Security Operations: Page
-
Report on Compliance (ROC)
A Report on Compliance (ROC) is a form that must be completed by all Level 1 Visa merchants undergoing a PCI DSS (Payment Card Industry Data Security Standard) audit.
By Paul Kirvan • Nov. 3, 2021 -
Why hackers should learn Python for pen testing
The authors of 'Black Hat Python' explain the importance of learning Python for pen testing, how it helps create scripts to hack networks and endpoints, and more.
By Kyle Johnson • Oct. 25, 2021 -
Gartner analysts debate ransomware payments
During Gartner's IT Symposium, analysts discussed the complex factors companies face when deciding whether or not to give into ransom demands.
By Arielle Waldman • Oct. 20, 2021 -
Cybereason and Google Cloud join forces for new XDR service
Cybereason and Google Cloud have teamed up to combat future security threats with accelerated XDR capabilities.
By Arielle Waldman • Oct. 12, 2021 -
Expert Advice
5 open source offensive security tools for red teaming
To be an effective red teamer, you need the right tools in your arsenal. These are five of the open source offensive security tools worth learning.
By Ed Moyle • Oct. 11, 2021 -
Admins: Patch management is too complex and cumbersome
A new survey from Ivanti shows a majority of administrators and infosec professionals feel the shift to decentralized workspaces has made patch management an even bigger headache.
By Shaun Nichols • Oct. 8, 2021 -
Expert Advice
How to evaluate and deploy an XDR platform
Not all extended detection and response platforms are created equal. Don't take the XDR plunge before knowing exactly what to look for in an XDR platform.
By Andrew Froehlich • Oct. 7, 2021 -
How to use Ghidra for malware analysis, reverse-engineering
The Ghidra malware analysis tool helps infosec beginners learn reverse-engineering quickly. Get help setting up a test environment and searching for malware indicators.
By Packt Publishing, Kyle Johnson • Sept. 30, 2021 -
FireEye and McAfee Enterprise announce product mashup
Merger-happy investment firm STG has let slip that it will integrate the product lines of McAfee Enterprise and FireEye. Analysts say it will be a challenging road ahead.
By Shaun Nichols • Sept. 30, 2021 -
Expert Advice
The benefits of an IT management response
Many organizations create management responses to traditional audit findings. But did you know organizations can do them after IT audits and assessments, too?
By Ed Moyle • Sept. 21, 2021 -
Opinion
3 components to consider when selecting an MDR service
In the market for an MDR service? Read up on three considerations to keep in mind and questions to ask potential providers before making a decision.
By Daniel Clayton • Sept. 21, 2021 -
COBIT
COBIT is an IT governance framework for businesses wanting to implement, monitor and improve IT management best practices.
By Katie Terrell Hanna • Sept. 20, 2021 -
security policy
A security policy is a document that states in writing how a company plans to protect its physical and information technology (IT) assets.
By Ben Lutkevich • Sept. 17, 2021 -
AI in cybersecurity: For good and evil
Why companies should use AI for fraud management, detection
AI is involved in many cybersecurity processes. Now it's making inroads in fraud management and detection. The benefits, however, are not without AI's nagging bias challenge.
By Isabella Harford • Sept. 14, 2021 -
CrowdStrike threat report: Breakout time decreased 67% in 2021
CrowdStrike's latest research shows threat actors have reduced the time it takes for them to move laterally in victim environments, thanks in part to ransomware as a service.
By Alexander Culafi • Sept. 8, 2021 -
Expert Advice
How to use Metasploit commands and exploits for pen tests
These step-by-step instructions demonstrate how to use the Metasploit Framework for enterprise vulnerability and penetration testing.
By Ed Moyle • Aug. 31, 2021 -
Malware analysis for beginners: Getting started
With the cybersecurity industry struggling to fill open positions, now is the time to start in the field. Infosec expert Dylan Barker shares what you should know to be a malware analyst.
By Kyle Johnson • Aug. 30, 2021 -
Top static malware analysis techniques for beginners
Malware will eventually get onto an endpoint, server or network. Using static analysis can help find known malware variants before they cause damage.
By Packt Publishing, Kyle Johnson • Aug. 30, 2021 -
HackerOne launches AWS certification paths, pen testing service
A select group of penetration testers in HackerOne's community will be able to obtain three AWS certifications, including the Security - Specialty certification.
By Arielle Waldman • Aug. 25, 2021 -
electronic discovery (e-discovery or ediscovery)
Electronic discovery -- also called e-discovery or ediscovery -- refers to any process of obtaining and exchanging evidence in a civil or criminal legal case.
By Alexander Gillis • Aug. 24, 2021 -
CISA offers ransomware response guidelines to organizations
In its new ransomware prevention and response guide, CISA 'strongly discourages paying a ransom,' citing the potential to embolden threat actors and fund illicit activity.
By Alexander Culafi • Aug. 19, 2021 -
Accenture responds to LockBit ransomware attack
The LockBit ransomware crew claims to have stolen data from IT services and consulting giant Accenture, but the company said no customer systems were affected in the attack.
By Shaun Nichols • Aug. 11, 2021 -
NortonLifeLock and Avast joining forces in $8 billion merger
The combined company from NortonLifeLock and Avast will be dual-headquartered in Arizona and Prague, and will serve 500 million users, including 40 million direct customers.
By Alexander Culafi • Aug. 11, 2021 -
Expert Advice
11 video conferencing security and privacy best practices
Video conferencing tools are a remote worker's lifeline. As such, it is essential to maintain their security. These 11 best practices will help ensure secure, private, video-enabled meetings.
By Ashwin Krishnan • Aug. 10, 2021 -
Transparency after a cyber attack: How much is too much?
Sharing threat intelligence and proof-of-concept exploits can often help other organizations better defend themselves, but such efforts are hampered by obstacles and restrictions.
By Arielle Waldman • Aug. 9, 2021