Security Operations: Page

Rise in ransom payments may fuel more dangerous attacks

A new report from Coveware found that ransom payments increased significantly in Q1 this year, as did ransomware actors' use of software vulnerabilities in attacks.

By Arielle Waldman • April 27, 2021

How cloud monitoring dashboards improve security operations

Cloud monitoring dashboards can help security teams achieve visibility in complex, sprawling environments. Learn about cloud-native, third-party and open source deployment options.

By Ed Moyle • April 22, 2021

Companies must train their SOC teams well to prevent breaches

SOC teams can have all the latest and greatest cybersecurity tools, but unless they have the proper training, it won't be enough to mitigate an attack.

By Wayne Pruitt • April 16, 2021

Advice on how to prepare for the CompTIA Security+ exam

The CompTIA Security+ certification is a smart starting point for cybersecurity career hopefuls. Learn how to prepare for the exam, what to expect post-certification and more.

By Sharon Shea • April 12, 2021

Sample CompTIA Security+ exam questions and answers

The CompTIA Security+ exam covers a wide swath of topics, from threats to compliance to architecture. Test what you know about malware with these sample test questions.

By Wiley Publishing, Sharon Shea • April 12, 2021

Threat intelligence frameworks to bolster security

Organizations have many threat intelligence frameworks to work with, each with its own advantages. From for-profit to nonprofit, here's help to figure out which ones you need.

By Johna Johnson • April 12, 2021

MDR vs. MSSP: Why it’s vital to know the difference

When assessing MDR vs. MSSP, the key is understanding why the two aren't interchangeable and how each handles response.

By Diana Kelley • April 7, 2021

Can a new DHS cybersecurity strategy help the private sector?

The U.S. Department of Homeland Security outlines federal plans to improve public and private cybersecurity, but analysts advise caution over strategies that can't be mandated.

By Kate Gerwig • April 5, 2021

6 AIOps security use cases to safeguard the cloud

Explore six AIOps security use cases in cloud environments, such as threat intelligence analysis and malware detection, as well as expert advice on implementation considerations.

By Dave Shackleford • March 18, 2021

Information security quizzes to test your cybersecurity smarts

Test your knowledge of everything cybersecurity, from network security to regulatory compliance, with our collection of information security quizzes.

March 15, 2021

How to become a threat hunter

Top threat hunters are creative and slightly contrarian, enabling them to think outside the box -- much like the best cybercriminals, according to one expert.

By Alissa Irei • March 4, 2021

5 cyber threat intelligence feeds to evaluate

Cyber threat intelligence feeds help organizations up their security game. While the 'best' feeds vary depending on a company's needs, here are five leading services to consider.

By Johna Johnson • Feb. 23, 2021

Introducing development teams to threat modeling in SDLC

Enterprises can improve their security posture by educating development teams on threat modeling so they can work alongside security teams and everyone knows a common language.

By Kyle Johnson • Feb. 22, 2021

5 cybersecurity lessons from the SolarWinds breach

Ransomware attack simulations, accessing enterprise logs and pen testing software code are among the best practices cybersecurity pros suggest following the SolarWinds breach.

By Sandra Gittlen • Feb. 8, 2021

Secure multi-cloud with architecture and governance focus

Certified enterprise and security architect Jeroen Mulder explains why multi-cloud security architecture planning should be informed by the business and customer perspectives.

By Katie Donegan • Feb. 3, 2021

Akamai: Extortion attempts increase in DDoS attacks

New research from Akamai Technologies shows record-breaking DDoS attacks surged in 2020 while extortion-related campaigns against a variety of targets also increased.

By Arielle Waldman • Jan. 26, 2021

Adopting threat hunting techniques, tactics and strategy

Adopt threat hunting techniques that analyze the right data, detect anomalies, use frameworks and compare success metrics, combining manual techniques with AI and machine learning.

By Johna Johnson • Jan. 21, 2021

Combine ML with human intelligence for your security strategy

As hackers target the ever-increasing complexity of company networks, enterprises need to find a balance between machine learning and human intelligence when protecting systems and data.

By Rohit Dhamankar • Jan. 19, 2021

Extended detection and response tools take EDR to next level

Extended detection and response tools offer new capabilities -- among them greater visibility -- to enterprises searching for better ways to protect their endpoints.

By Michael Cobb • Jan. 14, 2021

Defending against SolarWinds attacks: What can be done?

While no defense is guaranteed, zero-trust access and behavioral monitoring can be useful against nation-state hackers and threats like the SolarWinds attacks.

By Arielle Waldman • Jan. 7, 2021

Explore benefits and challenges of cloud penetration testing

Cloud penetration testing presents new challenges for information security teams. Here's how a playbook from the Cloud Security Alliance can help inform cloud pen test strategies.

By Nick Lewis • Jan. 7, 2021

The enterprise case for implementing live-fire cyber skilling

Companies continue to grapple with the cybersecurity skills gap, but Adi Dar offers a way to ensure security teams are properly trained through the use of live exercises.

By Adi Dar • Dec. 31, 2020

Review 6 phases of incident response for GCIH exam prep

'GCIH GIAC Certified Incident Handler All-in-One Exam Guide' takes a deep dive into the six phases of incident response to help security pros with GCIH exam prep and certification.

By Katie Donegan, McGraw Hill Education • Dec. 30, 2020

Preparing for GIAC Certified Incident Handler certification

The author of 'GCIH GIAC Certified Incident Handler All-in-One Exam Guide' shares advice on how to prepare for the exam and why an incident response career can be so rewarding.

By Katie Donegan • Dec. 30, 2020

What is SecOps? Everything you need to know

SecOps, formed from a combination of security and IT operations staff, is a highly skilled team focused on monitoring and assessing risk and protecting corporate assets, often operating from a security operations center, or SOC.

By Sandra Gittlen • Dec. 23, 2020