Infrastructure Security: Page

How does Overseer spyware work on infected Android apps?

Spyware was found on infected Android apps, which were meant to convey embassy information and news, in the Google Play Store. Expert Michael Cobb explains how the spyware works.

By Michael Cobb • Feb. 6, 2017

What are the best anti-network reconnaissance tools for Linux systems?

Anti-network reconnaissance tools can prevent attackers from getting access to system information. Expert Judith Myerson goes over the best enterprise options.

By Judith Myerson • Feb. 2, 2017

Looming cloud security threats: How attacks will follow your data

You can move your data to cloud-based systems and web services, but you can't hide it there. Hackers and predators have more ways to find it.

By Johannes Ullrich • Feb. 1, 2017

How does DNSChanger take advantage of WebRTC protocols?

WebRTC protocols are being targeted by a new version of the DNSChanger exploit kit. Judith Myerson explains how these attacks work and what enterprises should know.

By Judith Myerson • Feb. 1, 2017

Monitoring outbound traffic on your network: What to look for

Outbound network traffic remains a weakness for many enterprises and is a major attack vector. Expert Kevin Beaver explains how to spot irregular occurrences in your network.

By Kevin Beaver • Jan. 24, 2017

US-CERT reminds users that Windows SMB v1 needs to die

Experts say US-CERT is taking advantage of a potential -- but unverified -- vulnerability in Windows SMB v1 to remind enterprise users the outdated service should be disabled.

By Michael Heller • Jan. 19, 2017

In a post-Mirai world, the FTC wants more secure routers from D-Link

The Federal Trade Commission filed a lawsuit against D-Link, and experts said the move was likely to push more secure routers in the wake of the Mirai botnet attacks.

By Michael Heller • Jan. 9, 2017

FTC launches competition to improve IoT device security

News roundup: FTC starts a contest to create a better IoT device security tool. Plus, ransomware is now illegal in California; Google patches 29 critical Android flaws; and more.

By Madelyn Bacon • Jan. 6, 2017

SSL certificate validation flaw discovered in Kaspersky AV software

Google Project Zero discovers more antivirus vulnerabilities. This time, the issues are with how Kaspersky Lab handles SSL certificate validation and CA root certificates.

By Peter Loshin • Jan. 4, 2017

Industrial Network Security

In this excerpt from chapter 3 of Industrial Network Security, authors Eric D. Knapp and Joel Langill discuss the history and trends of industrial cybersecurity.

By SearchSecurity and Syngress • Dec. 30, 2016

SWIFT network communications: How can bank security be improved?

The SWIFT network has increasingly been abused by cybercriminals to carry out bank fraud and theft. Expert Michael Cobb explains possible ways to boost security.

By Michael Cobb • Dec. 23, 2016

VM isolation technique considerations for enterprises

VM isolation techniques are good strategies to prevent infections from spreading to the entire cloud environment. Ed Moyle explains what enterprises need to know about isolation.

By Ed Moyle • Dec. 21, 2016

DNS Security: Defending the Domain Name System

In this excerpt from chapter two of DNS Security: Defending the Domain Name System, authors Allan Liska and Geoffrey Stowe discuss why DNS security is important.

By Syngress and SearchSecurity • Nov. 29, 2016

Cloud DDoS protection: What enterprises need to know

DDoS attacks are a continuing problem, and enterprises should consider using cloud DDoS protection services. Expert Frank Siemons discusses the cloud options.

By Frank Siemons • Nov. 2, 2016

RSA NetWitness Logs and Packets: Security analytics product overview

Expert Dan Sullivan examines RSA's NetWitness Logs and Packets, security analytics tools that collect and review logs, packets and behavior to detect enterprise threats.

By Dan Sullivan • Sept. 15, 2016

WinMagic SecureDoc: Full-disk encryption product overview

Expert Karen Scarfone examines the features of WinMagic's SecureDoc, a full-disk encryption product for laptops, desktops, mobile devices and servers.

By Karen Kent • Aug. 17, 2016

Mojo AirTight WIPS overview

Expert Karen Scarfone looks at the features and functionality of Mojo Networks' AirTight WIPS, a wireless intrusion prevention system designed to detect and block WLAN attacks.

By Karen Kent • July 29, 2016

Automated Security Analysis of Android and iOS Applications

In this excerpt of Automated Security Analysis of Android and iOS Applications with Mobile Security Framework, authors Ajin Abraham and Henry Dalziel discuss mobile application penetration testing.

By SearchSecurity and Syngress • July 29, 2016

How to start building an enterprise application security program

Building an effective application security program can be daunting. Sean Martin talks with experts about the best first steps enterprises should take.

By Sean Martin • July 25, 2016

Aruba RFProtect WIPS: Product overview

Expert Karen Scarfone examines the features of Aruba RFProtect, a wireless intrusion prevention system to detect and block WLAN attacks against enterprise networks.

By Karen Kent • June 22, 2016

Check Point Next Generation Firewall: Product overview

Check Point Next Generation Firewall family combines firewalls with unified threat management technology, VPNs and more. Expert Mike O. Villegas takes a closer look.

By Mike Villegas • June 20, 2016

Cisco ASA with FirePOWER: NGFW product overview

Cisco combined the ASA series firewall with SourceFire's FirePOWER threat and malware detection capabilities. Expert Mike O. Villegas takes a closer look at this NGFW.

By Mike Villegas • June 17, 2016

How can Kerberos protocol vulnerabilities be mitigated?

Microsoft's Kerberos protocol implementation has long-standing issues with its secret keys. Expert Michael Cobb explains how to mitigate the authentication vulnerabilities.

By Michael Cobb • May 6, 2016

Proper network segments may prevent the next breach

Companies still fail to implement secure network segmentation and role-based access. Here's how to protect your sensitive data and stay out of the headlines.

By Robert Lemos • May 2, 2016

Voltage SecureMail encryption tool: Product overview

Expert contributor Karen Scarfone takes a look at Voltage SecureMail for encrypting email messages in the enterprise.

By Karen Kent • April 14, 2016