Security Operations: Page

Real-world AI voice cloning attack: A red teaming case study

Thanks to AI, social engineering campaigns are becoming more effective than ever. In this red team case study, see how voice cloning helped trick a seasoned business user.

By Rob Shapland • Jan. 5, 2026

2026 guide to digital forensics tools for enterprises

After a data breach, organizations and law enforcement need to understand what happened. These 10 digital forensics tools collect the key evidence required for an investigation.

By Rob Shapland • Dec. 22, 2025

DevSecOps vs. SecDevOps: Which is better for your organization?

How far left should security shift? DevSecOps and SecDevOps both integrate security into DevOps but differ conceptually and practically. Learn which model suits your needs.

By Matthew Smith • Dec. 18, 2025

How to detect a deepfake with visual clues and AI tools

Forewarned is forearmed, but too many employees don't realize how sophisticated deepfakes have become. Integrate these deepfake detection tips into security awareness training.

By Alissa Irei , Andrew Froehlich • Dec. 17, 2025

Incident response: How to implement a communication plan

Communication is critical to an effective incident response plan. Here are best practices for communication planning and an editable template to help you get started.

By Paul Kirvan • Dec. 16, 2025

5 steps for a smooth SIEM implementation

SIEM migration doesn't have to be chaotic. Smart planning and phased deployment can prevent a rocky rollout and pave the way for a smooth transition. Here's your roadmap.

By Karen Kent • Nov. 24, 2025

Browser detection and response fills gaps in security programs

BDR is the latest tool to address detection and response as more and more communication occurs over Edge, Chrome and their counterparts. But does your organization really need it?

By Dave Shackleford • Nov. 3, 2025

SIEM benefits and features in the modern SOC

Security information and event management has evolved significantly since it was first introduced 20 years ago. Today's SIEMs offer a wide range of capabilities.

By Karen Kent • Oct. 23, 2025

7 top deception technology vendors for active defense

Once reserved for the most mature organizations, cyber deception technology is picking up steam on the ground and in practice. Here are seven platforms for CISOs to consider.

By Karen Kent • Oct. 16, 2025

Top 15 IT security frameworks and standards explained

Several IT security frameworks and standards exist to help protect company data. Here's advice for choosing the right ones for your organization.

By Paul Kirvan • Oct. 8, 2025

Red teams and AI: 5 ways to use LLMs for penetration testing

Red teams can harness the power of LLMs for penetration testing. From session analysis to payload crafting, discover five ways AI transforms security testing.

By Ed Moyle • Aug. 25, 2025

Shift left with these 11 DevSecOps best practices

By starting small, automating selectively and making security the easiest path forward, organizations can improve DevOps security without sacrificing development speed.

By Colin Domoney • Aug. 18, 2025

How to prevent DoS attacks and what to do if they happen

The worst DoS attacks are like digital tsunamis that put critical business operations at risk. Learn how they work, ways to stop them and how systems can withstand the flood.

By Rob Shapland • Aug. 8, 2025

Experts weigh in on securing AI effectively

Using AI comes with security risks. Learn what the top attack vectors and privacy threats are, then discover how to mitigate them through proper strategy, monitoring and more.

By Brenda Horrigan • Aug. 8, 2025

What is COMSEC (communications security)?

Communications security (COMSEC) is the prevention of unauthorized access to telecommunications traffic or to any written information that is transmitted or transferred.

By Paul Kirvan, Ben Cole • Aug. 7, 2025

What is the Mitre ATT&CK framework?

The Mitre ATT&CK -- pronounced miter attack -- framework is a free, globally accessible knowledge base that describes the latest behaviors and tactics of cyberadversaries to help organizations strengthen their cybersecurity strategies.

By Paul Kirvan , Kinza Yasar , Ben Lutkevich • Aug. 7, 2025

AI security: Top experts weigh in on the why and how

AI is everywhere, so security focus on this new technology is essential. In this podcast episode, three top security experts review the risks and discuss ways to mitigate them.

By Staff report • Aug. 5, 2025

How to recover from a ransomware attack: A complete guide

With a ransomware recovery plan, organizations can act quickly to prevent data loss without descending into chaos. Learn the crucial steps to incorporate into your plan.

By John Burke • Aug. 4, 2025

An explanation of purple teaming

Purple teaming unites offensive red teams and defensive blue teams to share knowledge, find vulnerabilities and strengthen security through structured frameworks and playbooks.

By Sabrina Polin, Tommy Everson, Sharon Shea • Aug. 1, 2025

How to remove ransomware, step by step

Prevention is the best weapon against a ransomware infection. But in the event of compromise, consider these responses to contain and remove ransomware.

By Paul Kirvan • July 31, 2025

How to become a bug bounty hunter

With the right strategy, tools and skills, software testers and security researchers can earn extra income as bug bounty hunters.

By Rob Shapland , Alissa Irei • July 28, 2025

How to implement security control rationalization

Security control rationalization helps CISOs reduce cybersecurity tool sprawl, cut spending and improve efficiency -- all without compromising protection.

By Dave Shackleford • July 25, 2025

Top DevSecOps certifications and trainings for 2025

DevOps Institute, Practical DevSecOps, EXIN and EC-Council are among the organizations that offer DevSecOps certifications and trainings for cybersecurity professionals.

By Colin Domoney • July 23, 2025

What is cybersecurity?

Cybersecurity is the practice of protecting systems, networks and data from digital threats.

By Kinza Yasar, Alexander Gillis, Sharon Shea • July 15, 2025

Security log management tips and best practices

Learn how to conduct security log management that provides visibility into IT infrastructure activities and traffic, improves troubleshooting and prevents service disruptions.

By Ed Moyle , Michael Cobb • July 9, 2025