Security Operations: Page

How to write a quality penetration testing report

Writing a penetration testing report might not be the most fun part of the job, but it's a critical component. These tips will help you write a good one.

By Charles Shirer • Jan. 22, 2020

CrowdStrike: Intrusion self-detection, dwell time both increasing

The 2019 CrowdStrike Services Cyber Front Lines Report found that while the percentage of organizations that self-detected an intrusion is up, dwell time has gone up as well.

By Alexander Culafi • Jan. 14, 2020

Threat actors scanning for vulnerable Citrix ADC servers

Scans for vulnerable Citrix servers were discovered by security researchers following the disclosure of a remote code execution flaw in Citrix ADC and Gateway products.

By Michael Heller • Jan. 10, 2020

CISM practice questions to prep for the exam

Risk management is at the core of being a security manager. Practice your risk management knowledge with these CISM practice questions.

By McGraw Hill Education, Sharon Shea • Jan. 7, 2020

5 cybersecurity vendors to watch in 2020

A number of cybersecurity startups earned tens of millions of dollars in venture capital investments last year. Here are five such vendors poised to emerge and grow in 2020.

By Alexander Culafi • Jan. 6, 2020

3 steps to prepare IT operations for multi-cloud

Organizations must ready their IT operations for multi-cloud and the unique security challenges ahead. Equip your IT ops team with the right people and processes to adapt smoothly.

By John Burke • Jan. 2, 2020

IT vs. OT security -- and how to get them to work together

While IT and OT security have historically been separate, the advent of IoT is forcing the two together. Cross-pollinating IT with OT is critical to ensuring IoT security.

By Ashwin Krishnan • Dec. 30, 2019

Siemplify looks to streamline security operations for enterprises

Siemplify aims to become the security equivalent of Salesforce. Chief strategy officer Nimmy Reichenberg discusses the company's plans for 2020 and the obstacles it faces.

By Alexander Culafi • Dec. 26, 2019

Learn some key cloud workload protection best practices

Learn key practices to protect cloud workloads whether using VMs, endpoints or containers. And don't forget to consider the best means for building a fruitful feedback loop.

By Dave Shackleford • Dec. 19, 2019

Cyberinsurance is on the rise -- and so is ransomware

A debate has erupted between the insurance industry and the infosec community over whether cyberinsurance payouts have led to the surge in ransomware attacks this year.

By Rob Wright • Dec. 18, 2019

Data breach risk factors, response model, reporting and more

Dig into five data breach risk factors, and learn how the DRAMA data breach response model can help enterprises counter breaches in a timely and efficient manner.

By Sharon Shea • Dec. 17, 2019

Latest city ransomware attack: New Orleans

The city of New Orleans declared a state of emergency as the government tries to get systems back online following a ransomware attack Friday morning.

By Michael Heller • Dec. 16, 2019

Ideal DevSecOps strategy requires the right staff and tools

Sometimes viewed as an obstacle to speedy software rollout, the DevSecOps model helps security teams drive innovation in development. Learn how to build a DevSecOps strategy.

By Katie Donegan • Dec. 11, 2019

IT security threat management tools, services to combat new risks

Advances in tools and services are changing IT security threat management. Learn how infosec pros are using UTM platforms, AI and threat intelligence services to alleviate risk.

By Andrew Froehlich • Dec. 5, 2019

Building a security operations center with these features

Building a security operations center means understanding the key features you need to ensure your network remains protected against threats.

By Johna Johnson • Nov. 22, 2019

Android Security Rewards program expands, adds $1.5M bounty

Google expanded its Android bug bounty program to include data exfiltration and lock screen bypass and raised its top prize for a full chain exploit of a Pixel device.

By Michael Heller • Nov. 22, 2019

Do you have the right set of penetration tester skills?

Pen testing is more than just the fun of breaking into systems. Learn about the critical penetration tester skills potential candidates must master to become proficient in their career path.

By Charles Shirer • Nov. 21, 2019

Designing the future of cyber threat intelligence sharing

Attendees at the ACSC conference strategized about what ideal threat intelligence sharing looks like. Learn more about the future of collaborative cyberdefense.

By Katie Donegan • Nov. 20, 2019

CrowdStrike: Incident response times still too long

A CrowdStrike study revealed it takes enterprise security teams almost seven days of nonstop work to detect, investigate and contain the average incident.

By Alexander Culafi • Nov. 19, 2019

Rise in ransomware attacks prompts new prevention priorities

Officials predict that already widespread ransomware attacks will only grow in scale and influence, while urging organizations to act now to guard against them.

By Mary Pratt • Nov. 19, 2019

Enterprises feel the pain of cybersecurity staff shortages

It's hard enough keeping up with today's threats on a good day. But when your IT organization is spread thin, especially in terms of cybersecurity staff, the challenges mount.

By Jessica Scarpati • Nov. 1, 2019

Splunk Mission Control launch enables a unified SOC

Mission Control is intended to unify Splunk Enterprise Security, Splunk Phantom and Splunk User Behavior Analytics into the Splunk Security Operations Suite.

By Ha Ta • Oct. 30, 2019

What are the roles and responsibilities of a liaison officer?

While liaison officer responsibilities vary depending on the company they work for, their strong organizational and communications skills make them critical to incident response.

By Mike Rothman, Sharon Shea • Oct. 29, 2019

On a penetration tester career path, flexibility and curiosity are key

Becoming a pen tester takes more than passing an exam. Learn the qualities ethical hackers should embrace to achieve success on their penetration tester career path.

By Sharon Shea • Oct. 25, 2019

Cyber insurance has changed incident response -- for better or worse

Cyber insurance carriers are assuming greater control over how enterprises conduct incident response, which has caused angst and frustration among some security vendors.

By Rob Wright • Oct. 25, 2019