Security Operations: Page

How to conduct proper AWS vulnerability scanning in 3 steps

Cloud vulnerability management can be complicated. Learn how to perform AWS vulnerability scans under the shared responsibility model.

By Sharon Shea , Rob Shapland • Aug. 19, 2019

How to build an enterprise penetration testing plan

Simulating an attack against your network is one of the best ways to remediate security holes before the bad guys find them. Here, learn penetration testing basics and how it can help keep your enterprise safe.

By Andrew Froehlich • Aug. 19, 2019

DevOps security checklist requires proper integration

There are a lot of moving parts to adding security into a DevOps environment. Using application testing DevOps security tools are key to the equation.

By Michael Cobb • Aug. 17, 2019

Apple bug bounty expands to MacOS, offers $1 million iOS reward

Apple announced an expansion of its bug bounty program at Black Hat 2019, including rewards for MacOS vulnerabilities and a $1 million reward for a zero-click iOS exploit.

By Michael Heller • Aug. 8, 2019

LogicHub introduces automation updates to its SOAR platform

Security vendor LogicHub introduced new features to its SOAR platform that intend to automate tedious threat detection and response processes and save security teams time.

By Sabrina Polin • Aug. 6, 2019

How to start building a DevSecOps model

To help transition to a DevSecOps model to protect enterprises, security teams need to identify key stakeholders, provide examples of specific company security events and work toward creating crossover teams.

By Michael Cobb • Aug. 5, 2019

The must-have skills for cybersecurity aren’t what you think

The most critical skills that cybersecurity lacks -- like leadership buy-in, people skills and the ability to communicate -- are not the ones you hear about. That needs to change.

By Kevin Beaver • Aug. 2, 2019

Qualys IOC 2.0 update improves threat detection and response

Qualys IOC 2.0 comes with increased threat detection and response capabilities designed to more accurately detect indicators of compromise and potential cyberattacks.

By Sabrina Polin • July 31, 2019

AT&T introduces managed threat detection and response service

Using Alien Labs threat intelligence, AT&T Cybersecurity's Managed Threat Detection and Response service intends to identify and contain cybersecurity threats sooner to reduce data breaches.

By Sabrina Polin • July 30, 2019

How to pass the CISSP exam on your first try: Tips to get a good score

Want to become a CISSP? Here's everything you need to know, such as how difficult the exam is, tips for studying, what's needed to obtain a passing score and more.

By Andrew Briney and Jessica Scarpati • July 30, 2019

Cisco engineer: Why we need more women in cybersecurity

Progress on the cybersecurity gender gap has been slow but steadier recently. Cisco engineer Michele Guel explains how to hack the gender gap.

By Katie Donegan • July 16, 2019

British Airways security incident garners record GDPR fine

The ICO plans to levy a record GDPR fine of nearly $230 million against British Airways for a security incident that led to 500,000 customers having their data compromised.

By Michael Heller • July 9, 2019

Attackers turn the tables on incident response strategies

Attackers expect incident response strategies and have a plan for when they encounter them. Find out how to take IR to the next level against attacker incident response counterstrategies.

By Peter Loshin • July 8, 2019

Boost application security in DevOps with DevSecOps

Without DevSecOps, application security can end up on the back burner during application development. Learn how DevSecOps can bake security back into the process.

By Michael Cobb • July 8, 2019

Phishing-as-a-service threats abusing cloud services

According to new research, phishing kit providers are increasingly using popular cloud services to host their malicious links in an effort to conceal them from detection.

By Rob Wright • July 2, 2019

Comparing EDR tools: Cybereason vs. CrowdStrike vs. Carbon Black

Learn how tools from leading EDR vendors Cybereason, CrowdStrike and Carbon Black compare when it comes to helping security teams fight endpoint threats and respond to incidents.

By Kevin Beaver • June 28, 2019

Strategies to mitigate cybersecurity incidents need holistic plans

Every organization needs strategies to mitigate cybersecurity incidents, but what areas should the strategies address? Find out what experts suggest to protect the entire organization.

By Mike Chapple • June 28, 2019

Stellar Cyber launches Starlight 3.1 for AI threat detection

Stellar Cyber, a security analytics vendor, launched Starlight 3.1 as its first unified security analytics platform, using AI and machine learning to detect and thwart attacks.

By Sabrina Polin • June 26, 2019

As cloud complexities increase, cybersecurity skills gap worsens

Concerns about the lack of security expertise persist, according to respondents in a new CSA survey of IT and security professionals on complexities within native cloud, hybrid and multi-cloud environments.

By Katie Donegan • June 21, 2019

BlueKeep warnings having little effect on Windows patching

DHS issued the latest security advisory for BlueKeep, but it's unclear whether the repeated warnings are being heeded by organizations that have vulnerable systems on the internet.

By Rob Wright • June 19, 2019

How can developers avoid a Git repository security risk?

Learn how managing web development content with the popular version control system can be risky without taking action to avoid these basic Git repository security risks.

By Hanno Böck • June 19, 2019

ReliaQuest’s cybersecurity platform integrates technologies

ReliaQuest's security analytics platform, GreyMatter, claims to improve threat detection by up to four times and reduce system downtime by 98% by integrating AI and human analysis.

By Sabrina Polin • June 18, 2019

SANS security awareness credential paves new career path

The SANS Security Awareness Professional credential gives enterprises a new method to recognize and promote cybersecurity awareness in the organization.

By Peter Loshin • June 14, 2019

Red alerts: Inside Cisco’s incident response best practices

Incident response is often challenging, but Cisco's Sean Mason offers recommendations for doing IR effectively, from keeping internal logs longer to embracing tabletop exercises.

By Rob Wright • June 11, 2019

How can SIEM and SOAR software work together?

Many security pros initially thought SOAR software could replace SIEM. Our security expert advocates learning how SIEM and SOAR can work together.

By Andrew Froehlich • May 31, 2019