Security Operations: Page

Immersive Labs: Average cyberthreat response takes 96 days

Immersive Labs' Cyber Workforce Benchmark found that some critical threats, including a zero-day vulnerability, took an average of six months to fully address.

By Peyton Doyle • March 9, 2022

HermeticWiper poses increasing cyber risk to Ukraine

While it has not been attributed to a specific threat group, ESET researchers observed another data-wiping malware that targeted a Ukrainian organization and warned it could extend to allies.

By Arielle Waldman • March 1, 2022

Tips for creating a cybersecurity resume

Resumes help candidates leave an impression on potential employers. But did you know one resume often isn't enough? Learn this and other tips for creating a cybersecurity resume.

By Isabella Harford, Manning Publications Co. • Feb. 28, 2022

Snyk enters cloud security market with Fugue acquisition

Analysts say the acquisition of Fugue will give Snyk an opportunity to build a presence in the cloud security market and strengthen its infrastructure-as-code capabilities.

By Arielle Waldman • Feb. 17, 2022

How to successfully scale software bills of materials usage

Companies must plan properly when implementing software bills of materials at scale. Accomplish these three goals to keep SBOMs updated, accurate and actionable, despite complexity.

By Ed Moyle • Feb. 9, 2022

Pros and cons of manual vs. automated penetration testing

Automated penetration testing capabilities continue to improve, but how do they compare to manual pen testing? Get help finding which is a better fit for your organization.

By Kyle Johnson • Feb. 8, 2022

A day in the life of a cybersecurity manager

The role of a cybersecurity leader is often misunderstood. Experience a day in the life of a cybersecurity manager with this breakdown of a security leader's typical schedule.

By Isabella Harford, O'Reilly Media • Feb. 2, 2022

IaC security options help reduce software development risk

The use of infrastructure as code is increasing among developers, but security teams can take advantage of a growing number of tools to make sure IaC doesn't increase risk.

By Melinda Marks • Jan. 31, 2022

Emsisoft releases DeadBolt ransomware decryption tool

Emsisoft's DeadBolt ransomware decryption tool fixes broken decryptor keys issued by threat actors, and works only if the victim has paid the ransom and received a key.

By Alexander Culafi • Jan. 31, 2022

How AI can help security teams detect threats

AI and machine learning are reshaping modern threat detection. Learn how they help security teams efficiently and accurately detect malicious actors.

By Rohit Dhamankar • Jan. 27, 2022

one-time pad

In cryptography, a one-time pad is a system in which a randomly generated private key is used only once to encrypt a message that is then decrypted by the receiver using a matching one-time pad and key.

By Andrew Froehlich • Jan. 27, 2022

New vulnerability rating framework aims to fill in CVSS gaps

The CVSS vulnerability scale doesn't always give a clear picture of the risk of a vulnerability, but experts hope the emerging standard called EPSS will provide more clarity.

By Shaun Nichols • Jan. 26, 2022

Enterprises reluctant to report cyber attacks to authorities

Despite some successful law enforcement operations, including the seizure of a ransom payment, infosec experts say many enterprises are still unlikely to report cyber attacks.

By Arielle Waldman • Jan. 24, 2022

Introduction to automated penetration testing

Automated penetration testing, which speeds up the process for companies and vendors, is maturing. Is it ready to close the time gap between vulnerability discovery and mitigation?

By Andrew Froehlich • Jan. 20, 2022

Cisco: Patching bugs is about more than CVSS numbers

Cisco's Kenna Security advised enterprises to consider more than just CVSS scores and update advisories when deciding when and how to address security vulnerabilities.

By Shaun Nichols • Jan. 20, 2022

FireEye, McAfee Enterprise relaunch as XDR-focused Trellix

Though the new company is a combination of two high-profile security vendors, private equity firm STG relaunched the merger under an entirely different name.

By Arielle Waldman • Jan. 19, 2022

Endpoint security is nothing without human operators

The growing threat landscape has made endpoint security more important than ever. Deploying an endpoint security platform without the proper staff, however, is simply not enough.

By Kevin Hanes • Jan. 11, 2022

trusted computing base (TCB)

A trusted computing base (TCB) is everything in a computing system that provides a secure environment for operations.

By Rahul Awati • Jan. 10, 2022

5 ways to automate security testing in DevSecOps

Read up on five areas of DevSecOps that benefit from security testing automation, such as code quality checking, web application scanning and vulnerability scanning.

By Ed Moyle • Dec. 21, 2021

How to mitigate Log4Shell, the Log4j vulnerability

The easy-to-exploit Log4j vulnerability known as Log4Shell is dangerous and must be dealt with as soon as possible. Get pointers on how to mitigate and monitor the threat.

By Michael Cobb • Dec. 21, 2021

GDPR as we enter 2022: Challenges, enforcement and fines

Take a look at where GDPR stands as it reaches its fourth birthday, including enforcement and fine changes, current challenges, how COVID-19 affected it and more.

By Isabella Harford • Dec. 9, 2021

Elastic Security app enables affordable threat hunting

New to threat hunting in cybersecurity? Consider using the open code Elastic Stack suite to gather security event data and create visualizations for decision-makers.

By Kyle Johnson • Nov. 29, 2021

Tools to conduct security chaos engineering tests

Security teams are becoming curious about how chaos engineering can benefit them. Read about the security chaos engineering tools available for early adopters.

By Kyle Johnson • Nov. 11, 2021

Bug bounty programs in 2021: High payouts, higher stakes

Bug bounty programs today offer high monetary rewards for researchers, but they can also suffer from communication issues, delays and inaction that may portend bigger problems.

By Alexander Culafi • Nov. 8, 2021

Why chaos engineering testing makes sense for cybersecurity

Using the concept of chaos engineering, teams can determine whether systems perform as intended in time of need. But how does it relate to security?

By Kyle Johnson • Nov. 3, 2021