Infrastructure Security: Page

How to protect your organization from IoT malware

IoT devices are attractive targets to attackers, but keeping them secure isn't easy. Still, there are steps to take to minimize risk and protect networks from attacks.

By Michael Cobb • Nov. 15, 2023

SD-WAN deployments feed SASE network and security convergence

Enterprise Strategy Group's Bob Laliberte discusses the latest findings in his newly released report and why SD-WAN's direct cloud connectivity feeds SASE business initiatives.

By Ron Karjian • Nov. 13, 2023

Microsoft, ZDI disagree over Exchange zero-day flaws

Microsoft said it had previously fixed one of the flaws and that the others did not require a patch. Trend Micro's Zero Day Initiative, however, disagreed with the software giant.

By Alexander Culafi • Nov. 7, 2023

supercookie

A supercookie is a type of tracking cookie inserted into an HTTP header to collect data about a user's internet browsing history and habits.

By Madelyn Bacon, Rahul Awati • Oct. 30, 2023

Cloud-native app security? Ignore acronyms, solve problems

When building a cloud-native application security strategy, avoid new acronym and product category confusion. Look for products that effectively address top challenges instead.

By Melinda Marks • Oct. 27, 2023

Top 7 cloud misconfigurations and best practices to avoid them

Cloud security means keeping a close eye on the configuration of cloud resources and assets. These best practices can keep you safe from attackers and other malicious activities.

By Dave Shackleford • Oct. 26, 2023

Cloud-native firewalls are the next step in network security

The network security challenges associated with cloud provider and virtual firewalls are leading to third parties introducing cloud-native firewalls.

By John Grady • Oct. 19, 2023

antispoofing

Antispoofing is a technique for identifying and dropping packets that have a false source address.

By Paul Kirvan , Sharon Shea • Oct. 18, 2023

Secure Sockets Layer certificate (SSL certificate)

A Secure Sockets Layer certificate (SSL certificate) is a small data file installed on a web server that allows for a secure, encrypted connection between the server and a web browser.

By Rahul Awati • Oct. 17, 2023

Allowlisting vs. blocklisting: Benefits and challenges

Allowlisting and blocklisting are key components of access control. Learn the benefits and challenges of each approach and why a combination of the two is often the best strategy.

By Ashwin Krishnan • Oct. 17, 2023

What are the most important email security protocols?

Email was designed without security considerations. Email security protocols, including SMPTS, SPF and S/MIME, add mechanisms to keep messaging safe from threats.

By Peter Loshin • Oct. 13, 2023

Microsoft Schannel (Microsoft Secure Channel)

The Microsoft Secure Channel, or Schannel, is a security support package that facilitates the use of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption on Windows platforms.

By Madelyn Bacon • Oct. 5, 2023

Secure service edge strengths drive SASE deployments

Enterprise Strategy Group's John Grady discusses the latest findings in his newly released report and why businesses won’t start a SASE initiative without first implementing SSE.

By Ron Karjian • Sept. 29, 2023

email security

Email security is the process of ensuring the availability, integrity and authenticity of email communications by protecting against unauthorized access and email threats.

By Kinza Yasar , Sean Kerner • Sept. 5, 2023

network vulnerability scanning

Network vulnerability scanning is the process of inspecting and reporting potential vulnerabilities and security loopholes on a computer, network, web application or other device, including firewalls, switches, routers and wireless access points.

By Kinza Yasar • Aug. 23, 2023

How to use dynamic reverse engineering for embedded devices

In this excerpt from 'Practical Hardware Pentesting,' read step-by-step instructions on how to find vulnerabilities on IoT devices using dynamic reverse engineering.

By Packt Publishing, Kyle Johnson • Aug. 16, 2023

Adopt embedded penetration testing to keep IoT devices secure

Regular embedded penetration testing can help discover vulnerabilities before attackers do. The author of 'Practical Hardware Pentesting' explains.

By Kyle Johnson • Aug. 16, 2023

Wiz warns of exposed multi-tenant apps in Azure AD

During a Black Hat USA 2023 session, a Wiz researcher explained how a common misconfiguration in Azure Active Directory led to the exposure of nearly 1,300 applications.

By Rob Wright • Aug. 9, 2023

Google Play Protect

Google Play Protect is a malware protection and detection service built into Android devices that use Google Mobile Services.

By TechTarget Contributor • Aug. 8, 2023

API keys: Weaknesses and security best practices

API keys are not a replacement for API security. They only offer a first step in authentication -- and they require additional security measures to keep them protected.

By Ravi Das • July 20, 2023

Using defense in depth to secure cloud-stored data

To better secure cloud-resident data, organizations are deploying cloud-native tools from CSPs and third-party tools from MSPs to achieve a defense-in-depth strategy.

By Jack Poller • July 19, 2023

IaC security scanning tools, features and use cases

Infrastructure-as-code templates help organizations track cloud assets and other important items. Proper IaC scanning can help companies avoid potential security pitfalls.

By Dave Shackleford • July 12, 2023

Wi-Fi AP placement best practices and security policies

From a security standpoint, Wi-Fi network designers should consider the physical and logical placement of APs, as well as management, segmentation and rogue devices.

By Lee Badman • July 10, 2023

bridge

A bridge is a class of network device designed to connect networks at OSI Level 2, which is the data link layer of a local area network.

By Tom Nolle • July 7, 2023

cloud security architecture

Cloud security architecture is a security strategy designed around securing an organization's data and applications in the cloud.

By Tom Nolle • July 6, 2023