Infrastructure Security: Page

How to stop malicious browser add-ons from taking root

Researchers at Malwarebytes discovered several new browser extension threats. Discover how to avoid and properly removed malicious add-ons with expert Nick Lewis.

By Nick Lewis • July 12, 2018

What are the implications of DNS over HTTPS for privacy?

With enterprises testing DNS over HTTPS to encrypt domain name traffic, some fear the potential privacy issues. Discover the challenges and benefits of the new protocol.

By Michael Cobb • July 11, 2018

Common security oversights within an AWS environment

There's often an assumption that AWS systems can't be tested, as they're hosted in the cloud; however, this is not the case. Discover common security oversights in AWS environments.

By Kevin Beaver • July 10, 2018

How to use Packetbeat to monitor Docker container traffic

Docker containers can help secure cloud applications, but malicious traffic can still move to and from those containers on a network. Dejan Lukan explains how to use Packetbeat to monitor such threats.

By Dejan Lukan • June 29, 2018

Ping adds AI-driven API protection with Elastic Beam acquisition

Ping Identity increased its focus on API security with the acquisition of Elastic Beam, a startup that uses artificial intelligence to apply behavioral security on enterprise APIs.

By Rob Wright • June 26, 2018

New WPA3 security protocol simplifies logins, secures IoT

Latest WPA3 security protocol update adds new features to the Wi-Fi access specification for simple and secure wireless access for individuals, as well as enterprises.

By Peter Loshin • June 26, 2018

Container orchestration systems at risk by being web-accessible

Security researchers found tens of thousands of container orchestration systems accessible via the web, which in itself puts those dashboards at risk of attack.

By Michael Heller • June 25, 2018

How to secure cloud buckets for safer storage

Cloud buckets that enterprises use for storage can provide security benefits, but they also come with some risks. Expert Frank Siemons discusses the risks and how to mitigate them.

By Frank Siemons • June 20, 2018

Security Servicing Commitment clarifies Microsoft patch policy

Microsoft's unspoken patch management policy has been codified in the new Security Servicing Commitment, which outlines what flaws will be patched monthly and which will be in Windows updates.

By Michael Heller • June 14, 2018

How to use the OODA loop to improve network security

The OODA loop can be used to establish cyber deception against hackers to improve network security. Learn the OODA steps and how they can be applied to security with Kevin Fiscus.

By Kevin Fiscus • June 14, 2018

Spectre v4 fix and Windows DNS patch in June Patch Tuesday

A Windows DNS patch for both desktops and servers headlines Microsoft's June 2018 Patch Tuesday, but the release also includes mitigations for Spectre v4 and more.

By Michael Heller • June 13, 2018

AI and machine learning in network security advance detection

Applying AI, and specifically machine learning, in network security helps protect enterprises against advanced persistent threats and sophisticated cybercriminals.

By Nick Cavalancia • June 7, 2018

How lattice-based cryptography will improve encryption

As the prospect of quantum computing-based attacks grows, the need for stronger encryption increases. Expert Michael Cobb discusses lattice-based cryptography as an option.

By Michael Cobb • June 7, 2018

Research claims ‘widespread’ Google Groups misconfiguration troubles

Researchers from Kenna Security claim a Google Groups misconfiguration has exposed sensitive data for many organizations, but it is unclear just how widespread the issue might be.

By Michael Heller • June 5, 2018

How entropy sources help secure applications with SDLC

Some applications need cryptographic algorithms to test and work properly. Expert Judith Myerson discusses this division in terms of the software development lifecycle.

By Judith Myerson • June 5, 2018

How layered security can help and hinder application security

The growth of technology includes the growth of layered security. Join expert Kevin Beaver as he explains the pros and cons of layered defenses for application security.

By Kevin Beaver • May 31, 2018

Cloud endpoint security: Balance the risks with the rewards

While cloud endpoint security products, such as antivirus software, provide users with many benefits, the cloud connection also introduces risks. Expert Frank Siemons explains.

By Frank Siemons • May 30, 2018

How was a Cisco firewall vulnerability exploited by threat actors?

Threat actors exploited a critical Cisco firewall vulnerability that received a CVSS score of 10. Discover how this flaw works and how it was exploited with Judith Myerson.

By Judith Myerson • May 29, 2018

Dragos’ Robert Lee explains why ICS security isn’t all doom and gloom

Dragos' Robert Lee talks with SearchSecurity at RSA Conference 2018 about why there are reasons to be optimistic about the state of ICS security, despite growing threats.

By Rob Wright • May 25, 2018

Efail flaws highlight risky implementations of PGP and S/MIME

The messy disclosure of the Efail flaws raised questions about the security of email encryption, while experts said S/MIME may be more at risk than some PGP implementations.

By Michael Heller • May 14, 2018

Three IoT encryption alternatives for enterprises to consider

The use of cryptography alternatives for IoT devices grants users certain benefits and potential security challenges. Learn more about each alternative with expert Judith Myerson.

By Judith Myerson • May 10, 2018

Protecting the DNS protocol: How DNSSEC can help

Securing the DNS protocol is no joke. Learn what the DNS Security Extensions are and the efforts the United States government is taking to push DNSSEC adoption.

By Karen Kent • May 9, 2018

Ways to solve DNS security issues in your organization

Get up to speed fast on means and methods for reducing or eliminating security-related issues in DNS, an integral service upon which the internet depends.

By Karen Kent • May 9, 2018

SentinelOne CEO: Endpoint security market full of ‘noise and confusion’

In part two of the interview with SentinelOne CEO Tomer Weingarten, he discusses how niche products and venture capital investments have affected the endpoint security space.

By Rob Wright • April 27, 2018

IXPs asked to mind their ‘MANRS’ to improve routing security

The Internet Society expands its Mutually Agreed Norms for Routing Security, or MANRS, to IXPs as a means to protect the internet from route hijacking, leaks and IP address spoofing.

By Peter Loshin • April 26, 2018