Infrastructure Security: Page

What is the SS7 protocol and what are its security implications?

The SS7 protocol has been a source of controversy lately because of its security vulnerabilities. Expert Judith Myerson explains what the protocol is and what its issues are.

By Judith Myerson • May 18, 2017

How effective is geofencing technology as a security method?

Geofencing technology is increasingly being used as a security tactic, such as to control access to servers with DNS settings. Expert Michael Cobb explains how it works.

By Michael Cobb • May 5, 2017

Mozilla: Symantec certificate remediation plan not enough

Mozilla reviews the counterproposal from Symantec and urges the CA giant to opt for Google's recommendation to outsource its certificate activities.

By Peter Loshin • May 2, 2017

Handbook of System Safety and Security

In this excerpt from chapter 10 of Handbook of System Safety and Security, editor Edward Griffor discusses cloud and mobile cloud architecture and security.

By SearchSecurity and Syngress • April 27, 2017

Symantec certificate authority issues, answered

Google and Mozilla weigh the proper response to Symantec certificate authority issues, as the CA giant prepares an alternative proposal for reinstating trust.

By Peter Loshin • April 25, 2017

How does Ticketbleed affect session ID security?

The Ticketbleed bug in some F5 Networks products caused session IDs and uninitialized memory to leak. Expert Judith Myerson explains what a session ID is and how attackers use it.

By Judith Myerson • April 24, 2017

DARPA’s SSITH program takes aim at hardware vulnerabilities

News roundup: DARPA's SSITH program tackles hardware vulnerabilities for better security. Plus, new risks placed in OWASP Top 10, SWIFT launches new anti-fraud tool, and more.

By Madelyn Bacon • April 14, 2017

Symantec CA woes debated by browser community

Compliance with CA/B Forum Baseline Requirements was debated after Symantec CA posted responses to 14 issues raised by Mozilla developers.

By Peter Loshin • April 12, 2017

Preparing enterprise systems for the scriptless Linux exploit

The scriptless Linux exploit deviates from usual methods that security tools recognize as attacks. Expert Nick Lewis explains how the exploit works and how to prevent it.

By Nick Lewis • April 7, 2017

EU encryption backdoor options for messaging apps set for June

Messaging app developers will be offered 'three or four' legislative and non-legislative options for encryption backdoor access for EU law enforcement.

By Peter Loshin • March 31, 2017

HTTPS traffic has yet to surpass HTTP traffic, Fortinet study shows

News roundup: HTTPS traffic has yet to surge, despite its security benefits, according to a report. Plus, the latest in the Apple extortion; a Mirai attack lasted 54 hours; and more.

By Madelyn Bacon • March 31, 2017

Google Cloud KMS: What are the security benefits?

Google Cloud KMS is a new encryption key management service available for Google customers. Expert Matthew Pascucci discusses how this service works and its security benefits.

By Matthew Pascucci • March 31, 2017

How can users tell if Windows SMB v1 is on their systems?

US-CERT encouraged users to use newer versions of Windows SMB, since version one is out of date. Expert Matthew Pascucci explains how to tell if SMB v1 is on your systems.

By Matthew Pascucci • March 28, 2017

Android VPN apps: How to address privacy and security issues

New research on Android VPN apps revealed the extent of their privacy and security flaws. Expert Kevin Beaver explains how IT professionals can mitigate the risks.

By Kevin Beaver • March 28, 2017

DV certificates abused, but policing may not be possible

Research shows DV certificates can be a prime target for phishing and malware operators, but experts are unsure how certificate authorities should deal with the issue.

By Michael Heller • March 23, 2017

SonicWALL SSL VPN provides security for organizations of any size

The SonicWALL SSL VPN protects remote client devices by creating a secure connection to enterprise networks, with many options for customized security features.

By Karen Kent • March 15, 2017

Cisco IOS SSL VPN offers security through internet routers

Expert Karen Scarfone outlines the features of the Cisco IOS SSL VPN and explains how it secures enterprise communications.

By Karen Kent • March 13, 2017

Chrome backs out of TLS 1.3 support after proxy issues

After Google rolled out the latest version of Chrome, Blue Coat proxy software issues prompt rollback of TLS 1.3 support in latest version of Chrome browser.

By Peter Loshin • Feb. 27, 2017

IoT malware: How can internet-connected devices be secured?

IoT botnet DDoS attacks have been growing in volume and impact. Expert Nick Lewis explains how you can ensure your internet-connected devices are secure from IoT malware.

By Nick Lewis • Feb. 23, 2017

How does BENIGNCERTAIN exploit Cisco PIX firewalls?

The BENIGNCERTAIN exploit affects certain versions of Cisco systems using the IKEv1 protocol. Expert Nick Lewis explains what the protocol does and how the vulnerability works.

By Nick Lewis • Feb. 21, 2017

Connected medical devices spark debate at RSA Conference session

An RSA Conference session on a new attack on connected medical devices led to a spirited debate on vulnerability disclosure and manufacturer responsibility.

By Rob Wright • Feb. 16, 2017

How to use DNS reverse mapping to scan IPv6 addresses

Enterprises looking to perform IPv6 address scans can use DNS reverse mapping techniques. In part one of this tip, expert Fernando Gont explains how the process works.

By Fernando Gont • Feb. 13, 2017

Rapid7’s Brown and Beardsley address IoT security issues

Rapid7's Rebekah Brown and Tod Beardsley talk about IoT security issues, including new cars, blaming users for poor implementations and why NAT is the best firewall ever.

By Peter Loshin • Feb. 8, 2017

How Windows hardening techniques can improve Windows 10

Windows 10 may be the most secure Windows ever, but expert Ed Tittel explains how to use Windows hardening techniques to make systems even more secure.

By Ed Tittel • Feb. 7, 2017

Corero Network Security on why DDoS mitigation strategy must improve

Corero Network Security's Dave Larson talks with SearchSecurity about how the Mirai botnet attacks have forced companies to change their DDoS mitigation strategy.

By Rob Wright • Feb. 7, 2017