Security Operations: Page
-
Brand Experience Team/TechTarget
Researchers argue action bias hinders incident response
A Black Hat 2021 session focused on the human instinct to act immediately after a cyber attack and how that can negatively impact incident response.
By Arielle Waldman • Aug. 5, 2021 -
Brand Experience Team/TechTarget
CISA director announces ‘Joint Cyber Defense Collaborative’
The Joint Cyber Defense Collaborative, or JCDC, is a partnership between the public and private sectors to create and implement comprehensive national cybersecurity plans.
By Alexander Culafi • Aug. 5, 2021 -
Brand Experience Team/TechTarget
How to prepare for the CompTIA CySA+ exam
The author of the CompTIA CySA+ certification guide offers advice on how to prepare for the exam, discusses the benefits of the cert and more.
By Isabella Harford • Aug. 4, 2021 -
Brand Experience Team/TechTarget
Quiz // Bookshelf
Sample CompTIA CySA+ test questions with answers
Going for your CompTIA CySA+ certification? Test what you know before taking the exam with these sample test questions on vulnerability assessment output.
By Isabella Harford, Pearson Education • Aug. 4, 2021 -
Brand Experience Team/TechTarget
Open source web app projects hailed for quickly patching bugs
Nine vulnerabilities in three popular open source SMB tools were cleaned up within 24 hours after Rapid7 reported the flaws to their development teams.
By Shaun Nichols • July 27, 2021 -
Brand Experience Team/TechTarget
Cybersecurity investments surge in 2021 as VCs go all in
Venture capital firms have flooded the cybersecurity market this year with investment dollars for young startups and established vendors alike. What's behind this surge?
By Arielle Waldman • July 27, 2021 -
Brand Experience Team/TechTarget
Kaseya obtained ransomware decryptor from ‘trusted third party’
Kaseya told SearchSecurity that for 'confidentiality reasons' it could only confirm that the ransomware decryptor came from a trusted third party and that it was helping customers.
By Alexander Culafi • July 22, 2021 -
Brand Experience Team/TechTarget
Why patching vulnerabilities is still a problem, and how to fix it
Patching is still a struggle for many organizations, and challenges include limited resources, technical debt, decentralized infrastructure and much more.
By Alexander Culafi • July 13, 2021 -
Brand Experience Team/TechTarget
Opinion
5 steps to implement threat modeling for incident response
This five-step process to develop an incident response plan from Rohit Dhamankar of Alert Logic includes threat modeling, which is key to thwarting cyber attacks.
By Rohit Dhamankar • July 8, 2021 -
Brand Experience Team/TechTarget
Tips for MSPs to bridge the cybersecurity talent gap
Hiring and retaining cybersecurity professionals represent uphill battles. Some MSPs have adopted a combination of internal training and AI tools to offset the dearth in talent.
By Kristen Putch • July 6, 2021 -
Brand Experience Team/TechTarget
SolarWinds response team recounts early days of attack
During a webcast, members of the SolarWinds incident response team explained how a lucky break with a virtual machine aided their investigation into the historic breach.
By Shaun Nichols • June 17, 2021 -
Brand Experience Team/TechTarget
Introduction to security chaos engineering
How to get started with security chaos engineering
Introducing security chaos engineering: the latest methodology security teams can implement to proactively discover vulnerabilities or weaknesses in a company's system.
By Michael Cobb • June 15, 2021 -
Brand Experience Team/TechTarget
Security observability vs. visibility and monitoring
Security observability, monitoring and visibility play different roles but together provide the tools to establish an all-encompassing enterprise security architecture.
By Andrew Froehlich • June 3, 2021 -
Brand Experience Team/TechTarget
White House issues ransomware directive for businesses
The Biden administration aims to stem parade of ransomware infections, data thefts and massive payouts to cybercriminal groups with a list of security best practices.
By Shaun Nichols • June 3, 2021 -
Brand Experience Team/TechTarget
How to handle social engineering penetration testing results
In the wake of conducting social engineering penetration testing, companies need to have a plan ready to prevent or minimize phishing, vishing and other attacks.
By No Starch Press, Kyle Johnson • June 3, 2021 -
Brand Experience Team/TechTarget
How to ethically conduct pen testing for social engineering
Author Joe Gray explores his interest in pen testing for social engineering, what it means to be an ethical hacker and how to get started in the career.
By Kyle Johnson • June 3, 2021 -
Brand Experience Team/TechTarget
Inept cybersecurity education and training feed into skills gap
Learn why former infosec instructor and author of 'How Cybersecurity Really Works' advocates for changes to security education and training to alleviate the industry skills gap.
By Katie Donegan • May 28, 2021 -
Brand Experience Team/TechTarget
Apiiro wins RSA Conference Innovation Sandbox Contest
Apiiro's automated Code Risk Platform analyzes enterprise software for material changes that can lead to security vulnerabilities, data exposures and compliance risks.
By Rob Wright • May 27, 2021 -
Brand Experience Team/TechTarget
Operational technology is the new low-hanging fruit for hackers
FireEye researchers say exposed and poorly guarded industrial systems are being increasingly compromised by low-skill hackers using entry-level exploit techniques.
By Shaun Nichols • May 25, 2021 -
Brand Experience Team/TechTarget
ethical hacker
An ethical hacker, or white hat hacker, is an information security expert authorized by an organization to penetrate computing infrastructure to find security vulnerabilities a malicious hacker could exploit.
By Garry Kranz, Linda Rosencrance, Michael Cobb • May 21, 2021 -
Brand Experience Team/TechTarget
4 ways to handle the cybersecurity skills shortage in 2021
More than half of cybersecurity pros say their organizations could do more to manage negative effects of the skills shortage, such as overwork and burnout. Find out how.
By Alissa Irei • May 20, 2021 -
Brand Experience Team/TechTarget
Attorneys share worst practices for data breach response
Angry emails, bad jokes and sloppy reports can all lead to legal headaches following a data breach, according to a panel of experts at RSA Conference 2021.
By Shaun Nichols • May 18, 2021 -
Brand Experience Team/TechTarget
5 ways bad incident response plans can help threat actors
Infosec executives from Netskope and Chipotle Mexican Grill hosted an RSA Conference session about their personal experiences and lessons learned while responding to attacks.
By Arielle Waldman • May 18, 2021 -
Brand Experience Team/TechTarget
From EDR to XDR: Inside extended detection and response
As the definition of endpoints evolves, so too must the technology to protect them. Enter extended detection and response, or XDR -- one of cybersecurity's hottest acronyms.
By Sharon Shea • May 10, 2021 -
Brand Experience Team/TechTarget
Expert Advice // Getting started with automated GRC in the enterprise
How to successfully automate GRC systems in 7 steps
There is more to automating GRC programs than technology alone. This implementation roadmap helps IT leaders effectively plan, deploy and monitor GRC activities and tools.
By Paul Kirvan • May 7, 2021
Previous
