Security Operations: Page
-
What is antimalware?
Antimalware is a software program created to protect IT systems and individual computers from malicious software, or malware.
By Linda Rosencrance, Scott Robinson • Feb. 12, 2025 -
What is a honeypot? How it protects against cyberattacks
A honeypot is a network-attached system set up as a decoy to lure cyberattackers and to help organizations detect, deflect and study hacking attempts to gain unauthorized access to IT.
By Ben Lutkevich, Casey Clark, Scott Robinson • Feb. 11, 2025 -
What is physical security and how does it work?
Physical security protects personnel, hardware, software, networks, facilities and data from physical actions and events that could cause serious loss or damage to an enterprise, agency or institution.
By Mary Shacklett , Michael Cobb • Feb. 7, 2025 -
Unpatched.ai: Who runs the vulnerability discovery platform?
There is limited information on the AI-powered vulnerability discovery platform that emerged in December after it reported Microsoft vulnerabilities
By Arielle Waldman • Feb. 6, 2025 -
Expert Advice
How to build an effective purple team playbook
Enterprises across a wide variety of vertical industries can benefit from purple team exercises that harness red and blue teams toward a common goal: reducing vulnerabilities.
By Amy DeCarlo • Feb. 5, 2025 -
Chainalysis records 35% decrease in ransom payments in 2024
While the first half of 2024 was on pace to surpass 2023's record-setting numbers, Chainalysis found that the volume of ransom payments dropped in the second half of the year.
By Arielle Waldman • Feb. 5, 2025 -
Opinion // Omdia Analysts' Perspectives
Too many ‘point’less tools: Platformization is better
Will 2025 be the year organizations ditch multiple point products and take a platform approach? Enterprise Strategy Group analyst Tyler Shields thinks it should be.
By Tyler Shields • Jan. 23, 2025 -
Cyber Safety Review Board axed in DHS cost-cutting move
Benjamine C. Huffman, acting secretary of the Department of Homeland Security under Trump, terminates the memberships for all DHS advisory committees, including the CSRB.
By Alexander Culafi • Jan. 22, 2025 -
Expert Advice
10 cybersecurity certifications to boost your career in 2025
A consensus of industry professionals rank these 10 security certifications as the most coveted by employers and security pros -- plus links to 10 vendor security certifications.
By Steve Zurier • Jan. 22, 2025 -
Expert Advice
Top 12 online cybersecurity courses for 2025
Our panel of experts picked the best free and paid online cybersecurity courses for professionals looking to advance their careers and for newbies breaking into the field.
By Steve Zurier • Jan. 14, 2025 -
9 secure email gateway options for 2025
Finding the best email security gateway is vital to protect companies from cyberattacks. Here's a look at some current market leaders and their standout features.
By Karen Kent • Jan. 13, 2025 -
Expert Advice
10 must-have cybersecurity skills for career success in 2025
Looking to advance your cybersecurity career? Here are the skills you need to win a CISO job, land a threat hunter gig and snag other security positions in high demand.
By Steve Zurier • Jan. 13, 2025 -
Navigate the 2025 threat landscape with expert insights
AI technology and company employees can serve as both gateways and buffers against cyberthreats. Learn more from expert thought leaders on how to protect your environment in 2025.
By Alicia Landsberg • Dec. 30, 2024 -
Opinion
Add gamification learning to your pen testing training playbook
Organizations that embrace gamification in their pen testing training are better positioned to build and maintain the skilled security teams needed to address evolving threats.
By Ed Skoudis • Dec. 19, 2024 -
Expert Advice
The 10 best cloud security certifications for IT pros in 2025
Certifications can help security pros prove their baseline knowledge of infosec topics. Consider adding these top cloud security certifications to your arsenal.
By Sharon Shea • Dec. 17, 2024 -
Expert Advice
How to mitigate wiper malware
A wiperware cyberattack can change the game for organizations because it causes complete destruction of data and systems. Find out how to protect your organization.
By Ravi Das • Dec. 16, 2024 -
Expert Advice // All about DDoS attacks
How to recover from a DDoS attack
Learn how to recover from a DDoS attack and get operations back online quickly, while minimizing impact on customers and brand reputation.
By Michael Cobb • Dec. 4, 2024 -
AWS launches automated service for incident response
AWS Security Incident Response, which launched ahead of the re:Invent 2024 conference this week, can automatically triage and remediate events detected in Amazon GuardDuty.
By Rob Wright • Dec. 2, 2024 -
What is endpoint detection and response (EDR)?
Endpoint detection and response (EDR) is a system that gathers and analyzes security threat-related information from computer workstations and other endpoints.
By Nick Barney, Gavin Wright, Alexander Gillis • Nov. 22, 2024 -
Cyber insurers address ransom reimbursement policy concerns
In a recent op-ed for The Financial Times, U.S. Deputy National Security Advisor Anne Neuberger wrote that reimbursing ransom payments is a 'troubling practice that must end.'
By Arielle Waldman • Nov. 21, 2024 -
Expert Advice
SIEM vs. SOAR vs. XDR: Evaluate the key differences
SIEM, SOAR and XDR each possess distinct capabilities and drawbacks. Learn the differences among the three, how they can work together and which your company needs.
By Paul Kirvan • Nov. 12, 2024 -
Expert Advice
EDR vs. XDR vs. MDR: Key differences and benefits
One of the most important goals of cybersecurity professionals is to quickly identify potential or in-progress cyberattacks. These three approaches can help.
By Paul Kirvan • Nov. 12, 2024 -
CISA on 2024 election security: ‘Good news’ for democracy
CISA Director Jen Easterly says that despite disruptions including bomb threats in multiple states, Election Day 2024 was a success story from a security standpoint.
By Alexander Culafi • Nov. 6, 2024 -
CISA: U.S. election disinformation peddled at massive scale
CISA said the U.S. cybersecurity agency has seen small-scale election incidents 'resulting in no significant impacts to election infrastructure,' such as low-level DDoS attacks.
By Alexander Culafi • Nov. 4, 2024 -
What is unified threat management (UTM)?
Unified threat management (UTM) is an information security system that provides a single point of protection against cyberthreats, including viruses, worms, spyware and other malware, as well as network attacks.
By Paul Kirvan, Linda Rosencrance • Nov. 1, 2024