Infrastructure Security: Page

New Comodo CA leadership talks competition, IoT devices

Comodo CA's new chairman Bill Conner and CEO Bill Holtz talk with SearchSecurity about competition in the certificate market and how the internet of things will fuel growth.

By Rob Wright • Jan. 30, 2018

How HTTP security headers can defend enterprise systems

HTTP security headers that have the right configurations can be used as defense methods against cyberattacks. Expert Judith Myerson outlines how to use headers this way.

By Judith Myerson • Jan. 18, 2018

Skygofree Android spyware is a powerful surveillance tool

A new Android spyware tool called Skygofree was described as one of the most powerful surveillance tools and can even capture encrypted messages from WhatsApp.

By Michael Heller • Jan. 17, 2018

TLS 1.3: What it means for enterprise cloud use

The latest draft version of TLS 1.3 is out, and it will likely affect enterprises that use cloud services. Expert Ed Moyle explains the impact on users and their monitoring controls.

By Ed Moyle • Jan. 17, 2018

WPA3 Wi-Fi protocol aims to improve security in 2018

The new WPA3 Wi-Fi protocol aims to improve security for IoT devices and strengthen password security with protections against brute force attacks.

By Michael Heller • Jan. 11, 2018

Security compliance standards as a guide in endpoint plans

Consider security compliance regulations for your industry as a starting point and a guide for planning your specific approach to enterprise endpoint protection.

By Brien Posey • Jan. 11, 2018

The endpoint security controls you should consider now

With the perimeter wall gone, securing enterprise endpoints is even more essential. Learn how automation and other developments can up endpoint protection now.

By Brien Posey • Jan. 11, 2018

How should enterprise firewall settings be reviewed?

Getting firewall settings right is one of the most basic ways to protect enterprise data from accidental exposures. Expert Judith Myerson discusses how to review firewall policies.

By Judith Myerson • Jan. 11, 2018

How is IP theft possible despite cryptographic protections?

Expert Judith Myerson explains how IP theft can happen despite the cryptographic protections in IEEE standard P1735, as well as what can be done to protect intellectual property.

By Judith Myerson • Jan. 10, 2018

NIST botnet security report recommendations open for comments

Federal agencies opened public comments on a draft botnet security report born from the 2017 White House cybersecurity executive order, and experts are generally favorable.

By Michael Heller • Jan. 9, 2018

Mobile app risks: Five things enterprises should consider

Just like any other risk in the enterprise, mobile app risks need to be a top priority. Join Kevin Beaver as he explains the dangers that unsecure mobile apps pose.

By Kevin Beaver • Jan. 9, 2018

Android bootloader: How does it work and what is the risk?

Several vulnerabilities were recently discovered in Android bootloaders via the BootStomp tool. Kevin Beaver explains how they work and what risk these vulnerabilities present.

By Kevin Beaver • Jan. 4, 2018

Get the best botnet protection with the right array of tools

Enterprise anti-botnet defenses, to be effective, must be added in multiple layers. No single security product will do the trick, but the right combo of tools can.

By Mike Chapple • Dec. 21, 2017

Antimalware software: How can Windows 10 disable it?

Kaspersky Lab recently accused Windows 10 of acting as an antivirus block to third-party antimalware software. Discover how your software is being blocked and how this can be fixed.

By Nick Lewis • Dec. 21, 2017

Three reasons to implement an NAC system

The growth in devices on the network has heightened the need for network access control products. This article presents scenarios where an enterprise might need an NAC system.

By Rob Shapland • Dec. 15, 2017

How can platform firmware be protected from attacks?

The NIST published guidance on building up platform firmware resiliency. Expert Judith Myerson looks at the NIST guidelines and the major takeaways for enterprises.

By Judith Myerson • Dec. 12, 2017

iOS updates: Why are some Apple products behind on updates?

A study by Zimperium found that more than 23% of iOS devices aren't running the latest software. Matt Pascucci explains how this is possible, even though Apple controls iOS updates.

By Matthew Pascucci • Dec. 5, 2017

Thor’s OS Xodus

In this excerpt from chapter one of Thor's OS Xodus, author Timothy "Thor" Mullen discusses OS X, privacy, and online safety.

By Syngress & SearchSecurity • Nov. 28, 2017

Multiple Intel firmware vulnerabilities in Management Engine

Security researchers tested the controversial Intel Management Engine and other products, finding multiple Intel firmware vulnerabilities.

By Michael Heller • Nov. 21, 2017

HTTP Strict Transport Security: What are the security benefits?

Google's use of HTTP Strict Transport Security aims to improve web browsing security. Expert Judith Myerson explains how HSTS can make the internet more secure.

By Judith Myerson • Nov. 14, 2017

VMware AppDefense: How will it address endpoint security?

VMware announced AppDefense, its latest effort to help improve endpoint security. Matt Pascucci explains how AppDefense addresses applications in vSphere environments.

By Matthew Pascucci • Nov. 10, 2017

Email security issues: How to root out and solve them

Effectively tackling email security issues requires infosec pros to address a broad range of areas, including cloud, endpoints, user training and more.

By Kevin Beaver • Nov. 9, 2017

How to prepare for potential IPv6 DDoS attacks

Enterprises learn how to prepare for IPv6 with DDoS attack tools. Michael Cobb further addresses the inevitable attacks and what users can do.

By Michael Cobb • Nov. 9, 2017

Killer discovery: What does a new Intel kill switch mean for users?

Cybersecurity company Positive Technologies recently discovered an Intel kill switch in the vendor's Management Engine. Learn more about this kill switch with expert Matt Pascucci.

By Matthew Pascucci • Nov. 9, 2017

WireX botnet: How did it use infected Android apps?

To avoid a mobile device catastrophe, several large tech organizations came together to stop the WireX botnet. Learn how this Android botnet with 300 infected apps was stopped.

By Matthew Pascucci • Nov. 8, 2017