Security Operations: Page

Counter mobile device security threats with unified tools

Attacks on enterprise mobile endpoints are more lethal than ever. To help infosec pros fight back, enterprise mobile management has unified to fortify defenses.

By Kevin Beaver • Feb. 8, 2018

Dynamic application security testing, honeypots hunt malware

Stealth is an attacker's best friend, especially when it comes to sneaking malware past the firewall. Learn about some trusty tools that can stop malware in its tracks.

By (ISC) 2 • Feb. 7, 2018

Cloud security lessons to learn from the Uber data breach

Any organization that uses cloud services can learn something from the 2016 Uber data breach. Expert Ed Moyle explains the main takeaways from the massive breach.

By Ed Moyle • Feb. 7, 2018

NotPetya malware: How does it detect security products?

Bitdefender discovered that the NotPetya malware changes its behavior when Kaspersky security products are detected. Nick Lewis explains how the malware's tricks work.

By Nick Lewis • Feb. 2, 2018

Information security certification guide: Forensics

This information security certificate guide looks at vendor-neutral computer forensics certifications for IT professionals interested in cyber attribution and investigations.

By Ed Tittel • Jan. 30, 2018

Insider threat behavior: How to identify warning signs

Enterprises can prevent insider threat incidents if they know what to look for. Peter Sullivan explains the precursors to and precipitating events for insider threat behavior.

By Peter Sullivan • Jan. 23, 2018

Business threat analytics: How does real-time data impact results?

Explore the top things you should know about real-time analytics with Johna Till Johnson and learn how it reduces false positives detected in your system on a daily basis.

By Johna Johnson • Jan. 11, 2018

Huge coordinated vulnerability disclosure needed for Meltdown

Unprecedented Spectre and Meltdown CPU flaws required a vast coordinated vulnerability disclosure effort over six months and across dozens of organizations.

By Michael Heller • Jan. 5, 2018

Meltdown and Spectre patches and mitigations released

Vendors released the vulnerability disclosures and patches for the new Meltdown and Spectre CPU attacks as the infosec industry begins mitigating risks.

By Michael Heller • Jan. 4, 2018

How should undocumented features in software be addressed?

Kaspersky Lab recently discovered an undocumented feature in Microsoft Word. Expert Kevin Beaver explains the risks and what to do if you come across one of these software flaws.

By Kevin Beaver • Jan. 3, 2018

Information security certification guide: Intermediate level

Part two of this information security certificate guide looks at vendor-neutral intermediate certifications for IT professionals interested in midlevel positions.

By Ed Tittel • Dec. 29, 2017

Get great results from authenticated vulnerability scanning

Here are five things you can do to successfully prepare and run authenticated vulnerability scanning and, in the end, achieve the most protection.

By Kevin Beaver • Dec. 19, 2017

CISSP Domain 6 quiz: Vulnerabilities in software

Domain 6 of the CISSP exam tests how well you understand the security assessment and testing strategies needed to recognize, prevent and remedy vulnerabilities in software.

By (ISC) 2 • Dec. 18, 2017

How can a vulnerability in Ruggedcom switches be mitigated?

Vulnerabilities in Ruggedcom switches could open the industrial switches and other communication devices up to attacks. Expert Judith Myerson explains how to mitigate the risks.

By Judith Myerson • Dec. 15, 2017

Emergency Microsoft patch out for Malware Protection Engine

A critical vulnerability found in the Windows Malware Protection Engine required an emergency Microsoft patch, but one expert said Microsoft hasn't handled the announcement well.

By Michael Heller • Dec. 8, 2017

Security Controls Evaluation, Testing, and Assessment Handbook

In this excerpt from chapter 11 of Security Controls Evaluation, Testing, and Assessment Handbook, author Leighton Johnson discusses access control.

By Syngress & SearchSecurity • Nov. 28, 2017

Ransomware recovery methods: What does the NIST suggest?

Knowing what ransomware recovery methods are available is important as the threat continues to grow. Expert Judith Myerson outlines what the NIST recommends for enterprises.

By Judith Myerson • Nov. 17, 2017

How security controls affect web security assessment results

Network security controls are a blessing and a curse as they help an organization's IT environment, yet hinder web security assessment results. Kevin Beaver explains how they work.

By Kevin Beaver • Nov. 16, 2017

Why threat models are crucial for secure software development

Threat modeling is an important component of the secure software development process. Steve Lipner of SafeCode explains how threat models benefit software security.

By Steve Lipner • Nov. 9, 2017

How should security teams handle the Onliner spambot leak?

A security researcher recently discovered a list of 711 million records used by the Onliner spambot. Expert Matt Pascucci explains what actions exposed individuals should take.

By Matthew Pascucci • Nov. 7, 2017

Researchers hack iOS 11 at Mobile Pwn2Own 2017

Security researchers competing at Mobile Pwn2Own 2017 used multiple vulnerabilities to hack iOS 11 in order to execute code and win prizes.

By Michael Heller • Nov. 3, 2017

Are security operations centers doing enough?

SOCs are maturing, but organizations facing the increased threat landscape understand that improving their effectiveness must be a priority in the year ahead.

By Steve Zurier • Nov. 1, 2017

Bad Rabbit ransomware data recovery may be possible

Security researchers found a way to recover data locked by the Bad Rabbit ransomware without paying, and others said money might not have been the driver of the attacks.

By Michael Heller • Oct. 30, 2017

How did a Windows Defender antivirus bug enable remote exploits?

A vulnerability in Microsoft's Windows Defender antivirus tool left users open to remote code exploitation. Expert Nick Lewis explains how it happened, and what to do about it.

By Nick Lewis • Oct. 25, 2017

Google Play bug bounty hunts RCE vulnerabilities

A Google Play bug bounty program, run by Google and HackerOne, asks testers to hunt for remote code execution vulnerabilities in some of the top Android apps.

By Michael Heller • Oct. 20, 2017