Security Operations: Page

October 2017 Patch Tuesday includes Windows zero-day fix

The top priority for Microsoft's October 2017 Patch Tuesday goes to a Windows zero-day vulnerability, but IT should also beware of two publicly disclosed flaws.

By Michael Heller • Oct. 11, 2017

Considerations for developing a cyber threat intelligence team

The use of a cyber threat intelligence team can greatly help organizations. Learn the best practices for team location and selection from expert Robert M. Lee.

By Robert Lee • Oct. 10, 2017

Make your incident response policy a living document

Effective incident response policies must be detailed, comprehensive and regularly updated -- and then 'embedded in the hearts and minds' of infosec team members.

By Johna Johnson • Oct. 9, 2017

What SIEM features are essential for your company?

On the hunt for the best SIEM tool for your company? Learn how to evaluate the capabilties of the newest security information and event management products.

By Karen Kent • Sept. 28, 2017

CISSP Domain 3 quiz: Security engineering

In preparing for Domain 3, Security Engineering, CISSP candidates should review a wide range of concepts, from security models to cryptography systems.

By (ISC) 2 • Sept. 12, 2017

Why DevOps security must be on infosecs’ priority list

In the rush to implement DevOps, security is too often overlooked. But DevSecOps is essential in these hack-filled days. Learn how to add security to software development.

By Johna Johnson • Sept. 5, 2017

What to do when cybersecurity breaches seem inevitable

The current threat landscape makes cybersecurity breaches seem unavoidable. Expert Peter Sullivan discusses some simple ways enterprises can reduce the risk of a breach.

By Peter Sullivan • Aug. 29, 2017

Security teams must embrace DevOps practices or get left behind

DevOps practices can help improve enterprise security. Frank Kim of the SANS Institute explains how infosec teams can embrace them.

By Frank Kim • Aug. 15, 2017

What you need to know about setting up a SOC

Setting up a SOC is different for every enterprise, but there are some fundamental steps with which to start. Expert Steven Weil outlines the basics for a security operations center.

By Steven Weil • Aug. 3, 2017

How can OSS-Fuzz and other vulnerability scanners help developers?

Google's OSS-Fuzz is an open source vulnerability scanner. Expert Matthew Pascucci looks at how developers can take advantage of this tool and others like it.

By Matthew Pascucci • Aug. 1, 2017

Bipartisan group launches effort to improve election security

News roundup: The Defending Digital Democracy project brings together security experts to tackle election security. Plus, government shake-ups could hit cybersecurity, and more.

By Madelyn Bacon • July 21, 2017

Q&A: How the Cyber Threat Alliance solved threat intelligence sharing

Palo Alto Networks CSO Rick Howard talks with SearchSecurity about his experiences with the Cyber Threat Alliance and how the group approaches threat intelligence sharing.

By Rob Wright • June 30, 2017

Incorporating static source code analysis into security testing

Static source code analysis, along with dynamic analysis and pen testing, can help strengthen your application security. Expert Kevin Beaver goes over the features to look out for.

By Kevin Beaver • June 28, 2017

Patch management tool comparison: What are the best products?

With so many different vendors in the market, it isn't easy to pick the right patch management tool. Read this product comparison to see which is best for your company.

By Earl Follis • June 27, 2017

Know why patch management tools are required in the IT infrastructure

Regulations, efficiency and protection are the main drivers for purchasing patch management tools. See why automated patch management is a requirement for most businesses.

By Earl Follis • June 12, 2017

Microsoft accused of blocking independent antivirus competition

News roundup: Kaspersky files a complaint against Microsoft's handling of independent antivirus software for Windows 10. Plus, hackers use Instagram to spread malware, and more.

By Madelyn Bacon • June 9, 2017

Using threat intelligence tools to prevent attacks on your enterprise

Using threat intelligence tools can help your enterprise stay one step ahead of attackers and possible threats. Learn how threat intelligence can be used in your company.

By Rob Shapland • May 25, 2017

Q&A: Talking bug bounty programs with Bugcrowd’s Casey Ellis

As bug bounty programs become more mainstream, Bugcrowd founder and CEO Casey Ellis offers insights into rewards, best practices and tips for getting the most bang for the buck.

By Peter Loshin • May 17, 2017

NATO cyberwar games show the U.S. needs more practice

The NATO Locked Shields cyberwar games had the U.S. team winning most improved, but experts say the U.S. still needs more practice.

By Michael Heller • May 2, 2017

Reviewing the threat intelligence features of VeriSign iDefense

Expert Ed Tittel looks at VeriSign iDefense threat intelligence service for providing actionable, contextual data about today's top IT threats to organizations.

By Ed Tittel • April 13, 2017

Threat Intelligence service overview of Infoblox ActiveTrust

Expert Ed Tittel looks at the features and capabilities of the Infoblox ActiveTrust threat intelligence service for providing data on the top IT threats to organizations.

By Ed Tittel • April 13, 2017

Detailing the features of LookingGlass Cyber Threat Center

Expert Ed Tittel looks at the LookingGlass Cyber Threat Center service for providing organizations with intelligence on today's top IT threats.

By Ed Tittel • April 13, 2017

Security Update Guide brings growing pains to Patch Tuesday

Microsoft fundamentally changes how IT pros will consume Patch Tuesday releases with the Security Update Guide and brings fixes for an actively exploited Word zero-day.

By Michael Heller • April 12, 2017

Dedicated security teams: The pros and cons of splitting focus areas

Could using dedicated security teams that focus on one area of risk help reduce the attack surface for enterprises? Expert Steven Weil looks at the pros and cons of that approach.

By Steven Weil • April 6, 2017

Totally automatic: Improve DevOps and security in three key steps

Concerned about DevOps security? Learn three key steps to embedding security into the software development process, including how to improve automation.

By Johna Johnson • April 5, 2017