Infrastructure Security: Page

Mobile security trends: app containers, app wrapping for BYOD

Threats evolve, and so should mobile security strategies. Mike Chapple explains how an app containers and app wrapping can protect enterprise devices and corporate assets.

By Mike Chapple • Nov. 2, 2018

The first sandboxed antivirus is Windows Defender

Microsoft created the first sandboxed antivirus solution in its latest Insider version of Windows Defender for Windows 10, moving proactively to harden the product against attacks.

By Michael Heller • Oct. 31, 2018

What Microsoft’s InPrivate Desktop feature could mean for enterprises

Microsoft's secretive, potential new feature InPrivate Desktop could give security teams access to disposable sandboxes. Expert Ed Moyle explains how the feature could work.

By Ed Moyle • Oct. 31, 2018

How was Kea DHCP v1.4.0 affected by a security advisory?

Kea, an open source DHCP server, was issued a medium security advisory for a flaw that causes memory leakage in version 1.4.0. Discover the workarounds with Judith Myerson.

By Judith Myerson • Oct. 26, 2018

How to protect enterprise ICS networks with firewalls

ICS network security can be improved using firewalls. Expert Ernie Hayden explains how ICS-specific firewalls can help keep ICS networks strong and protected.

By Ernie Hayden • Oct. 25, 2018

Guide to identifying and preventing OSI model security risks: Layers 4 to 7

Each layer of the Open Systems Interconnection presents unique vulnerabilities that could move to other layers if not properly monitored. Here's how to establish risk mitigation strategies for OSI layer security in Layers 4 through 7.

By Daniel Allen • Oct. 24, 2018

How security, compliance standards prevent OSI layer vulnerabilities

Each layer of the Open Systems Interconnection presents unique -- but connected -- vulnerabilities. Here's how to establish OSI security and compliance best practices.

By Daniel Allen • Oct. 24, 2018

How do newly found flaws affect robot controllers?

Several vulnerabilities were found in controllers made by Universal Robots. Discover what these controllers are used for and how threat actors can exploit these vulnerabilities.

By Judith Myerson • Oct. 23, 2018

What are DMARC records and can they improve email security?

Last year, the U.S. federal government mandated that by October 2018, all agencies must have DMARC policies in place. Learn how complicated this requirement is with Judith Myerson.

By Judith Myerson • Oct. 22, 2018

Removable storage devices: Why are companies banning them?

IBM banned removable storage devices to encourage employees to use the company's internal file-sharing system. Learn how a ban like this can improve enterprise security.

By Nick Lewis • Oct. 19, 2018

New libSSH vulnerability gives root access to servers

A 4-year-old libSSH vulnerability can allow attackers to easily log in to servers with full administrative control, but it is still unclear exactly how many devices are at risk.

By Michael Heller • Oct. 18, 2018

How does the resurgent VPNFilter botnet target victims?

After a comeback of the Russian-built VPNFilter botnet, home network devices are at risk. Learn how this malware targets victims with expert Nick Lewis.

By Nick Lewis • Oct. 18, 2018

How did Netflix phishing attacks use legitimate TLS certificates?

Hackers can imitate the design and domain name of popular sites like Netflix to steal credentials. Expert Michael Cobb explains how these Netflix phishing attacks work.

By Michael Cobb • Oct. 11, 2018

Google security audit begets product changes, German probe

A Google security audit uncovered a glitch in Google Plus that exposed data from nearly 500,000 accounts, causing the company to shutter the social network and spur a German data protection probe.

By Michael Heller • Oct. 10, 2018

How do hackers use legitimate admin tools to compromise networks?

Hackers use legitimate admin tools to exfiltrate data in living off the land attacks that are hard to detect. Learn about this cyberattack tactic from expert Michael Cobb.

By Michael Cobb • Oct. 10, 2018

How does TLBleed abuse the Hyper-Threading feature in Intel chips?

TLBleed exploits Intel's HTT feature to leak data via side-channel attacks. Learn about how TLBleed obtains sensitive memory information from expert Michael Cobb.

By Michael Cobb • Oct. 8, 2018

Cloud-first? User and entity behavior analytics takes flight

The power and cost savings associated with software as a service are tempting companies to consider applications for security analytics both on premises and in the public cloud.

By Kathleen Richards • Oct. 2, 2018

Alphabet’s Chronicle launches VirusTotal Enterprise

VirusTotal has a new look, thanks to Alphabet's Chronicle, including new enterprise features for faster malware searches, as well as the ability to keep submitted data private.

By Rob Wright • Sept. 28, 2018

Why communication is critical for web security management

Conveying the importance of web security to management can be difficult for many security professionals. Kevin Beaver explains how to best communicate with the enterprise.

By Kevin Beaver • Sept. 27, 2018

Controversial Chrome login feature to be partially rolled back

Google will modify the next version of Chrome in an attempt to appease critics of the browser's cookie retention functionality and automatic Chrome login feature.

By Michael Heller • Sept. 26, 2018

Secure encrypted virtualization: How is this technology exploited?

Researchers claim to have found a new attack against VMs that affects SEV technology. Expert Judith Myerson explains what this attack is and how it can be exploited.

By Judith Myerson • Sept. 20, 2018

WPA3 protocol: Should enterprises implement the changes?

The Wi-Fi Alliance released the updated WPA3 protocol, adding security enhancements to the Wi-Fi access process. Learn why enterprises should update with Judith Myerson.

By Judith Myerson • Sept. 19, 2018

What is VPNFilter malware and how can users protect themselves?

A new threat named VPNFilter was discovered by cybersecurity researchers after home and office routers were compromised. Learn how this malware works with Judith Myerson.

By Judith Myerson • Sept. 18, 2018

Trend Micro apps fiasco generates even more questions

In addition to other Trend Micro apps banished from the Mac App Store for gathering data inappropriately, the company has admitted to publishing the Open Any Files app.

By Michael Heller • Sept. 13, 2018

SaaS platform security: The challenges of cloud network security

Organizations have the necessary tools to protect data stored and processed in IaaS platforms. Learn why SaaS platform security remains a challenge from expert Rob Shapland.

By Rob Shapland • Sept. 12, 2018