Security Operations: Page

Fine-tuning incident response automation for optimal results

Wondering where to apply automation to incident response in order to achieve the best results? The variety of options might be greater than you imagine. Read on to learn more.

By Dave Shackleford • July 16, 2018

How to integrate an incident response service provider

Adding a third-party incident response service to your cybersecurity program can bulk up enterprise defenses, but the provider must be integrated carefully to reap the benefits.

By Steven Weil • July 16, 2018

Chrome site isolation arrives to mitigate Spectre attacks

In an effort to mitigate the risk of Spectre attacks, Google Chrome site isolation has been enabled for 99% of browser users to minimize the data that could be gleaned by an attacker.

By Michael Heller • July 13, 2018

RAMpage attack unlikely to pose real-world risk, expert says

The RAMpage attack against the Rowhammer vulnerability in Android devices is theoretically possible, but it may be more academic than it is a practical concern, one expert said.

By Michael Heller • July 3, 2018

WebAssembly updates may cancel out Meltdown and Spectre fixes

News roundup: Upcoming WebAssembly updates may undo the Meltdown and Spectre mitigations. Plus, FireEye denied claims it 'hacked back' China, and more.

By Madelyn Bacon • June 29, 2018

GlobalSign, Comodo launch competing IoT security platforms

Rival certificate authorities GlobalSign and Comodo CA have strengthened their presence in the IoT security market with new platforms for connected devices.

By Rob Wright • June 29, 2018

How studying the black hat community can help enterprises

White hat hackers often assimilate themselves into the black hat community to track the latest threats. Discover how this behavior actually benefits the enterprise with David Geer.

By David Geer • June 26, 2018

How white hat hackers can tell you more than threat intelligence

White hat hackers can play a key role in assessing threats lurking on the dark web. Discover what traditional threat intelligence isn't telling you and how white hats can help.

By David Geer • June 19, 2018

Federal cybersecurity report says nearly 75% of agencies at risk

The 'Federal Cybersecurity Risk Determination Report and Action Plan' shows the majority of federal agencies are at risk, and DHS suggests a lack of leadership may be to blame.

By Michael Heller • June 1, 2018

McAfee CISO explains why diversity in cybersecurity matters

Improving diversity in cybersecurity teams can help improve their ability to address cybersecurity challenges through diversity of thought, suggests McAfee CISO Grant Bourzikas.

By Peter Loshin • May 30, 2018

Threat hunting technology is on the rise, so are threats

Detection of advanced threats is the top challenge for 55% of security operations centers, according to a new survey, as more companies explore threat hunting programs.

By Kathleen Richards • May 29, 2018

Recorded Future sheds light on Iranian hacking operations

Recorded Future's Levi Gundert discusses how the Iranian government uses proxies and contractors to launch cyberattacks, and how its strategy presents challenges for the country.

By Rob Wright • May 22, 2018

DeOS attacks: How enterprises can mitigate the threat

An increase in DeOS attacks has been reported just as the 'Cisco 2017 Midyear Cybersecurity Report' predicted. Learn how these attacks target off-site backups with David Geer.

By David Geer • May 22, 2018

Recorded Future: Iranian cyberattacks poised to resume

Recorded Future's Levi Gundert explains why major cyberattacks against Western enterprises are expected to resume following the United States' withdrawal from the Iran nuclear deal.

By Rob Wright • May 21, 2018

SSH private keys: How do threat actors find exposed keys?

Cybersecurity vendor Wordfence reported a rise in scans for SSH private keys that are often accidentally exposed to the public. Learn how to stay protected with Nick Lewis.

By Nick Lewis • May 17, 2018

How security operations centers work to benefit enterprises

One key support system for enterprises is security operations centers. Expert Ernie Hayden reviews the basic SOC framework and the purposes they can serve.

By Ernie Hayden • May 17, 2018

SOC services: How to find the right provider for your company

SOCs are the latest services you can now outsource rather than build in-house. But should you entrust them to a third party? Yes—but make sure you know how to pick the best.

By Steven Weil • May 10, 2018

How security automation and orchestration impacts enterprises

The use of security automation and orchestration systems is on the rise, as they have the ability to provide automatic responses to threats. Learn how this benefits the enterprise.

By Matthew Pascucci • May 8, 2018

AMD patches in testing with ecosystem partners

The timeline for the AMD patches promised to fix chipset flaws disclosed in March is being criticized, but AMD said the patches are being tested by partners and are still on track.

By Michael Heller • May 4, 2018

How the BloodHound tool can improve Active Directory security

Auditing Active Directory can be made easier with tools like the open source BloodHound tool. Expert Joe Granneman looks at the different functions of the tool and how it can help.

By Joseph Granneman • May 1, 2018

Microsoft releases Spectre variant 2 microcode patches

Microsoft released new fixes that include the Intel microcode patches for Spectre variant 2 to help protect users on Windows 10 and Windows Server 2016.

By Michael Heller • April 27, 2018

Atlanta ransomware attack cost city more than $5 million

The bill for remediating the Atlanta ransomware attack that took some government systems offline in March was released, and totals more than $5 million and counting.

By Michael Heller • April 27, 2018

Women in cybersecurity discuss hiring, advice and being mentors

A panel of women cybersecurity professionals at the RSA Conference discussed ways to find the best job candidates, the best advice they've received and how to be better mentors.

By Michael Heller • April 23, 2018

Experts describe how hacking back can be done right

A panel of experts at the RSA Conference all expressed support for the idea of hacking back against threat actors, but each offered caveats in hopes of minimizing collateral damage.

By Michael Heller • April 20, 2018

Moussouris: Bug bounty programs need to avoid jumping the shark

Bug bounty programs may seem to offer salvation at a bargain price for securing networks and systems, but Katie Moussouris offers tips for avoiding major pitfalls.

By Peter Loshin • April 19, 2018