Security Operations: Page

Five criteria for purchasing from threat intelligence providers

Expert Ed Tittel explores key criteria for evaluating threat intelligence providers to determine the best service for an enterprise's needs.

By Ed Tittel • April 4, 2017

Obama-era cyber executive order extended by Trump

A cyber executive order from the Obama era has been extended by President Trump to allow sanctions placed on cybercriminals who attack the U.S.

By Michael Heller • March 31, 2017

Nine critical Windows security bulletins in Patch Tuesday

After its cancelled February Patch Tuesday, Microsoft's March 2017 Patch Tuesday includes nine critical Windows security bulletins targeting remote code execution flaws.

By Michael Heller • March 14, 2017

WikiLeaks vows to disclose CIA hacking tools; CIA to investigate

WikiLeaks founder Julian Assange promised to work with vendors to help patch products vulnerable to CIA hacking tools, while the FBI and CIA will investigate the leak.

By Michael Heller • March 10, 2017

AI or not, machine learning in cybersecurity advances

As more companies promote machine learning and artificial intelligence technologies, chief information security officers need to ask some tough questions to get past the hype.

By Kathleen Richards • March 1, 2017

Security looks to machine learning technology for a cognitive leg up

Advances in machine learning technology and artificial intelligence have proven to work well for some information security tasks such as malware detection. What's coming next?

By Robert Lemos • March 1, 2017

How can enterprises leverage Google’s Project Wycheproof?

Google's Project Wycheproof tests crypto libraries for known vulnerabilities, but there are potential drawbacks to this tool. Expert Matthew Pascucci explains them.

By Matthew Pascucci • Feb. 27, 2017

How can obfuscated macro malware be located and removed?

A new type of macro malware has the ability to evade the detection of virtual machines and sandbox environments. Expert Nick Lewis explains how to find and remove this malware.

By Nick Lewis • Feb. 22, 2017

Ransomware prevention tools to win the fight

Fighting malware today means battling ransomware. Learn what ransomware prevention tools you need to acquire and how to perfect using the tools your company already owns.

By Joel Snyder • Feb. 20, 2017

Microsoft Patch Tuesday February release delayed by a month

News roundup: Microsoft Patch Tuesday was canceled in February without a clear reason. Plus, APT28 is linked to new Mac malware; Lazarus targets more banks and more.

By Madelyn Bacon • Feb. 17, 2017

Intrusion response plans: Tales from front-line IT support

The right intrusion response training can make all the difference in data breach prevention. Expert Joe Granneman provides a real-world example from which enterprises can learn.

By Joseph Granneman • Feb. 16, 2017

What global threat intelligence can and can’t do for security programs

Global threat intelligence is a valuable complement to a company's security program, but it can't replace security measures like training and internally collected data.

By Michael Cobb • Feb. 9, 2017

How to organize an enterprise cybersecurity team effectively

The structure of an enterprise's cybersecurity team is important for ensuring it's as effective as possible. Expert Steven Weil outlines strategies for setting up a security group.

By Steven Weil • Feb. 9, 2017

Google G Suite updates aim to improve phishing protection

News roundup: Google updates G Suite with stronger authentication. Plus, WordPress secretly patches vulnerabilities, malware is likely to infect entire OSes, and more.

By Madelyn Bacon • Feb. 3, 2017

Q&A: Rapid7’s Beardsley and Brown dish on Mirai botnet, pen testing

Rapid7's Beardsley and Brown offer insight on Mirai botnet attacks, while also sharing some of their craziest penetration testing and incident response experiences.

By Peter Loshin • Jan. 31, 2017

Are bug bounty programs secure enough for enterprise use?

The use of bug bounty programs in enterprises is growing, but they aren't risk free. Expert Mike O. Villegas discusses some concerns related to bug bounties.

By Mike Villegas • Jan. 11, 2017

January Patch Tuesday sparse before Windows security updates change

Microsoft offers up a meager January 2017 Patch Tuesday release before bigger changes planned for Windows security update announcements, which are set to take effect in February.

By Michael Heller • Jan. 10, 2017

What are the potential pros and cons of a Cyber National Guard?

A congressman proposed adding a Cyber National Guard to the military to protect the U.S. from cyber adversaries. Expert Mike O. Villegas examines the potential drawbacks of this branch.

By Mike Villegas • Jan. 10, 2017

Should one cybersecurity mistake mean the end of a CEO’s career?

In one case, a tenured CEO made one cybersecurity mistake and was fired. Expert Mike O. Villegas discusses whether this sets a precedence for enterprises going forward.

By Mike Villegas • Dec. 21, 2016

What should happen after an employee clicks on a malicious link?

The response to an employee clicking on a malicious link is important for organizations to get right. Expert Matthew Pascucci discusses how to handle the aftermath of an attack.

By Matthew Pascucci • Dec. 5, 2016

Google Earth Forensics: Using Google Earth Geo-Location in Digital Forensic Investigations

In this excerpt from chapter five of Google Earth Forensics, authors Michael Harrington and Michael Cross discuss the process of digital forensics.

By Syngress and SearchSecurity • Nov. 29, 2016

Tenable Nessus Vulnerability Scanner: Product overview

Expert Ed Tittel examines the Nessus vulnerability scanner series from Tenable Network Security, which includes client, cloud and on-premises vulnerability management products.

By Ed Tittel • Nov. 8, 2016

Splunk Enterprise Security: Product overview

Expert Dan Sullivan explores how Splunk Enterprise Security uses big data security analytics to incorporate multiple methods of data integration to identify malicious events.

By Dan Sullivan • Oct. 11, 2016

How can security automation tools keep organizations protected?

Sometimes security teams fall into 'set and forget' habits with security automation. Expert Mike O. Villegas explains how to take advantage of automation while staying secure.

By Mike Villegas • Sept. 21, 2016

Is settling a data breach lawsuit the best option for enterprises?

In the unfortunate event of a data breach lawsuit, it's often better to settle before the case reaches court. Expert Mike O. Villegas explains why and how CISOs can help.

By Mike Villegas • Sept. 20, 2016