Infrastructure Security: Page

CrowdStrike extends cloud security to Mission Cloud customers

CrowdStrike Falcon Cloud Security and Falcon Complete Cloud Detection and Response (CDR) will be made available through the Mission Cloud One AWS MSP platform.

By Alexander Culafi • April 18, 2024

Stateful vs. stateless firewalls: Understanding the differences

Stateful firewalls are the norm in most networks, but there are still times where a stateless firewall fits the bill. Learn how these firewalls work and what approach might be best.

By Michael Cobb • April 18, 2024

OT security vendor Nozomi Networks lands Air Force contract

Nozomi Networks CEO Edgard Capdevielle said the $1.25 million contract will be a guarantee that 'our products will continue to meet the requirements of the Air Force.'

By Alexander Culafi • April 16, 2024

4 types of cloud security tools organizations need in 2024

From CIEM to SSE, these four types of cloud security tools help boost security efforts as organizations continue to expand their cloud environments.

By Dave Shackleford • April 15, 2024

Key software patch testing best practices

Every company has to update and patch its software, but without careful testing, serious problems can occur. Here's how to make sure you're following the right steps.

By Michael Cobb • April 15, 2024

5 top OT threats and security challenges

Securing operational technology is particularly critical but also especially challenging. Consider these top OT threats and how to manage them.

By Karen Kent • April 4, 2024

Cloud account hijacking: How it works and how to prevent it

The ability to identify the various methods of cloud account hijacking is key to prevention. Explore three ways to limit potential consequences of cloud credential compromise.

By Ed Moyle • March 25, 2024

Agent vs. agentless security: Learn the differences

Enterprises can either use an agent or agentless approach to monitor and secure their networks. Each approach has benefits and drawbacks.

By Michael Cobb • March 25, 2024

Exploitation activity increasing on Fortinet vulnerability

The Shadowserver Foundation recently saw an increase in exploitation activity for CVE-2024-21762, two days after a proof-of-concept exploit was published.

By Arielle Waldman • March 18, 2024

virus signature (virus definition)

A virus signature, also known as a 'virus definition,' is a piece of code with a unique binary pattern that identifies a computer virus or family of viruses.

By Robert Sheldon • March 14, 2024

5 PaaS security best practices to safeguard the app layer

Underlying APIs, language choice and cybersecurity features can vary widely across PaaS providers. These five security best practices can help in almost any PaaS scenario.

By Ed Moyle • March 11, 2024

How to use a jump server to link security zones

Jump servers are a perfect example of less is more. By using these slimmed-down boxes, administrators can connect to multiple resources securely.

By Damon Garn • Feb. 26, 2024

GitHub Copilot replicating vulnerabilities, insecure code

Research from Snyk shows that AI assistants such as GitHub Copilot, which offer code completion suggestions, often amplify existing bugs and security issues in a user's codebase.

By Rob Wright • Feb. 23, 2024

Apple unveils PQ3 post-quantum encryption for iMessage

Apple said its new PQ3 protocol for iMessage is the first of its kind and addresses both future threats from quantum computing as well as "harvest now, decrypt later" attacks.

By Alexander Culafi • Feb. 21, 2024

Top metaverse cybersecurity challenges: How to address them

As the metaverse takes shape, companies must consider a slew of new cybersecurity challenges and how to deal with them.

By Ashwin Krishnan • Feb. 12, 2024

mobile security (wireless security)

Mobile security, also known as wireless security, refers to the measures taken to protect smartphones, tablets, laptops, smartwatches and other portable computing devices and the networks they connect to, from threats and vulnerabilities associated with wireless computing.

By Brien Posey, Kinza Yasar, Ivy Wigmore • Feb. 9, 2024

GenAI development should follow secure-by-design principles

Every company wants a piece of the GenAI pie, but rushing to develop a product without incorporating secure-by-design principles could harm their business and customers.

By Ed Skoudis • Feb. 2, 2024

Ivanti discloses new zero-day flaw, releases delayed patches

While Ivanti customers can start patching two previously disclosed vulnerabilities, they must also address two new flaws for the same product.

By Arielle Waldman • Jan. 31, 2024

computer security incident response team (CSIRT)

A computer security incident response team, or CSIRT, is a group of IT professionals that provides an organization with services and support surrounding the assessment, management and prevention of cybersecurity-related emergencies, as well as coordination of incident response efforts.

By Katie Donegan, Peter Sullivan • Jan. 4, 2024

Application security consolidation remains nuanced

As web application and API protection converge into cloud-based WAAP, Enterprise Strategy Group research shows enterprise interest, but security concerns remain.

By John Grady • Dec. 12, 2023

Assess security posture with the Cloud Security Maturity Model

The Cloud Security Maturity Model enables organizations to assess their cloud security posture and optimize it as they continue their cloud journey.

By Andrew Froehlich • Dec. 7, 2023

5 network security predictions for 2024

Check out network security trends for 2024 from Enterprise Strategy Group, from SaaS security and rising DDoS attacks to network and endpoint convergence.

By John Grady • Dec. 4, 2023

The reality behind bypassing EDR attempts

Attackers have their work cut out for them when it comes to bypassing EDR. Learn about the difficulty of EDR evasion and how to ensure EDR tools catch all threats.

By Kyle Johnson • Dec. 4, 2023

7 key OT security best practices

Keeping operational technology secure requires vigilance and effort, especially as OT increasingly converges with IT. These cybersecurity best practices can help.

By Jerald Murphy • Dec. 1, 2023

wiretapping

Wiretapping is the surreptitious electronic monitoring and interception of phone-, fax- or internet-based communications.

By Paul Kirvan • Nov. 30, 2023