Infrastructure Security: Page

Top 21 Kali Linux tools and how to use them

Kali Linux includes many tools tailored to beefing up network security. Getting familiar with them takes a lot of work, but the benefits they provide can be wide-ranging.

By Damon Garn • Feb. 7, 2025

Cloud PAM benefits, challenges and adoption best practices

Cloud PAM helps organizations manage access to privileged accounts to keep cloud data and applications secured. Is it right for your organization?

By Dave Shackleford • Feb. 4, 2025

What is Internet Key Exchange (IKE)?

Internet Key Exchange (IKE) is a standard protocol used to set up a secure and authenticated communication channel between two parties via a virtual private network (VPN).

By Alexander Gillis, Gavin Wright, Andrew Zola • Feb. 4, 2025

WatchTowr warns abandoned S3 buckets pose supply chain risk

WatchTowr researchers found that they could reregister abandoned Amazon S3 buckets and detail alarming ways that threat actors could exploit the attack surface.

By Arielle Waldman • Feb. 4, 2025

What is DOS (Disk Operating System)?

A DOS, or disk operating system, is an operating system (OS) that runs from a disk drive. The term can also refer to a particular family of disk operating systems, most commonly MS-DOS (Microsoft DOS).

By Rahul Awati , Michael Cobb • Jan. 31, 2025

AMD processor vulnerability inadvertently leaked early

The flaw was revealed when hardware manufacturer Asus published a patch for an 'AMD Microcode Signature Verification Vulnerability' to a gaming motherboard update page.

By Alexander Culafi • Jan. 24, 2025

How to prevent living-off-the-land attacks

Living-off-the-land attacks have been around since the dawn of modern computing, but they're drawing new attention from threat actors eager to find ways to penetrate defenses.

By Amanda Scheldt • Jan. 21, 2025

Experts optimistic on FCC’s Cyber Trust Mark for IoT devices

The launch of the FCC's U.S. Cyber Trust Mark label for IoT devices will include internet-connected home security cameras, smart home appliances, baby monitors and more.

By Alexander Culafi • Jan. 9, 2025

2025 cloud-native cybersecurity predictions

Join Informa TechTarget's Enterprise Strategy Group analyst Melinda Marks as she looks at what 2025 has in store for cloud-native security.

By Melinda Marks • Jan. 3, 2025

3 network security predictions for 2025

What does 2025 have in store for network security? Analyst John Grady from Informa TechTarget's Enterprise Strategy Group shares his predictions for the upcoming year.

By John Grady • Dec. 26, 2024

What is a proxy firewall?

A proxy firewall is a network security system that protects network resources by filtering messages at the application layer.

By Rahul Awati • Dec. 23, 2024

Aqua Security warns of significant risks in Prometheus stack

The cloud security vendor called on Prometheus to provide users with additional safeguards to protect against misconfigurations discovered in the open source monitoring tool.

By Arielle Waldman • Dec. 12, 2024

Microsoft enhanced Recall security, but will it be enough?

Microsoft's controversial Recall feature began rolling out to certain Windows Insiders with Copilot+ PCs in November, with more expected to participate this month.

By Alexander Culafi • Dec. 10, 2024

What is obfuscation and how does it work?

Obfuscation means to make something difficult to understand. Programming code is often obfuscated to protect intellectual property or trade secrets, and to prevent an attacker from reverse engineering a proprietary software program.

By Rahul Awati , Ben Lutkevich • Nov. 27, 2024

What is IPsec (Internet Protocol Security)?

IPsec (Internet Protocol Security) is a suite of protocols and algorithms for securing data transmitted over the internet or any public network.

By Peter Loshin, Katie Terrell Hanna • Nov. 25, 2024

What is Extensible Authentication Protocol (EAP)?

Extensible Authentication Protocol (EAP) is a protocol for wireless networks that expands the authentication methods used by Point-to-Point Protocol (PPP), a protocol often used when connecting a computer to the internet.

By Eva Webster, Katie Terrell Hanna • Nov. 25, 2024

How to test firewall rules with Nmap

Using Nmap to identify potential shortfalls in the rules used to govern firewall performance gives teams an easy and cost-effective way to plug holes in their security frameworks.

By Damon Garn • Nov. 21, 2024

How to build a Python port scanner

Python offers beginning coders a lot of flexibility and is a novel way to build tools designed to probe port performance across your network.

By Damon Garn • Nov. 7, 2024

10 API security testing tools to mitigate risk

Securing APIs properly requires testing throughout their design lifecycle. Explore 10 leading API security testing tools for automated, continuous security testing.

By Dave Shackleford , Michael Cobb • Nov. 4, 2024

API security testing checklist: 7 key steps

APIs are a common attack vector for malicious actors. Use our API security testing checklist and best practices to protect your organization and its data.

By Dave Shackleford , Michael Cobb • Nov. 1, 2024

Study shows securing SaaS applications growing in importance

Securing all types of SaaS applications ranks high among security pros, but the broad mandate can mean the need for better SaaS security platforms and tools.

By John Grady • Oct. 29, 2024

DDoS mitigation: How to stop DDoS attacks

A DDoS attack can wreak havoc on an organization, but a number of strategies can help stop such attacks and minimize their damage.

By Michael Cobb • Oct. 25, 2024

AWS CDK security issue could lead to account takeovers

Aqua Security researchers discovered AWS Cloud Development Kit is susceptible to an attack vector the vendor refers to as 'shadows resources,' which can put accounts at risk.

By Rob Wright • Oct. 24, 2024

Study outlines ‘severe’ security issues in cloud providers

Possible security issues involving cloud systems should be taken seriously, as the paper noted the five vendors outlined are responsible for more than 22 million users.

By Alexander Culafi • Oct. 21, 2024

How to prevent DDoS attacks

Organizations have many methods they can use to prevent DDoS attacks, including increasing bandwidth and server scalability, rate limiting and using a web application firewall.

By Ravi Das • Oct. 18, 2024