Security Operations: Page

6 blockchain use cases for cybersecurity

Is blockchain secure by design, or should blockchains be designed for security? Learn more through these six security and privacy use cases for blockchain.

By Jessica Groopman • June 7, 2023

Low-code/no-code use cases for security

Low-code/no-code development approaches have their fair share of security issues, but that doesn't mean they can't be used to benefit the security industry, too.

By Dave Shackleford • June 1, 2023

Mitiga warns free Google Drive license lacks logging visibility

The ability to view logs is critical for enterprises to detect and attribute malicious activity. Mitiga said the Google Drive issue allows data exfiltration without a trace.

By Arielle Waldman • June 1, 2023

Vendors: Threat actor taxonomies are confusing but essential

Despite concern about the proliferation of naming taxonomies used to identify threat groups, vendors say they are crucial their understanding and visibility into threat activity.

By Alexis Zacharakos • May 30, 2023

Updated ‘StopRansomware Guide’ warns of shifting tactics

CISA's updates to the 'StopRansomware Guide' address shifts in the threat landscape as more threat actors skip the encryption step and focus on data theft and extortion.

By Arielle Waldman • May 24, 2023

Top breach and attack simulation use cases

While pen tests offer a point-in-time report on the security of an organization's security defenses, breach and attack simulations offer regular or even constant status checks.

By Michael Cobb • May 24, 2023

How to use Wfuzz to find web application vulnerabilities

By learning how to use Wfuzz for web application fuzz testing, bug bounty hunters can automate vulnerability discovery. Learn more in this excerpt from 'Bug Bounty Bootcamp.'

By No Starch Press, Alissa Irei • May 23, 2023

Certified Cloud Security Professional (CCSP)

Certified Cloud Security Professional (CCSP) is an International Information System Security Certification Consortium, or (ISC)2, certification that covers cloud-based cybersecurity best practices.

By Casey Clark • May 9, 2023

It’s time to harden AI and ML for cybersecurity

An RSA Conference panel said that now is the time to become proactive against AI and ML adversarial attacks -- before they become more sophisticated.

By Kyle Johnson • April 28, 2023

ChatGPT uses for cybersecurity continue to ramp up

The use of OpenAI's technology in cybersecurity products is growing as companies look to improve threat detection and assist short-staffed and fatigued security teams.

By Alexis Zacharakos • April 28, 2023

How Target built its DevSecOps culture using psychology

Building a healthy DevSecOps culture isn't easy. Learn how Target used organizational psychology to get development and application security teams on the same page.

By Alissa Irei • April 27, 2023

How ransomware victims can make the best of a bad situation

At RSA Conference 2023, Mandiant's Jibran Ilyas provided tips for ransomware victims that decide to pay, including a list of counterdemands to make to the threat actors.

By Alexis Zacharakos • April 26, 2023

Bugcrowd CTO talks hacker feedback, vulnerability disclosure

Bugcrowd CTO Casey Ellis said the company's new penetration testing service helps establish the company beyond public perception of it being purely a bug bounty platform.

By Alexander Culafi • April 25, 2023

IBM launches AI-powered security offering QRadar Suite

IBM aims to use QRadar Suite's AI features, which it calls the 'unified analyst experience,' to enable security analysts to focus on higher-priority work.

By Alexander Culafi • April 24, 2023

Fortra completes GoAnywhere MFT investigation

An investigation around the zero-day attack that affected a growing number of victims revealed that activity started earlier than Fortra initially reported.

By Arielle Waldman • April 20, 2023

Generative AI in SecOps and how to prepare

Generative AI assistants could be game changers in the SOC -- but not if SecOps teams haven't prepared for them. Here's how to get ready.

By John Burke • April 19, 2023

How to defend against TCP port 445 and other SMB exploits

Keeping TCP port 445 and other SMB ports open is necessary for resource sharing, yet this can create an easy target for attackers without the proper protections in place.

By Diana Kelley • April 19, 2023

How to build a cybersecurity deception program

In 'The Art of War,' Sun Tzu declared, 'All warfare is based on deception.' Learn how to apply this principle in the enterprise by building a cybersecurity deception program.

By Karen Kent • April 17, 2023

International Information Systems Security Certification Consortium (ISC)2

(ISC)2, short for International Information Systems Security Certification Consortium, is a nonprofit organization that provides security training and certificates.

By Madelyn Bacon • April 14, 2023

Pen testing amid the rise of AI-powered threat actors

The importance of pen testing continues to increase in the era of AI-powered attacks, along with red teaming, risk prioritization and well-defined goals for security teams.

By Ed Skoudis • April 14, 2023

Hacking Policy Council launches, aims to improve bug disclosure

Founding members for the Hacking Policy Council, launched Thursday by the Center for Cybersecurity Policy and Law, include HackerOne, Bugcrowd, Google and others.

By Alexander Culafi • April 13, 2023

OpenAI launches bug bounty program with Bugcrowd

ChatGPT publisher OpenAI said its new Bugcrowd bug bounty program will not accept submissions involving "issues related to the content of model prompts and responses."

By Alexander Culafi • April 12, 2023

Recorded Future launches OpenAI GPT model for threat intel

The new OpenAI GPT model was trained on Recorded Future's large data set and interprets evidence to help support enterprises struggling with cyberdefense.

By Arielle Waldman • April 11, 2023

Practice Microsoft SC-100 exam questions with answers

Use these practice multiple-choice questions, with answers, to assess your knowledge of the Microsoft Cybersecurity Architect exam.

By Packt Publishing, Kyle Johnson • April 11, 2023

Compare breach and attack simulation vs. penetration testing

A deep dive into breach and attack simulation vs. penetration testing shows both tools prevent perimeter and data breaches. Find out how they complement each other.

By Rob Shapland • March 28, 2023