Security Operations: Page

Ongoing PowerShell security threats prompt a call to action

Although PowerShell poses an ongoing risk to enterprise security as a post-exploitation tool, authorities strongly advise against disabling it completely.

By Arielle Waldman • June 22, 2022

Ransomware Task Force calls for better incident reporting

Michael Phillips, co-chair of the Ransomware Task Force and chief claims officer at Resilience, pointed to a 'data gap' that prohibits a complete picture of the ransomware problem.

By Alexander Culafi • June 7, 2022

8 benefits of DevSecOps automation

DevSecOps automation can help organizations scale development while adding security, as well as uniformly adopt security features and reduce remedial tasks.

By Andrew Froehlich • June 7, 2022

Cybereason: Paying ransoms leads to more ransomware attacks

Cybereason found that the majority of organizations that pay threat actors to decrypt data are attacked again -- usually within a month and at the hands of the same attackers.

By Arielle Waldman • June 7, 2022

VMware launches ‘threat intelligence cloud’ Contexa

The Contexa threat intelligence service is integrated into all VMware security products and will be available to all new and existing customers at no additional cost.

By Alexander Culafi • June 2, 2022

How ransomware kill chains help detect attacks

Reconstructing cyber attacks is a key step in incident response. Learn how ransomware kill chains can help security teams detect and mitigate the consequences of an attack.

By Isabella Harford • June 1, 2022

How to improve cyber attack detection using social media

Social media has cybersecurity pros and cons. One benefit is that it can help improve cyber attack detection. These four real-world examples show how.

By Packt Publishing, Isabella Harford • June 1, 2022

How to get started with multi-cloud threat hunting

More clouds mean a bigger attack surface. It also complicates how companies can accurately hunt for potential threats. But there are steps to take that can reduce the risk.

By Ed Moyle • May 31, 2022

Top 4 source code security best practices

Software supply chain attacks are on the rise. Follow these source code best practices to protect both in-house and third-party code.

By Karen Kent • May 26, 2022

How micropatching could help close the security update gap

Countless known but unpatched vulnerabilities pose significant, ongoing risk to the typical enterprise. Learn how micropatching could help close the security update gap.

By Michael Cobb • May 16, 2022

Vendors, governments make ransomware decryptors more common

Ransomware decryption tools are increasingly common today, thanks to cybersecurity vendors and law enforcement agencies working on cracking past and present ransomware threats.

By Peyton Doyle • May 12, 2022

Case study: Scaling DevSecOps at Comcast

Comcast's DevSecOps transformation started small but quickly gained steam, resulting in 85% fewer security incidents in production. Learn more in this case study.

By Alissa Irei • May 10, 2022

Tips for using a threat profile to prevent nation-state attacks

Is your organization concerned about state-sponsored attacks? Threat profiling can help prevent nation-state attacks. Get advice on how to create an effective threat profile.

By Isabella Harford • April 28, 2022

How to conduct Linux privilege escalations

Learn how to conduct Linux kernel exploitation with Metasploit and manually, as well as how to identify vulnerabilities on Linux using enumeration scripts.

By Packt Publishing, Kyle Johnson • April 27, 2022

An introduction to binary diffing for ethical hackers

Binary diffing is a useful tool in the ethical hacker's arsenal. This excerpt teaches aspiring penetration testers and red teamers how to get started.

By Alissa Irei, McGraw Hill Education • April 22, 2022

security information management (SIM)

Security information management (SIM) is the practice of collecting, monitoring and analyzing security-related data from computer logs and various other data sources.

By Rahul Awati • April 21, 2022

Kaspersky releases decryptor for Yanluowang ransomware

Kaspersky is offering users and admins a tool to decrypt data that had been locked away by the emerging Yanluowang ransomware gang, which was first revealed in December.

By Shaun Nichols • April 20, 2022

Corvus: Ransomware costs, ransom payments declining

Cyber insurance provider Corvus examined how the cost of ransomware attacks declined over the past year and a half and what it means for different industries moving forward.

By Peyton Doyle • April 15, 2022

Microsoft dismantles ZLoader botnet

Microsoft and ESET security teams explained how they were able to identify and dismantle the command and control infrastructure of the notorious ZLoader malware network.

By Shaun Nichols • April 13, 2022

Apple Security Bounty improves, but problems remain

Security researchers told SearchSecurity that Apple Security Bounty improved its communication earlier this year, which had been a key issue for participants.

By Alexander Culafi • April 11, 2022

Government officials: AI threat detection still needs humans

At the Ai4 Cybersecurity Summit, infosec professionals from CISA and the state of Tennessee discussed the promise and potential obstacles of AI for threat detection.

By Peyton Doyle • April 7, 2022

Pen testing guide: Types, steps, methodologies and frameworks

Penetration testing helps organizations find security vulnerabilities before hackers do. Uncover details about pen testing steps, methodologies, frameworks and standards.

By Paul Kirvan • April 7, 2022

SOC 1 (System and Organization Controls 1)

System and Organization Controls 1, or SOC 1 (pronounced "sock one"), aims to control objectives within a SOC 1 process area and documents internal controls relevant to an audit of a user entity's financial statements.

By Alex DelVecchio, Andrew Zola • April 5, 2022

The importance of HR’s role in cybersecurity

HR teams must keep security top of mind when hiring and onboarding employees and enforcing data privacy policies. Get advice on the procedures and mechanisms to do so.

By Packt Publishing, Isabella Harford • March 31, 2022

PA-DSS (Payment Application Data Security Standard)

Payment Application Data Security Standard (PA-DSS) is a set of requirements intended to help software vendors develop secure payment applications for credit card transactions.

By Katie Terrell Hanna, Maggie Sullivan • March 25, 2022