Infrastructure Security: Page

NPM security to use automated tools to boost community alerts

Adam Baldwin, director of security for NPM, talks chains of trust and new NPM security initiatives that will bring automated alerts to help highlight potentially malicious activity.

By Michael Heller • Dec. 27, 2018

How to apply cloud security controls in the network

Implementing cloud security controls in the network requires a careful balance between protecting points of connectivity while still making it easy for users to access services.

By (ISC) 2 • Dec. 26, 2018

Security, compliance standards help mitigate BIOS security vulnerabilities

Cybersecurity vulnerabilities associated with PCs often overlook BIOS. Read for strategies to offset these threats and for preventing unauthorized BIOS modifications.

By Daniel Allen • Dec. 20, 2018

The benefits of using a cloud honeypot for threat intelligence

A cloud honeypot can help enterprises gather threat intelligence. Expert Frank Siemons explains why a cloud-based honeypot deployment is preferable to a traditional one.

By Frank Siemons • Dec. 19, 2018

How to ensure your enterprise doesn’t have compromised hardware

Enterprise protections are crucial in order to guarantee the safety of your hardware. Discover best practices to guard your enterprise's hardware with Nick Lewis.

By Nick Lewis • Dec. 18, 2018

Faxploit: How can sending a fax compromise a network?

Check Point researchers found a fax machine attack allowing attackers to access scanned documents. Discover how this is possible and how users can avoid falling victim.

By Judith Myerson • Dec. 12, 2018

L1TF: How do new vulnerabilities affect Intel processors?

New speculative execution vulnerabilities have been found affecting Intel processors. Learn how these flaws can lead to side-channel attacks with Judith Myerson.

By Judith Myerson • Dec. 10, 2018

Testing email security products: Results and analysis

Kevin Tolly of the Tolly Group offers a look at how his company set out to test several email security products and the challenges it faced to come up with sound methodologies.

By Kevin Tolly • Dec. 5, 2018

How does TLS 1.3 differ from TLS 1.2?

Compared to TLS 1.2, TLS 1.3 saw improvements in security, performance and privacy. Learn how TLS 1.3 eliminated vulnerabilities using cryptographic algorithms.

By Michael Cobb • Dec. 5, 2018

Testing applications in production vs. non-production benefits

To ensure proper application security testing, production and non-production systems should both be tested. In this tip, expert Kevin Beaver weighs the pros and cons.

By Kevin Beaver • Dec. 4, 2018

Marcus Ranum: Systems administration is in the ‘crosshairs’

After years of spirited debates and top-notch interviews, columnist Marcus Ranum is signing (sounding?) off with some final thoughts on the future of security.

By Marcus Ranum • Dec. 3, 2018

Still no answers to endpoint security protection, survey finds

The frequency of endpoint attacks is on the rise, with 76% of IT security professionals reporting that their organization was compromised by new or zero-day (unknown) exploits.

By Kathleen Richards • Dec. 3, 2018

Spectre v2 mitigation causes significant slowdown on Linux 4.20

News roundup: A Spectre v2 mitigation causes significant performance slowdowns in Linux 4.20. Plus, Dell had to reset user passwords after a data breach, and more.

By Madelyn Bacon • Nov. 30, 2018

Testing email security products: Challenges and methodologies

Kevin Tolly of the Tolly Group offers a look at how his company set out to test several email security products, as well as the challenges it faced to come up with sound methodologies.

By Kevin Tolly • Nov. 30, 2018

Is network traffic monitoring still relevant today?

An increase in DNS protocol variants has led to a higher demand for network traffic monitoring. The SANS Institute's Johannes Ullrich explains what this means for enterprises.

By Johannes Ullrich • Nov. 29, 2018

Compromised NPM package highlights open source trouble

A compromised NPM package targeted a popular bitcoin wallet with cryptocurrency-stealing code and experts say the issue highlights the lack of a chain of trust in open source software.

By Michael Heller • Nov. 28, 2018

How to configure a vTAP for cloud networks

A vTAP can give enterprises better visibility into their cloud networks. Expert Frank Siemons of InfoSec Institute explains how virtual network TAPs work and the available options.

By Frank Siemons • Nov. 21, 2018

AWS moves to curb S3 data leaks, but Chris Vickery is doubtful

Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most AWS exposures, is doubtful the changes will end the problem.

By Michael Heller • Nov. 20, 2018

How container security tools affect overall system security

Container security continues to be a pressing issue as containers and hosts are being used more frequently. Learn how to keep your enterprise safe with Matt Pascucci.

By Matthew Pascucci • Nov. 20, 2018

How to configure browsers to avoid web cache poisoning

Web cache poisoning poses a serious threat to web browser security. Learn how hackers can exploit unkeyed inputs for malicious use with expert Michael Cobb.

By Michael Cobb • Nov. 15, 2018

How does the Mylobot botnet differ from a typical botnet?

The new Mylobot botnet demonstrated new, complex tools and techniques that are modifying botnet attacks. Learn how this botnet differs from a typical botnet with Nick Lewis.

By Nick Lewis • Nov. 13, 2018

Why entropy sources should be added to mobile application vetting

NIST's 'Vetting the Security of Mobile Applications' draft discusses four key areas of general requirements. Learn how further improvements to the vetting process could be made.

By Judith Myerson • Nov. 8, 2018

Latest Symantec acquisitions target endpoint security

Endpoint security startups Appthority and Javelin Networks are the latest Symantec acquisitions as the cybersecurity giant aims to improve its endpoint protection product.

By Peter Loshin • Nov. 6, 2018

How does the public Venmo API pose a threat for users?

The public Venmo API setting puts users at risk by providing detailed insight into their transactions and personal lives. Expert Michael Cobb discusses the risks of public APIs.

By Michael Cobb • Nov. 6, 2018

Mobile security trends: app containers, app wrapping for BYOD

Threats evolve, and so should mobile security strategies. Mike Chapple explains how an app containers and app wrapping can protect enterprise devices and corporate assets.

By Mike Chapple • Nov. 2, 2018