Security Operations: Page

Fidelis rolls out new active deception approach to security

Active deception is set to be an important part of cloud defense, as Fidelis Cybersecurity adds active decoys to protect cloud assets in the enterprise.

By Peter Loshin • April 17, 2018

What the security incident response process should look like

An enterprise needs to have a strong security incident response process plan mapped out early. Expert Ernie Hayden shares how to turn an incident into a learning experience.

By Ernie Hayden • April 17, 2018

CrowdStrike Falcon X takes aim at incident response

CrowdStrike introduced a new component for the vendor's cloud-based security platform -- dubbed Falcon X -- that looks to speed up enterprises' incident response times.

By Rob Wright • April 16, 2018

CCSP practice test: Do you know the cloud computing basics?

Preparing to take the CCSP exam? Test your knowledge of key topics in Domain 1, which covers cloud concepts, reference architectures, security concerns and design principles.

By (ISC) 2 • April 4, 2018

Kaspersky KLara malware hunter now open source

Kaspersky's KLara tool has been made open source in an effort to help security professionals search related malware samples more easily and efficiently with distributed Yara rules.

By Michael Heller • March 30, 2018

Imran Awan case shows lax security controls for IT staff

Investigations into the conduct of the IT staff of the House of Representatives raised alarms. Kevin McDonald explains what we can learn from the case of Imran Awan.

By Kevin McDonald • March 30, 2018

IBM Security looks to incident response services for growth

While IBM has made significant investments in acquiring cybersecurity vendors in recent years, the company now is turning its attention to security services like incident response.

By Rob Wright • March 30, 2018

RSA Innovation Sandbox highlights threat detection, AI

Security startups competing in this year's RSA Innovation Sandbox will present new offerings for threat detection, cloud security, artificial intelligence and machine learning.

By Peter Loshin • March 29, 2018

CPE for CISSP: Top 10 ways to master continuing education

Who says you can't have fun while earning CPE credits to maintain your CISSP certification? Check out the top 10 creative ways to meet CISSP continuing education requirements.

By Donald Donzal • March 29, 2018

Five days after Atlanta ransomware attack, recovery begins

After battling the fallout from an Atlanta ransomware attack for five days, Mayor Keisha Bottoms said City Hall has finally begun to recover and turn systems back on.

By Michael Heller • March 27, 2018

How machine learning anomaly detection works inside SAP

SAP CSO Justin Somaini discusses how SAP uses machine learning for security tasks, like anomaly detection, and compares supervised and unsupervised algorithms.

By Rob Wright • March 21, 2018

Binance bounty offered for info on attempted attack

A failed attack led to a Binance bounty offer of $250,000 for information that leads to the arrest of the threat actors responsible for the attempted cryptocurrency theft.

By Michael Heller • March 13, 2018

Tenable introduces Lumin cyber exposure platform

Tenable.io Lumin enables organizations to gauge their 'cyber exposure' to vulnerabilities and allows them to compare remediation efforts against industry benchmark data.

By Rob Wright • March 9, 2018

McAfee cloud security platform expands to Microsoft Azure

In its first move following the acquisition of cloud access security broker Skyhigh Networks, McAfee extended its cloud security platform to Microsoft Azure customers.

By Rob Wright • March 7, 2018

Patch management programs: Who should run them?

Patch management is a crucial part of enterprise security defenses, but should security teams be in charge of it? Charles Kao explains how to make patching programs successful.

By Charles Kao • March 6, 2018

Continuous security monitoring advances automated scanning

Battling threats in today's fast-paced cyberworld means shutting down vulnerabilities fast, which requires round-the-clock monitoring. Learn how to make it happen in your company.

By Mike Chapple • March 5, 2018

Automated patch management and the challenges from IoT

From creating an inventory to scanning for IoT vulnerabilities, learn the key steps to take when it comes to automating patch management in your company.

By Mike Chapple • March 5, 2018

Search engine poisoning: How are poisoned results detected?

Poisoned search results have spread the Zeus Panda banking Trojan throughout Google. Learn what this means, how search engine poisoning works and what can be done to stop it.

By Matthew Pascucci • March 1, 2018

How does the Amazon GuardDuty threat detection service work?

At the 2017 re:Invent conference, Amazon announced their latest threat detection product: Amazon GuardDuty. Learn how this service works and what sets it apart from other products.

By Matthew Pascucci • Feb. 27, 2018

Web vulnerability scanners: What you won’t learn from vendors

Web security flaws are a serious issue that web vulnerability scanners can manage. Discover your best fit scanner as expert Kevin Beaver shares tips that vendors won't tell you.

By Kevin Beaver • Feb. 22, 2018

Domain 8: Security in software development lifecycle quiz

Understanding the ins and outs of the software development lifecycle is pivotal to passing Domain 8 of the CISSP exam. Are you ready? Find out with this practice quiz.

By (ISC) 2 • Feb. 21, 2018

Use software forensics to uncover the identity of attackers

By analyzing the proverbial fingerprints of malicious software -- its program code -- infosec pros can gain meaningful insights into an attacker's intent and identity.

By (ISC) 2 • Feb. 19, 2018

Intel bug bounty programs widened after Meltdown and Spectre

Intel's bug bounty program expanded its scope and rewards for bugs across all Intel products, and the company added a new program for side-channel flaws like Meltdown and Spectre.

By Peter Loshin • Feb. 15, 2018

Microsoft: Windows Analytics can detect Meltdown and Spectre exposure

Microsoft says Meltdown and Spectre vulnerabilities are now being tracked by Windows Analytics, which shows users the update status for CPU microcode and OS patches.

By Peter Loshin • Feb. 14, 2018

How should BGP route hijacking be addressed?

A new report from NIST shows how BGP route hijacking can threaten the internet. Expert Judith Myerson reviews the guidance for improving BGP security.

By Judith Myerson • Feb. 13, 2018