Security Operations: Page

What is a CISO as a service (CISOaaS)?

CISO as a service, or CISOaaS, is the outsourcing of CISO (chief information security officer) and information security leadership responsibilities to a third-party provider.

By Ben Lutkevich, Alexander Gillis • July 9, 2025

Incident response tabletop exercises: Guide and template

Have an incident response plan but aren't running incident response tabletop exercises? These simulations are key to knowing if your plan will work during an actual security event.

By Paul Kirvan • July 9, 2025

Phishing prevention: How to spot, stop and respond to scams

From email scams to BEC attacks, phishing is one of the biggest fish organizations must fry. Get advice on how to identify, prevent and respond to phishing schemes.

By Sharon Shea • July 8, 2025

Cybersecurity outsourcing: Strategies, benefits and risks

For companies battling data breaches and cyberattacks, MSSPs can offer lower costs, better reliability, broader experience and more -- if organizations define their needs well.

By Mary Pratt • June 30, 2025

12 DevSecOps tools to secure each step of the SDLC

DevSecOps tools integrate security throughout development. These 12 options enhance workflows from coding to deployment without slowing teams down.

By Colin Domoney • June 27, 2025

What is a virtual CISO (vCISO)? Does your business need one?

The virtual chief information security officer (vCISO) is a C-suite-level security professional or service provider who offers CISO-level expertise on a part-time, remote or contractual basis.

By Andy Patrizio • June 27, 2025

How to build a cybersecurity RFP

Crafting a cybersecurity RFP requires clear goals, precise questions and vendor vetting. Follow these guidelines to streamline the process and meet your company's security needs.

By Leah Zitter, Ph.D. • June 27, 2025

Update Kali Linux to the latest software repository key

Kali Linux users might encounter errors when they update or download new software, exposing systems to security threats. A new repository key will eliminate those problems.

By Damon Garn • June 23, 2025

What is an advanced persistent threat (APT)?

An advanced persistent threat (APT) is a prolonged and targeted cyberattack in which an intruder gains access to a network and remains undetected for an extended period.

By Alexander Gillis, Linda Rosencrance, Kinza Yasar • June 18, 2025

Kali vs. ParrotOS: Security-focused Linux distros compared

Network security doesn't always require expensive software. Two Linux distributions -- Kali Linux and ParrotOS -- can help enterprises fill in their security gaps.

By Damon Garn • June 17, 2025

5 essential programming languages for cybersecurity pros

Coding is an important skill across almost every technology discipline, and cybersecurity is no exception. Learn about the top programming languages for security professionals.

By Mike Chapple • June 16, 2025

The DOGE effect on cyber: What’s happened and what’s next?

In this webinar, part of 'CISO Insights' series, cybersecurity experts debate the pros and cons of the Department of Government Efficiency's actions and the impact on their field.

By Staff report • June 2, 2025

Security risks of AI-generated code and how to manage them

Application security teams are understandably worried about how developers use GenAI and LLMs to create code. But it's not all doom and gloom; GenAI can help secure code, too.

By Colin Domoney • May 29, 2025

How to choose a cloud key management service

Amazon, Microsoft, Google, Oracle and cloud-agnostic vendors offer cloud key management services. Read up on what each offers and how to choose the right KMS for your company.

By Dave Shackleford • May 21, 2025

What is penetration testing?

A penetration test, also called a 'pen test,' is a simulated cyberattack on a computer system, network or application to identify and highlight vulnerabilities in an organization's security posture.

By Kinza Yasar, Puneet Mehta • May 14, 2025

What is a security operations center (SOC)?

A security operations center (SOC) is a command center facility in which a team of information technology (IT) professionals with expertise in information security (infosec) monitors, analyzes and protects an organization from cyberattacks.

By Paul Kirvan, Kinza Yasar, Sarah Lewis • May 9, 2025

Change is in the wind for SecOps: Are you ready?

Attackers have historically had time on their side, outpacing defenders who have struggled to keep up. Agentic AI appears poised to change the game.

By Dave Gruber • April 24, 2025

How to create a CBOM for quantum readiness

Quantum is on the horizon -- is your organization ready to migrate to post-quantum cryptographic algorithms? Make a CBOM to understand where risky encryption algorithms are used.

By Rob Shapland • April 21, 2025

How to effectively respond to a ransomware attack

Does your organization know what to do if its systems are suddenly struck by a ransomware attack? To be ready, prepare your ransomware response well ahead of time.

By Dave Shackleford • April 15, 2025

Ransomware negotiation: Does it work, and should you try it?

Negotiating with the criminals who are holding your data for ransom is a daunting and stressful endeavor. Experts weigh in on the risks and the potential outcomes.

By Mary Pratt • April 11, 2025

How to report ransomware attacks: Steps to take

The Cybersecurity and Infrastructure Security Agency and FBI recommend reporting ransomware attacks to the authorities as soon as possible.

By Kyle Johnson • April 8, 2025

4 ransomware detection techniques to catch an attack

While prevention is key, it's not enough to protect a company's systems from ransomware. Learn how early detection with these four methods helps reduce damage from attacks.

By Kyle Johnson • April 3, 2025

Incident response for web application attacks

Web app security is like learning to ride a bike -- expect to struggle before getting it right. But don't be disheartened; learn from prior incidents to improve controls.

By Kyle Johnson, Manning Publications Co. • March 11, 2025

Penetration testing vs. vulnerability scanning: What’s the difference?

Confused by the distinctions between penetration testing and vulnerability scanning? You're not alone. Learn the key differences between the two and when to use each.

By Kyle Johnson, Andrew Froehlich • Feb. 20, 2025

9 tips for migrating between managed SOC providers

Switching between managed SOCs can be daunting, but with proper planning, organizations can successfully navigate it. One important tip: Document everything.

By Jerald Murphy • Feb. 19, 2025