Security Operations: Page

How to build a cloud security operations center

To better protect workloads and data in the cloud, security operations centers collaborate with various IT teams. Learn how to cloud-enable your organization's SOC.

By Dave Shackleford • Oct. 22, 2020

Evaluating SOC automation benefits and limitations

Security operations center automation can help address the security skills gap by scaling critical analyst responsibilities. But an overreliance on AI introduces other risks.

By Jessica Groopman • Oct. 21, 2020

NSS Labs ceases operations amid financial turmoil

Product testing firm NSS Labs shut down last week, citing negative effects of COVID-19, but former employees say the company's troubles started well before the pandemic.

By Rob Wright • Oct. 20, 2020

After a brief pause, Trickbot rebounds from takedown efforts

Attempts to disrupt the notorious Trickbot botnet, most recently through Microsoft's legal takedown, have proven short-lived as ransomware attacks have resumed.

By Arielle Waldman • Oct. 20, 2020

Blockchain or bust? Experts debate applications for elections

Blockchain has been proposed as a solution for security issues around e-voting. But some infosec experts are skeptical that the technology is the right fit for U.S. elections.

By Rob Wright • Oct. 14, 2020

Should ransomware payments be banned? Experts weigh in

Two events -- a new advisory and what might be the first ransomware-related death -- have reignited the debate of whether ransomware payments should be banned.

By Alexander Culafi • Oct. 8, 2020

Raccine: A ransomware ‘vaccine’ with a few catches

Raccine, an open source 'vaccine,' prevents ransomware threat actors from using a Windows utility to delete shadow copies of a system's data, but there are a few drawbacks.

By Alexander Culafi • Oct. 7, 2020

Cybersecurity team structure stronger with 3 new roles

Having the right cybersecurity team in place can help reduce how long it takes to control threats. Consider adding cloud security, third-party risk and digital ethics specialists.

By Johna Johnson • Sept. 24, 2020

7 SOC automation use cases to augment security operations

Implementing SOC automation can have far-reaching benefits for an organization's infosec program and security culture. Learn how by exploring these seven use cases of AI in SOCs.

By Jessica Groopman • Sept. 23, 2020

5 key enterprise SOC team roles and responsibilities

Review the key players in the 2020 SOC and their specific responsibilities, as well as best practices to ensure effective teamwork for a secure organization.

By Ashwin Krishnan • Sept. 23, 2020

ConnectWise launches bug bounty program to boost security

ConnectWise, which provides remote management software to MSPs, partnered with HackerOne in its first bug bounty program, which is part of a larger strategy to improve security.

By Arielle Waldman • Sept. 23, 2020

Gartner: Paying after ransomware attacks carries big risks

The average cost of a ransomware payment in Q1 2020 was $178,254, according to a session at Gartner's Security & Risk Management Summit -- and that doesn't include downtime cost.

By Alexander Culafi • Sept. 17, 2020

Infrastructure as code’s security risks and rewards

Infrastructure as code can yield some exciting security benefits for enterprises, but they each come with drawbacks. Learn more about the most critical IaC security impacts.

By Ed Moyle • Aug. 25, 2020

Former Uber CSO charged over ‘hush money’ payment to hackers

Joe Sullivan, who was fired by Uber in 2017, was charged by federal prosecutors for allegedly covering up a massive 2016 data breach at the ride-sharing company.

By Rob Wright • Aug. 21, 2020

CISSP practice exam questions and answers

Test your knowledge and preparedness for the CISSP exam with 16 questions taken directly from the latest 'CISSP All-in-One Exam Guide' from McGraw Hill.

By McGraw Hill Education, Sharon Shea • Aug. 20, 2020

‘Secure by Design’ principles include failures, exceptions

Using design principles with built-in security, along with properly defining exceptions, can help developers not only build safe code, but do so while meeting deadlines.

By Sharon Shea • Aug. 18, 2020

Exception handling best practices call for secure code design

Making software secure by design requires tremendous consideration about how failures are handled. Learn more from these exception handling examples.

By Manning Publications Co., Sharon Shea • Aug. 18, 2020

Hands-on guide to S3 bucket penetration testing

Attention AWS pen testers: The trick to understanding the indicators of AWS S3 bucket vulnerabilities is setting up an insecure bucket. Learn how in this actionable guide.

By Packt Publishing, Katie Donegan • Aug. 17, 2020

How to handle Amazon S3 bucket pen testing complexity

Security researcher Benjamin Caudill shares details from his book, 'Hands-On AWS Penetration Testing with Kali Linux,' and advice on Amazon S3 bucket pen testing for ethical hackers.

By Katie Donegan • Aug. 17, 2020

How to send secure email attachments

Sending sensitive information in attachments is inherently unsafe, and the main way to secure them -- encryption -- can be implemented inconsistently, negating security benefits.

By Michael Cobb, Michael Heller • Aug. 5, 2020

Test your cybersecurity knowledge with this quick ISM quiz

Read our August 2020 e-zine, and then take this short quiz to test your knowledge of cybersecurity awareness training and other issues -- from types of CISOs to talent recruitment.

By Brenda Horrigan • Aug. 3, 2020

Develop internal cybersecurity talent to build your dream team

Cybersecurity duties have changed, with cloud and coding being essential knowledge now. But CISOs can still build their dream cybersecurity team through internal talent development.

By Johna Johnson • Aug. 3, 2020

How to shift from DevOps to DevSecOps

A successful DevSecOps rollout requires software developers to be equipped with the proper security skills and tools. Learn how to transition smoothly from DevOps to DevSecOps.

By Mike Chapple • Aug. 3, 2020

IDS/IPS quiz: Intrusion detection and prevention systems

Want a baseline of your intrusion detection and prevention system knowledge? Test your insights with this IDS/IPS quiz.

By Sharon Shea • July 28, 2020

Follow 3 key steps to improve multi-cloud monitoring

Successful multi-cloud monitoring anticipates security vulnerabilities unique to operating across several environments. Follow these steps to improve multi-cloud security.

By Dave Shackleford • July 20, 2020