Security Operations: Page

How do trusted app stores release and disclose patches?

A flaw was found in the Android installer for Fortnite and was patched within 24 hours. Learn how such a quick turnaround affects mobile app security with expert Nick Lewis.

By Nick Lewis • Feb. 15, 2019

Why did a Cisco patch for Webex have to be reissued?

Cisco's Webex Meetings platform had to be re-patched after researchers found the first one was failing. Discover what went wrong with the first patch with Judith Myerson.

By Judith Myerson • Feb. 14, 2019

5-step checklist for web application security testing

This five-step approach to web application security testing with documented results will help keep your organization's applications free of flaws.

By Kevin Beaver • Feb. 11, 2019

Is there a viable breach notification tool?

A breach notification tool from Firefox Monitor and Have I Been Pwned could help consumers understand more quickly if their email or other vital information has been hacked.

By Nick Lewis • Feb. 7, 2019

Gartner: Expanding SOC capabilities a priority for enterprises

Reinvesting in SOCs and crafting clear risk appetite statements made the list of Gartner's top security and risk management trends. Experts sound off on what's driving these trends.

By Mekhala Roy • Feb. 7, 2019

Cutting SecOps breach response time is key to success

A new survey measures the success of security operations breach response by how long it takes to complete a three-step process to detect, understand and contain incidents.

By Kate Gerwig • Feb. 1, 2019

Try this quiz on cybersecurity problems to earn CPE credit

This quiz tests your understanding of key cybersecurity issues in 2019 covered in the February issue of 'Information Security' magazine. Pass the quiz and earn CPE credit.

By Brenda Horrigan • Feb. 1, 2019

Cyber NYC initiative strives to make New York a cybersecurity hub

New York City officials have launched Cyber NYC, a multifaceted initiative to grow the city's cybersecurity workforce while helping companies drive cybersecurity innovation.

By Mary Pratt • Feb. 1, 2019

Experts: A breach response plan is a must in 2019

During an IT GRC Forum webinar, experts explain the need for shedding legacy security approaches and highlight the gravity of drafting a data breach response plan.

By Mekhala Roy • Jan. 18, 2019

Shutdown of federal security services puts private sector at risk

In addition to putting government agencies at risk, the shutdown has impacted federal security services and resources that the private sector relies on to keep enterprises safe.

By Michael Heller • Jan. 17, 2019

Government cybersecurity at risk as shutdown lingers

As the shutdown continues, experts believe government cybersecurity will become more vulnerable, and government IT staff could leave for the private sector.

By Michael Heller • Jan. 17, 2019

Enterprises betting on SOAR tools to fill security gaps

Security experts sound off on the importance and benefits of automating security, and highlight factors to be considered before implementing SOAR tools.

By Mekhala Roy • Jan. 16, 2019

Kaspersky Lab aided NSA hacking tools investigation

News roundup: According to a new report from Politico, Kaspersky Lab aided the NSA in catching alleged data thief Harold Martin. Plus, telecoms are selling customer data, and more.

By Madelyn Bacon and Casey Clark • Jan. 11, 2019

McAfee: When quantum computing threats strike, we won’t know it

Quantum computing systems may not be powerful enough to break current encryption protocols, but McAfee CTO Steve Grobman says it will be tough to tell when that day arrives.

By Rob Wright • Dec. 20, 2018

Product roundup: Features of top SIEM software on the market

Explore the top SIEM software and vendors currently on the market to make your decision-making process just a little bit easier.

By Bob Violino • Dec. 11, 2018

New VirusTotal hash causes drop in antivirus detection rates

Questions were raised about how antivirus vendors use the VirusTotal database after a researcher highlighted a significant drop in malware detection rates following an upload of a new VirusTotal hash.

By Michael Heller • Dec. 5, 2018

Ron Green: Keeping the payment ecosystem safe for Mastercard

"We have invested a billion dollars over the last couple of years just in security," says Ron Green, Mastercard's chief of security, who joined the company in 2014.

By Alan Earls • Dec. 3, 2018

Threat hunting techniques move beyond the SOC

Tired of waiting for signs of an attack, companies are increasingly adding threat hunting capabilities to their playbooks to find likely ways their systems could be infiltrated.

By Robert Lemos • Dec. 3, 2018

The threat hunting process is missing the human element

Threat hunting hinges on an analyst's ability to create hypotheses and to look for indicators of compromise in your network. Do you have the resources to hunt?

By Kathleen Richards • Dec. 3, 2018

How does Thanatos ransomware decryptor tool restore data?

Cisco Talos' Thanatos ransomware decryptor can recover files affected by new ransomware that won't decrypt ransomed files even when a ransom has been paid.

By Nick Lewis • Nov. 16, 2018

BT Security CEO: Red teaming is valuable, but challenging

During the Securing the Enterprise conference at MIT's CSAIL, BT Security CEO Mark Hughes discusses the benefits and challenges red teaming has presented to his company.

By Rob Wright • Nov. 15, 2018

How testing perspectives helps find application security flaws

Application security testing requires users to test from all the right perspectives. Discover testing techniques that help find application security flaws with expert Kevin Beaver.

By Kevin Beaver • Nov. 6, 2018

NIST incident response plan: 4 steps to better incident handling

The NIST incident response plan involves four phases enterprises can take to improve security incident handling. Expert Mike O. Villegas reviews each step.

By Mike Villegas • Oct. 31, 2018

(ISC)2: Cybersecurity workforce shortage nears 3 million worldwide

With a workforce in short supply, the skills gap has affected the professional growth of security pros worldwide, an (ISC)2 Cybersecurity Workforce Study found.

By Kathleen Richards • Oct. 19, 2018

How can companies implement ITSM compliance standards?

In this Ask the Expert, IT governance expert Jeffrey Ritter discusses his formula to successfully align new technology with ITSM compliance standards -- all while minimizing risk.

By Jeffrey Ritter • Oct. 12, 2018