: Comparing cloud security tools

CNAPP or CSPM? Understand the key differences between these cloud security tools to make an informed choice that aligns with your organization's maturity level.

By Dave Shackleford • Nov. 10, 2025

News brief: Collaboration apps face security scrutiny -- again

Check out the latest security news from the Informa TechTarget team.

By Staff report • Nov. 7, 2025

Cybersecurity Awareness Month: The endpoint security issue

Device diversity and hybrid work models challenge IT teams. New research reveals the gap between managed endpoints and actual security coverage.

By Gabe Knuth • Oct. 24, 2025

CSPM vs. DSPM: Complementary security posture tools

CSPM delivers important information on cloud configuration status. DSPM details the security posture of data, whether it's in the cloud or an on-premises environment.

By Dave Shackleford • Oct. 21, 2025

How single-vendor SASE can deliver better security results

SASE vendor deployment trends show gradual change, with single-vendor adoption rising from 2% in 2023 to 17% in 2025, according to research findings.

By John Grady • Oct. 21, 2025

HashiConf highlights security opportunities to support scale

HashiCorp's latest tools and updates help security teams collaborate with DevOps teams for efficient, scalable cloud security.

By Melinda Marks • Oct. 3, 2025

7 key types of application security testing

Modern application development moves at unprecedented speed. Is your security testing keeping pace so that apps are secure when they reach production?

By Colin Domoney • Sept. 26, 2025

7 API discovery best practices for complete visibility

Secure your API landscape with these API discovery best practices spanning the entire SDLC. Find hidden endpoints, audit integrations and monitor continuously.

By Colin Domoney • Sept. 24, 2025

8 best practices for securing RESTful APIs

The REST architectural style helps applications communicate with each other. Be sure RESTful APIs have the protections necessary to keep attackers at bay.

By Ravi Das • Sept. 22, 2025