Infrastructure Security: Page

Windows XP patches: Did Microsoft make the right decision?

Microsoft had to make several tradeoffs when developing patches for Windows XP. Expert Nick Lewis explains what these tradeoffs were and how enterprises should respond.

By Nick Lewis • Oct. 26, 2017

Telerik web UI: Can the cryptographic weakness be mitigated?

A cryptographic weakness was discovered in the Telerik web UI. Expert Judith Myerson alerts readers about this weakness and the alternative options for companies to explore.

By Judith Myerson • Oct. 16, 2017

DOJ’s ‘responsible encryption’ is the new ‘going dark’

News roundup: The DOJ calls for 'responsible encryption' to comply with court orders. Plus, there's more bad cybersecurity news for banks, and Accenture data in AWS gets exposed.

By Peter Loshin • Oct. 13, 2017

Addressing web server vulnerabilities below the application layer

Web application security is crucial, but enterprises also need to look below that layer for weaknesses. Kevin Beaver explains how to look for common web server vulnerabilities.

By Kevin Beaver • Oct. 11, 2017

CISSP Domain 4 quiz: Network security basics

Think you know network security basics inside and out? Take this 10-question quiz to find out how well you’ve prepared for Domain 4 of the CISSP exam.

By (ISC) 2 • Oct. 9, 2017

Dnsmasq server flaws unmasked and patched by Google

News roundup: Google researchers find and patch vulnerabilities in the Dnsmasq server that are used widely in routers and IoT devices. Plus, EU-U.S. Privacy Shield challenge and more.

By Peter Loshin • Oct. 6, 2017

Flash’s end of life: How should security teams prepare?

Adobe Flash's end of life is coming, and it includes an incremental removal method, allotting security teams enough time to adjust. Matt Pascucci explains how changes can be made.

By Matthew Pascucci • Oct. 5, 2017

How the Docker REST API can be turned against enterprises

Security researchers discovered how threat actors can use the Docker REST API for remote code execution attacks. Michael Cobb explains this threat to Docker containers.

By Michael Cobb • Oct. 5, 2017

Securing endpoints with supplementary tools protects data

Learn how network access control (NAC), data loss prevention (DLP) and robust data destruction tools secure the data in your corporate endpoints against data loss.

By Michael Cobb • Oct. 2, 2017

How can peer group analysis address malicious apps?

Google is using machine learning and peer group analysis to protect against malicious Android apps in the Google Play Store. Matt Pascucci explains how this works.

By Matthew Pascucci • Oct. 2, 2017

Network lateral movement from an attacker’s perspective

A security researcher describes the network lateral movement process from an attacker's perspective and a few key points of focus for IT pros, at DerbyCon.

By Michael Heller • Sept. 28, 2017

How can a DDoS reflection attack abuse CLDAP?

A new exploit of CLDAP servers can be used for a DDoS reflection attack that gives attackers a 70x boost. Nick Lewis explains how to defend against this new threat.

By Nick Lewis • Sept. 28, 2017

How can the Jenkins vulnerabilities in plug-ins be mitigated?

A wave of Jenkins vulnerabilities related to plug-ins were recently discovered. Expert Judith Myerson explains the flaws and how enterprises should mitigate them.

By Judith Myerson • Sept. 20, 2017

Are long URLs better for security than short URLs?

Shortened URLs are weak on security and easy for attackers to inject with malware. Expert Judith Myerson discusses how long URLs are more secure, despite the inconvenience.

By Judith Myerson • Sept. 18, 2017

How can users detect dangerous open ports in mobile apps?

Some malicious apps can hijack smartphones and expose those devices with open ports. Expert Michael Cobb explains how this happens and how users can protect themselves.

By Michael Cobb • Sept. 14, 2017

How do network management systems simplify security?

Network security teams can find themselves overwhelmed with protecting an enterprise network. Expert Matthew Pascucci explains how network management systems can help with that.

By Matthew Pascucci • Sept. 7, 2017

How can enterprises secure encrypted traffic from cloud applications?

As enterprises use more cloud applications, they generate more encrypted traffic. Expert Matthew Pascucci discusses the challenges that presents for network security teams.

By Matthew Pascucci • Sept. 6, 2017

HTTPS interception gets a bad rap; now what?

Should products intercept Transport Layer Security connections to gain visibility into network traffic? A new study by researchers and U.S.-CERT warn against it.

By Kathleen Richards • Sept. 1, 2017

How is cross-platform malware carried in Word docs?

Cross-platform malware enables attackers to leverage their attacks using infected Microsoft Word docs. Expert Nick Lewis explains how the attacks work and how to defend against them.

By Nick Lewis • Aug. 25, 2017

Google Chrome Enterprise adds management options

The Google Chrome Enterprise offering officially allows organizations to manage Google Play Store apps, extensions, Microsoft Active Directory and integrate VMware on Chromebooks.

By Michael Heller • Aug. 24, 2017

Authorities can’t force smartphone access in iOS 11

IOS 11 will allow users to avoid authorities attempting to force smartphone access by temporarily disabling biometric unlocking of mobile devices.

By Michael Heller • Aug. 17, 2017

What is the best way to secure telematics information?

SMS authentication is often used to secure telematics information, but it may not be strong enough. Expert Judith Myerson discusses why, and how to improve the protection of this data.

By Judith Myerson • Aug. 15, 2017

IoT device security bill mandates security standards

News roundup: U.S. Senators introduce a bipartisan bill to standardize IoT device security for government vendors. Plus, Anthem suffers another data breach, and more.

By Madelyn Bacon • Aug. 4, 2017

A closer look at Kaspersky antimalware protection services

Expert Ed Tittel looks at Kaspersky antimalware product Endpoint Security, which provides multilayered protection against malware, phishing attacks and other exploits.

By Ed Tittel • Aug. 2, 2017

The various offers of Microsoft System Center Endpoint Protection

Expert Ed Tittel examines System Center Endpoint Protection, Microsoft's native Windows antivirus and antimalware security product.

By Ed Tittel • July 31, 2017