Security Operations: Page

Cyber insurance carriers expanding role in incident response

While cyber insurance has its benefits, infosec professionals expressed concern that carriers have too much influence over incident response decisions, especially with ransomware.

By Arielle Waldman • March 22, 2023

Is cybersecurity recession-proof?

No field is totally immune to economic downturns, but flexible, practical and prepared cybersecurity professionals should be able to weather any upcoming storms.

By Jerald Murphy • March 13, 2023

Why enterprise SecOps strategies must include XDR and MDR

Adopting extended detection and response and employing managed detection and response services may be the missing pieces of the SOC modernization puzzle.

By Dave Gruber • March 9, 2023

Research examines security operations proficiency issues

Instead of looking at where security operations teams excel, Enterprise Strategy Group asked security pros where teams are least proficient. Learn where and how to fix it.

By Jon Oltsik • March 7, 2023

fuzz testing (fuzzing)

Fuzz testing (fuzzing) is a quality assurance technique used to discover coding errors or bugs and security loopholes in software, operating systems and networks.

By Ben Lutkevich • March 7, 2023

Bitdefender releases decryptor for MortalKombat ransomware

MortalKombat ransomware was first spotted in January, but Bitdefender has already cracked the new variant and released a free decryptor to help victims recover data.

By Rob Wright • Feb. 28, 2023

Inside the PEIR purple teaming model

Want to try purple team exercises but aren't sure how to do so? Try the 'Prepare, Execute, Identify and Remediate' purple teaming model.

By Packt Publishing, Kyle Johnson • Feb. 23, 2023

Understanding purple teaming benefits and challenges

Blue teams and red teams are coming together to form purple teams to improve their organization's security posture. What does this mean for the rivals? And how does it work?

By Kyle Johnson • Feb. 23, 2023

IBM: Ransomware defenders showing signs of improvement

According to IBM X-Force's Threat Intelligence Index report, a smaller percentage of threat actors executed a ransomware attack after gaining access in 2022 than in 2021.

By Alexander Culafi • Feb. 22, 2023

E-Sign Act (Electronic Signatures in Global and National Commerce Act)

The E-Sign Act (Electronic Signatures in Global and National Commerce Act) is a U.S. federal law that specifies that, in the United States, the use of an electronic signature (e-signature) is as legally valid as a traditional signature written in ink on paper.

By Alexander Gillis • Feb. 16, 2023

CISA battles ESXiArgs ransomware campaign with recovery tool

The U.S. Cybersecurity and Infrastructure Security Agency published a decryptor script intended to assist VMware customers affected by ESXiArgs ransomware.

By Alexander Culafi • Feb. 8, 2023

DevSecOps needs to improve to grow adoption rates, maturity

Organizations are adding security processes and oversight to DevOps, but there's still work ahead to truly marry cybersecurity with DevOps and create a functioning DevSecOps.

By Jon Oltsik • Feb. 8, 2023

SOC 3 (System and Organization Controls 3)

A System and Organization Controls 3 (SOC 3) report outlines information related to a service organization's internal controls for security, availability, processing integrity, confidentiality and privacy.

By Nick Barney • Feb. 8, 2023

Threat activity increasing around Fortinet VPN vulnerability

Following public disclosure of the critical VPN flaw in December, multiple reports show threat actors are exploiting it to target high-profile organizations.

By Arielle Waldman • Feb. 2, 2023

Schools don’t pay, but ransomware attacks still increasing

Ransomware gangs have increasingly focused their attacks on the K-12 education sector, even though most school districts do not pay the ransom. But how long will that last?

By Alexis Zacharakos • Jan. 30, 2023

5 ethical hacker certifications to consider

From Offensive Security Certified Professional to GIAC Web Application Penetration Tester, learn about the certifications worth earning to begin your ethical hacker career.

By Rob Shapland • Jan. 30, 2023

5 ways to enable secure software development in 2023

Security teams have to help developers ensure security software development, but in today's rapidly scaling cloud environments, it's a challenging task.

By Melinda Marks • Jan. 24, 2023

8 cybersecurity roles to consider

Cybersecurity is an exciting and increasingly important field with a wealth of career opportunities. Explore eight cybersecurity roles and the skills, talent and experience required.

By Ashwin Krishnan • Jan. 23, 2023

How to select a security analytics platform, plus vendor options

Security analytics platforms aren't traditional SIEM systems, but rather separate platforms or a SIEM add-on. Learn more about these powerful and important tools.

By Paul Kirvan • Jan. 20, 2023

Certified Information Systems Security Professional (CISSP)

Certified Information Systems Security Professional (CISSP) is an information security certification developed by the International Information Systems Security Certification Consortium, also known as (ISC)².

By Peter Loshin, Taina Teravainen, Ed Tittel • Dec. 29, 2022

Understanding current XDR elements and options

What do existing extended detection and response products provide? Learn about EDR+, SIEM+ and Comprehensive options, which all provide varying levels of XDR.

By Josh Davies • Dec. 28, 2022

How to prevent and mitigate process injection

Process injection is a defense evasion technique that helps attackers hide from enterprise security systems. Learn how it works and how to mitigate it.

By Rob Shapland • Dec. 27, 2022

The state of OT security: A rapidly evolving landscape

Security experts weigh in on how the OT security landscape has evolved over the last decade, and where it could be going next as threats continue to mount.

By Alexander Culafi • Dec. 19, 2022

Low-code/no-code security risks climb as tools gain traction

Organizations are looking for ways to reduce their application development costs, but automated coding can usher in some unpleasant surprises if you're unprepared.

By Dave Shackleford • Dec. 15, 2022

Understanding malware analysis and its challenges

Discover what to expect in a malware analyst career, from the types of malware you'll encounter to important tools to use to difficulties that arise for those new to the field.

By Kyle Johnson • Dec. 7, 2022