Security Operations: Page

CompTIA PenTest+ practice test questions to assess your knowledge

Think you're ready to take the CompTIA PenTest+ certification exam? Test your skill set with some of the sample multiple-choice questions you may be facing.

By McGraw Hill Education, Sharon Shea • Oct. 24, 2019

Combat the human aspect of risk with insider threat management

When it comes to insider threat awareness and prevention, enterprises would be wise to marry a people-centric approach with a technology-centric approach.

By Katie Donegan • Oct. 23, 2019

Malware detection methods struggle to keep up with evolving threats

Experts discuss the increasingly complex methods of malware detection needed when dealing with everything from low-level attackers to advanced persistent threat groups.

By Michael Heller • Oct. 21, 2019

DevSecOps model requires security get out of its comfort zone

Shifting from DevOps to DevSecOps isn't always easy, with the transition requiring changes to culture, processes and people. Here's how security can help lead the charge.

By Alissa Irei • Oct. 18, 2019

Essential instruments for a pen test toolkit

Does your penetration testing toolkit have the proper contents? Learn the must-have tool for any pen tester, as well as specific tools for wireless, network and web app pen testing.

By Charles Shirer • Oct. 15, 2019

To secure DevOps, break culture and tooling barriers

The importance of secure DevOps initiatives can't be denied, but building security into DevOps isn't easy. Explore what needs to change and how those changes can be achieved.

By Sharon Shea • Oct. 7, 2019

The 3 pillars of a DevSecOps model

In this excerpt from Chapter 1 of Securing DevOps: Security in the Cloud, author Julien Vehent describes three principles critical to the DevSecOps model.

By Manning Publications Co., Sharon Shea • Oct. 7, 2019

How security teams benefit from traffic mirroring in the cloud

Enterprises with the resources to deploy traffic mirroring are gaining security benefits. Frank Siemons explains how traffic mirroring has adapted to new and evolving cyber-risks.

By Frank Siemons • Oct. 3, 2019

Sophos launches Managed Threat Response service

The new offering is built on Sophos' endpoint security platform Intercept X Advanced, with capabilities supported by the company's recent acquisition of Rook Security and DarkBytes.

By Ha Ta • Oct. 1, 2019

Top tips for using the Kali Linux pen testing distribution

It's the best Linux distro for penetration testers' toolkits, but it's not just any Linux. Get tips on Kali Linux pen testing from project lead Jim O'Gorman.

By Peter Loshin • Sept. 26, 2019

After Bugcrowd pilot, Air Force bug bounty program eyes expansion

The U.S. Air Force is eyeing an expansion of its bug bounty efforts after partnering with Bugcrowd on a three-month pilot program for its cloud platform.

By Rob Wright • Sept. 26, 2019

Penetration testing vs. red team: What’s the difference?

Is penetration testing the same as red team engagement? There are similarities, but they're not the same. Understand the differences to improve your organization's cyberdefenses.

By Charles Shirer • Sept. 26, 2019

When should I use breach and attack simulation tools?

Thanks to automation and other features, breach and attack simulation tools are an effective way to help network administrators keep their operations secure.

By Andrew Froehlich • Sept. 26, 2019

Build an agile cybersecurity program with Scrum

Scrum's core principles translate well into an agile cybersecurity program setting. Learn how this framework bolsters communication and collaboration within infosec teams.

By Steven Weil • Sept. 25, 2019

How to use SOAR tools to simplify enterprise infosec programs

SOAR tools are designed to deliver convenience and simplicity to cybersecurity programs. Explore the many benefits security orchestration and automation promises users.

By Katie Donegan • Sept. 25, 2019

Tips and tricks to integrate IT and OT teams securely

IT and operational teams can work in tandem to support IoT projects, but their separate roles and responsibilities to one another must be clearly defined.

By Johna Johnson • Sept. 20, 2019

What’s the role of people in IT/OT security?

To enable a smoother, more secure IT/OT convergence, get wise to the potential conflicts between IT and OT historical priorities and traditional work cultures.

By Jessica Groopman • Sept. 20, 2019

What it takes to be a DevSecOps engineer

To address security early in the application development process, DevSecOps requires a litany of skills and technology literacy. Learn what it takes to be a DevSecOps engineer.

By Michael Cobb • Sept. 12, 2019

Trustwave security platform provides visibility, control

Trustwave Fusion is a cloud-based cybersecurity platform designed with the goal of giving users better insight into how security resources are provided and monitored.

By Tanner Harding • Sept. 6, 2019

Awake Security adds adversarial model to security platform

The new feature is meant to enable companies to identify attackers faster. Other updates to the security system include extending cloud capabilities to Amazon Web Services.

By Tanner Harding • Sept. 5, 2019

Varied options to solving the cybersecurity skills shortage

There are no easy answers for the cybersecurity skills shortage facing the industry, other than working harder to diversify and expand the workforce, according to ESG's Jon Oltsik.

By Peter Loshin • Aug. 30, 2019

Imperva security incident exposes cloud WAF customer data

Imperva told its cloud WAF customers to change passwords and SSL certificates after a security incident exposed data and potentially put customers at risk for further attacks.

By Michael Heller • Aug. 28, 2019

Complexity requires new cloud-based patch management strategies

Patch management for cloud creates new challenges than traditional in-house programs. Expert Dave Shackleford presents patch management best practices for providers and consumers alike.

By Dave Shackleford • Aug. 27, 2019

Puppet launches its first vulnerability remediation product

Puppet Remediate is a vulnerability remediation product that shares data between security and IT ops, provides risk-based prioritization and offers agentless remediation.

By Tanner Harding • Aug. 26, 2019

The difference between zero-day vulnerability and zero-day exploit

A zero-day vulnerability isn't the same as a zero-day exploit. Learn the difference between these two zero-day terms, as well as why they should be high priority on any CISO's patching list.

By Andrew Froehlich • Aug. 21, 2019