Security Operations: Page

Using AIOps for cybersecurity and better threat response

AIOps platforms, when properly tuned, can benefit all of IT in important ways. Learn how these advanced security tools improve threat detection and response in myriad ways.

By Andrew Froehlich • April 6, 2020

Best practices for threat modeling service mesh, microservices

In microservices and service mesh environments, communications don't follow static paths. As such, security teams must update their application threat modeling methods.

By Ed Moyle • March 30, 2020

CISA exam preparation requires learning ethics, standards, new vocab

The CISA certification is proof of an auditor's knowledge and skills. However, the exam isn't easy and requires some heavy learning -- especially when it comes to vocabulary.

By Sharon Shea • March 26, 2020

CISA practice questions to prep for the exam

Ready to take the Certified Information Systems Auditor exam? Use these CISA practice questions to test your knowledge of the audit process job practice domain.

By McGraw Hill Education, Sharon Shea • March 26, 2020

Emsisoft, Coveware offer free ransomware services to hospitals

As they grapple with the COVID-19 pandemic, healthcare providers will have free access to a range of ransomware-related services from security vendors Emsisoft and Coveware.

By Arielle Waldman • March 20, 2020

ITOps security requires attention to training

Becoming fluent about IT security is critically important for numerous aspects of ITOps, yet many organizations fail to train their ITOps staff in security.

By Andrew Froehlich • March 12, 2020

Risky ransomware payments on the rise, attacks increasing

Making payments to threat actors to retrieve data was once viewed in black-and-white terms. But RSA Conference attendees say attitudes about paying up have changed drastically.

By Rob Wright • March 5, 2020

With BEC/EAC threats rising, Proofpoint offers a new approach

Business email compromise and email account compromise attacks are increasing and evolving. To keep up with threat actors, Proofpoint says a new approach is required.

By Arielle Waldman • March 5, 2020

Should ransomware payments be insurable? Experts weigh in

Ransomware payments are insurable, but should they be? Several experts weighed in on the question, and the effect of cyberinsurance, during RSA Conference 2020.

By Alexander Culafi • March 4, 2020

How to use TODO comments for secure software development

Don't let security be a software development burden. Learn app developer tricks, such as using TODO comments, to ensure security controls make it from development to production.

By Michael Cobb • Feb. 27, 2020

Target embraces cyber war gaming to improve incident response

At an RSA Conference 2020 panel, Target explained how the company is using war gaming to simulate real attacks and data breaches in order to hone its incident response plan.

By Alexander Culafi • Feb. 26, 2020

Security testing web applications and systems in the modern enterprise

Security testing web apps with little budget and poor documentation is difficult. Ric Messier discusses building a security testing lab in the DevSecOps, cloud and automation age.

By Sharon Shea • Feb. 26, 2020

Software security testing and software stress testing basics

In this excerpt from Ric Messier's book, learn why software security testing and stress testing are critical components of an enterprise infosec program.

By McGraw Hill Education, Sharon Shea • Feb. 26, 2020

Securiti.ai wins RSA Innovation Sandbox Contest

Securiti.ai, which offers an AI-powered 'PrivacyOps' platform, took home the title of 'Most Innovative Startup' at RSA Conference's Innovation Sandbox Contest.

By Arielle Waldman • Feb. 26, 2020

Colorado CISO details SamSam ransomware attack, recovery

At RSA Conference, Colorado CISO Deborah Blyth gave an inside look at the state's response and recovery effort following a devastating SamSam ransomware infection in 2018.

By Rob Wright • Feb. 25, 2020

Cisco launches SecureX platform for integrated security

At RSA Conference 2020, Cisco unveiled SecureX, which integrates the vendor's security portfolio into a single platform with enhanced visibility and automation.

By Rob Wright • Feb. 24, 2020

AI-driven cybersecurity teams are all about human augmentation

AI is often associated with technology replacing humans. In the case of AI-based cybersecurity teams, however, AI will augment its human counterparts, not supplant them.

By Jessica Groopman • Feb. 19, 2020

NSS Labs quietly acquired by private equity firm

Product testing company NSS Labs was acquired by private equity firm Consecutive, Inc., last October but neither company publicly announced the deal.

By Rob Wright, Alexander Culafi • Feb. 6, 2020

Try this cybersecurity quiz to test your (threat) intelligence

Check out our latest issue, and then test your understanding of the material. By passing this quiz, you'll solidify your knowledge and earn CPE credit, too.

By Brenda Horrigan • Feb. 6, 2020

How to combat the top 5 enterprise social media risks in business

Learn how social networking sites compound the insider threat risk, and explore how to mitigate the threat with policy, training and technology.

By Ed Skoudis, Katie Donegan • Feb. 6, 2020

2 components of detection and threat intelligence platforms

Deploying threat detection and intelligence platforms is one of the smartest ways to protect your organization's valuable assets. Make sure you know how to choose the best tool.

By Johna Johnson • Feb. 3, 2020

Threat intelligence offers promise, but limitations remain

Do you know how to use threat intelligence feeds to best effect in your company? Learn what this valuable yet often confusing resource can and can't do for cybersecurity.

By Robert Lemos • Feb. 3, 2020

‘Computer Security Fundamentals:’ Quantum security to certifications

New topics, from security engineering to quantum computing, are covered in 'Computer Security Fundamentals,' but the book's author suggests readers review some basic topics, too.

By Sharon Shea • Jan. 28, 2020

How does antimalware software work and what are the detection types?

Virus detection techniques used by antimalware tools can be a huge boost to enterprise cybersecurity programs. Learn how antimalware software works and its benefits in this tip.

By Nick Lewis and Lenny Zeltser • Jan. 27, 2020

Proofpoint: Ransomware payments made in half of U.S. attacks

According to Proofpoint's 2020 'State of the Phish' report, 51% of U.S. organizations surveyed opted to pay threat actors after being hit with a successful ransomware attack.

By Arielle Waldman • Jan. 24, 2020