Security Operations: Page

Why is malware analysis important?

Malware continues to plague all organizations, causing data loss and reputational damage. Discover how malware analysis helps protect companies from such attacks.

By Packt Publishing, Kyle Johnson • Dec. 7, 2022

How to use Wireshark OUI lookup for network security

Wireshark OUI lookup helps cyber defenders, pen testers and red teams identify and target network endpoints -- and it can be accessed from any browser.

By Peter Loshin • Dec. 7, 2022

XDR definitions don’t matter, outcomes do

Despite remaining confusion about what XDR is, security teams need to improve threat detection and response. ESG research revealed plans for increased XDR spending in 2023.

By Jon Oltsik • Dec. 2, 2022

7 steps to implementing a successful XDR strategy

There's still confusion around what extended detection and response is, but it will play a key role in enterprise security. To successfully implement XDR, follow these steps.

By Dave Gruber • Dec. 2, 2022

Top 5 key ethical hacker skills

Ethical hacking can be a rewarding career, but it requires tenacity, curiosity and creativity, among other traits. Oh, and you better be a good writer, too.

By Rob Shapland • Dec. 1, 2022

Common Body of Knowledge (CBK)

In security, the Common Body of Knowledge (CBK) is a comprehensive framework of all the relevant subjects a security professional should be familiar with, including skills, techniques and best practices.

By Madelyn Bacon, Casey Clark • Nov. 28, 2022

Industrial control system security needs ICS threat intelligence

Threat actors and nation-states constantly try to find ways to attack all-important industrial control systems. Organizations need specialized ICS threat intelligence to fight back.

By Michael Cobb • Nov. 17, 2022

Flashpoint launches new ‘ransomware prediction model’

Flashpoint's new model assigns a 'ransomware likelihood' rating for vulnerabilities contained in the VulnDB database, which contains more than 300,000 flaws.

By Arielle Waldman • Nov. 10, 2022

Secure development focus at KubeCon + CloudNativeCon 2022

The pressure is on. It's time for better security that can keep up with modern software developers. That was the message at this year's KubeCon + CloudNativeCon.

By Melinda Marks • Nov. 10, 2022

Common lateral movement techniques and how to prevent them

Lateral movement techniques enable attackers to dig deeper into compromised environments. Discover what lateral movement attacks are and four attack techniques.

By Ravi Das • Nov. 10, 2022

Types of vulnerability scanning and when to use each

Vulnerability scanning gives companies a key weapon when looking for security weaknesses. Discovery, assessment and threat prioritization are just a few of its benefits.

By Paul Kirvan • Nov. 8, 2022

Advice for beginner computer forensic investigators

For those interesting in becoming a computer forensics investigator, learn about the career and what to expect, as well as why digital evidence is the most volatile evidence.

By Kyle Johnson • Oct. 28, 2022

The top 5 ethical hacker tools to learn

Ethical hackers have a wealth of tools at their disposal that search for vulnerabilities in systems. Learn about five such tools that should be part of any hacker's tool set.

By Rob Shapland • Oct. 21, 2022

Top 10 pen testing interview questions with answers

Are you pursuing a career in pen testing? Prepare with this list of 10 pen testing interview questions and answers created by three security experts.

By Packt Publishing, Isabella Harford • Oct. 19, 2022

Top IT security manager interview questions

Are you looking for a leadership role in cybersecurity? Three security experts offer their advice on how to answer the most common IT security manager interview questions.

By Isabella Harford • Oct. 19, 2022

Mandiant launches Breach Analytics for Google’s Chronicle

Mandiant Breach Analytics for Google Cloud's Chronicle marks a new product launch from the security giant after its acquisition by Google was completed last month.

By Alexander Culafi • Oct. 19, 2022

Why Kali Linux is the go-to distribution for penetration testing

Discover why penetration testers prefer to use the Kali Linux distribution for offensive security, from collecting useful tools together to being usable from multiple devices.

By Kyle Johnson • Oct. 13, 2022

BlackByte ransomware uses new EDR evasion technique

Attackers deploying the BlackByte ransomware strain are using vulnerable drivers to target a part of the operating system that many security products rely on for protection.

By Arielle Waldman • Oct. 11, 2022

Tenable shifts focus, launches exposure management platform

The company said it's expanding beyond vulnerability management to address the growing attack surface and the challenges customers face to address it.

By Arielle Waldman • Oct. 4, 2022

How to get into cybersecurity with no experience

Cybersecurity needs new talent now more than ever, but landing that first job without a computer science degree can still be difficult. Here are five tips for getting in the door.

By Ashwin Krishnan • Sept. 27, 2022

MICR (magnetic ink character recognition)

MICR (magnetic ink character recognition) is a technology invented in the 1950s that's used to verify the legitimacy or originality of checks and other paper documents.

By Alexander Gillis • Sept. 27, 2022

Discover the benefits and challenges of bug bounty programs

Bug bounty programs have a number of benefits and challenges. Before adopting such a program at your organization, read up on the pros and cons to decide if it would be a good fit.

By Rob Shapland • Sept. 16, 2022

How SOCs can identify the threat actors behind the threats

Learn how SOC teams can track threat actors by understanding the factors that influence an attack, such as the type of infrastructure used or commonly targeted victims.

By Josh Davies • Sept. 16, 2022

Webworm retools old RATs for new cyberespionage threat

Symantec's Threat Hunter Team uncovered a new cyberespionage campaign run by a threat group named Webworm, which uses customized versions of old remote access Trojans.

By Shaun Nichols • Sept. 15, 2022

How to become a CISO

The chief information security officer role is growing in profile and importance. Explore six actionable tips for aspiring CISOs as they work toward cybersecurity's top job.

By Jerald Murphy • Sept. 13, 2022