Infrastructure Security: Page

Passive DNS techniques can reduce DNS abuse

Presenting at RSAC 2018, Farsight Security's Merike Kaeo explains how defenders can adopt passive techniques to reduce DNS abuse and stop attacks before they happen.

By Peter Loshin • April 19, 2018

WebAuthn API gets standards nod from W3C, FIDO Alliance

W3C and the FIDO Alliance have given websites a new tool for doing FIDO-compliant authentication, as the WebAuthn authentication protocol is promoted to W3C Candidate Recommendation.

By Peter Loshin • April 10, 2018

Zero-trust model promises increased security, decreased risk

The zero-trust model takes focused and sustained effort, but promises to improve most companies' risk posture. Learn what it takes to get the most out of zero trust.

By Johna Johnson • April 6, 2018

Cloudflare 1.1.1.1 DNS promises more private web browsing

Cloudflare promises its new 1.1.1.1 DNS service is faster and enables better privacy for web browsing than competing offerings, but it's unclear how different its service will be.

By Michael Heller • April 3, 2018

Marcus Ranum decodes hardware vulnerabilities with Joe Grand

Computer hardware designs with dangerous security flaws? That's no surprise to renowned hardware hacker Grand.

By Marcus Ranum • April 3, 2018

AWS S3 bucket security falls short at high-profile companies

Everyone is putting their data in the cloud, from IT staff to department heads. With functionality galore, basic security measures too often go unchecked.

By Kathleen Richards • April 3, 2018

What VPN alternatives should enterprises consider using?

VPN vulnerabilities in products from popular vendors were recently found to enable serious threats. Discover how detrimental these threats are and best alternatives to the use of VPNs.

By Judith Myerson • March 30, 2018

TLS 1.3 update is finalized with encryption upgrade

The IETF approves the TLS 1.3 encryption protocol upgrade after four years and 28 versions; improvements include better security and performance, as well as middlebox support.

By Peter Loshin • March 27, 2018

Emotet Trojan: How to defend against fileless attacks

An increase in fileless malware, including PowerShell malware, was reported in McAfee Labs' December 2017 Threat Report. Discover how enterprises can defend again fileless attacks.

By Nick Lewis • March 27, 2018

Durov refuses to hand over Telegram encryption keys to FSB

CEO Pavel Durov continued to assert that Telegram encryption keys will not be shared with the FSB, despite the Russian Supreme Court denying the company's appeal.

By Michael Heller • March 21, 2018

Secure DevOps: Inside the five lifecycle phases

Secure DevOps and cloud computing are altering the design, build, deployment and operation of online systems. Learn more from Eric Johnson and Frank Kim of the SANS Institute.

By Eric Johnson and Frank Kim • March 20, 2018

Leaked report on AMD chip flaws raises ethical disclosure questions

Researchers announced AMD chip flaws without the coordinated disclosure procedure, and a leak of the research to a short seller has raised further suspicions about the process.

By Michael Heller • March 16, 2018

Researchers claim AMD flaws threaten Ryzen, EPYC chips

Ryzen and EPYC AMD flaws were partially detailed with just 24 hours' disclosure notice, despite potentially significant exploits, including secure processor takeover or security bypass.

By Michael Heller • March 13, 2018

The Keeper browser extension flaw: How can users stay secure?

The Keeper browser extension had a vulnerability that highlighted security issues with password managers. Expert Michael Cobb looks at how to avoid security flaws in these tools.

By Michael Cobb • March 5, 2018

VMs per host: What are the risks of multiple connections?

While there are no set rules, there are some security recommendations when it comes to virtual machines running on one host. Learn the best practices with expert Matt Pascucci.

By Matthew Pascucci • March 2, 2018

Memcrashed DDoS amplification exploits memcached UDP port

Memcrashed, a devastating new DDoS amplification attack that exploits UDP port 11211, is only possible when memcached servers are exposed to the public internet.

By Peter Loshin • March 1, 2018

Protecting safety instrumented systems from malware attacks

Trisis malware targets safety instrumented systems and puts industrial control systems at risk. Expert Ernie Hayden reviews what to know about SIS and its security measures.

By Ernie Hayden • Feb. 20, 2018

Where does security fit into SDLC phases?

In each phase of the software development life cycle, there is an opportunity for infosec pros to add value. Learn more in this video with expert Adam Gordon.

By (ISC) 2 • Feb. 19, 2018

Antivirus tools: Are two programs better than one?

Antivirus software is crucial to your device's security. However, less is often more, especially when considering a secondary free antivirus program. Nick Lewis explains why.

By Nick Lewis • Feb. 19, 2018

Embedded application security: Inside OWASP’s best practices

OWASP released a draft of new guidelines for creating secure code within embedded software. Expert Judith Myerson discusses best practices, pitfalls to avoid and auditing tools.

By Judith Myerson • Feb. 15, 2018

Critical Broadcom flaws discovered in Lenovo ThinkPads

Two critical flaws in Broadcom Wi-Fi chips disclosed last year were thought to affect only Apple and Android devices, but Lenovo now says ThinkPad models are vulnerable, too.

By Rob Wright • Feb. 13, 2018

How to manage application security risks and shortcomings

A lack of proper testing, communication and insight into best practices all contribute to application security shortcomings. Kevin Beaver explains how to manage the risks.

By Kevin Beaver • Feb. 6, 2018

Fight a targeted cyberattack with network segmentation, monitoring

It takes a variety of tactics, including network segmenting and monitoring, to safeguard the network. Learn the latest defenses to keep your network safe.

By Michael Cobb • Feb. 5, 2018

Katyusha Scanner: How does it work via a Telegram account?

The Katyusha Scanner is based on the open source penetration test scanner Arachni. However, it has been modified to work through Telegram accounts. Nick Lewis explains how it works.

By Nick Lewis • Feb. 1, 2018

Google got faster pulling bad Android apps from Play Store

Google claims it is faster than ever at removing or rejecting bad Android apps from the Play Store before anyone has a chance to install the troublesome app.

By Michael Heller • Jan. 31, 2018