Kevin Beaver

Industry Expert | LinkedIn

Kevin Beaver is an independent information security consultant, writer and keynote speaker with Atlanta-based Principle Logic, LLC. With nearly four decades of experience in the industry, Kevin specializes in vulnerability and penetration testing as well as virtual CISO consulting work to help businesses uncheck the boxes that are creating a false sense of security. Kevin has authored or co-authored 12 books on information security, including one of the all-time bestsellers, Hacking For Dummies (currently in its eighth edition, translated into nine languages), as well as The Practical Guide to HIPAA Privacy and Security Compliance. He has written over 1,400 articles on security and regularly contributes to various TechTarget websites.

Email [email protected]

Submit a tip to our team

137 articles by Kevin Beaver

Filter by month:

4 potential risks from shadow AI use in accounting
Oct. 5, 2026
The 4 most common HR data security issues
Aug. 18, 2026
4 strategies to improve IT and tech talent retention
June 23, 2026
8 tips to improve cybersecurity for accounting
June 9, 2026
How HR can protect employees’ personal information
June 4, 2026
5 of the most common accounting cybersecurity threats
April 1, 2026
How to secure sensitive data when offboarding employees
Feb. 18, 2026
Residual access failures put data at risk
Feb. 10, 2026
8 ERP security best practices for modern ERP environments
Jan. 29, 2026
How CHROs, CISOs can partner to protect job applicant data
Jan. 8, 2026
11 common wireless security risks you don’t have to take
Sept. 8, 2025
The differences between inbound and outbound firewall rules
July 30, 2025
CTO vs. CIO vs. CISO: Learn how these roles differ
Feb. 25, 2025
What is TLS (Transport Layer Security)? Definition & Uses
Feb. 20, 2025
What is ERP security and why is it critical?
July 24, 2024
5 cybersecurity risks and challenges in supply chain
June 13, 2024
The 10 most common ERP security issues and ways to fix them
May 23, 2024
Top incident response tools: How to choose and use them
Jan. 9, 2024
How CIOs can build cybersecurity teamwork across leadership
Sept. 14, 2023
The CIO’s role in strengthening cybersecurity
Aug. 29, 2023
Top 4 information security strategy essentials CIOs need
Aug. 15, 2023
LTE (Long-Term Evolution)
March 9, 2023
6 best practices for ensuring offboarding cybersecurity
Oct. 13, 2022
data breach
July 27, 2022
Why HR plays an important role in preventing cyber attacks
May 31, 2022
distributed denial-of-service (DDoS) attack
June 3, 2021
10 guidelines to secure your data backup
July 10, 2020
4 essential identity and access management best practices
June 3, 2020
How to protect the network from ransomware in 5 steps
May 8, 2020
Prevent spyware through user awareness and technical controls
May 7, 2020
Telework security requires meticulous caution, communication
April 30, 2020
COVID-19 remote work security: 5 ways to boost cybersecurity
April 14, 2020
ERP security issues with working remotely during COVID-19 outbreak
April 10, 2020
Craft an effective application security testing process
Jan. 16, 2020
The top network security trends, threats and strategies in 2020
Dec. 23, 2019
Host IDS vs. network IDS: Which is better?
Dec. 19, 2019
Network security design best practices and principles: Keep it simple
Dec. 3, 2019
How to use and manage BitLocker encryption
Nov. 20, 2019
Network security vs. application security: What’s the difference?
Nov. 6, 2019
CISOs, does your incident response plan cover all the bases?
Nov. 1, 2019
5 steps to follow in a network security audit checklist
Oct. 15, 2019
How to shore up your third-party risk management program
Sept. 23, 2019
CISO challenges include building credibility within the business
Aug. 20, 2019
Best mobile device security policy for loss or theft
Aug. 5, 2019
The must-have skills for cybersecurity aren’t what you think
Aug. 2, 2019
The benefits of IAM can far outweigh the costs
July 17, 2019
Comparing EDR tools: Cybereason vs. CrowdStrike vs. Carbon Black
June 28, 2019
Smishing targets mobile users and IT must prepare to fight it
June 25, 2019
How mobile threat defense tools can help mobile admins
June 10, 2019
Get to know Linux desktop security best practices
June 3, 2019
Consider these factors for the device-as-a-service model
May 13, 2019
The top cloud security challenges are ‘people problems’
May 1, 2019
How to improve application security testing when it falls short
April 26, 2019
Benefits of mobile passwordless authentication
April 5, 2019
Symantec Web Security Service vs. Zscaler Internet Access
March 28, 2019
6 questions to ask before evaluating secure web gateways
March 27, 2019
Unified endpoint management tools enrich the user experience
March 25, 2019
How EDR tools can improve endpoint security
March 25, 2019
The developer’s role in application security strategy
March 4, 2019
5-step checklist for web application security testing
Feb. 11, 2019
How can IT prevent mobile cryptojacking on devices?
Feb. 4, 2019
Steps to improve an application environment and fix flaws
Jan. 31, 2019
How to address endpoint security issues caused by users
Dec. 12, 2018
Testing applications in production vs. non-production benefits
Dec. 4, 2018
Create and enforce a password policy across the enterprise
Nov. 16, 2018
How testing perspectives helps find application security flaws
Nov. 6, 2018
Picking the right focus for web application security testing
Oct. 9, 2018
How to develop a mobile incident response plan
Oct. 3, 2018
Why communication is critical for web security management
Sept. 27, 2018
How to create an internal phishing campaign from scratch
Sept. 25, 2018
Understanding the risk SQL injection vulnerabilities pose
Sept. 13, 2018
How to avert mobile device security threats
Sept. 4, 2018
Combat mobile device security threats at home and abroad
July 25, 2018
Get to know enterprise patch management tools
July 24, 2018
Common security oversights within an AWS environment
July 10, 2018
How to create a Windows 10 security program
July 2, 2018
How layered security can help and hinder application security
May 31, 2018
How IT can prevent mobile phishing attacks
May 24, 2018
Create an effective email phishing test in 7 steps
May 21, 2018
Be prepared to handle a mobile security breach
April 17, 2018
Addressing vulnerable web systems that are often overlooked
March 16, 2018
A complete beginner’s guide to blending DevOps and security
March 6, 2018
Web vulnerability scanners: What you won’t learn from vendors
Feb. 22, 2018
How to establish Windows 10 security baselines
Feb. 20, 2018
Mobile security issues require a unified approach
Feb. 8, 2018
Counter mobile device security threats with unified tools
Feb. 8, 2018
How to manage application security risks and shortcomings
Feb. 6, 2018
How to approach mobile password management for the enterprise
Feb. 5, 2018
A Windows vulnerability scan should leave no stones unturned
Jan. 24, 2018
Mobile app risks: Five things enterprises should consider
Jan. 9, 2018
Unknown apps: How does Android Oreo control installation?
Jan. 5, 2018
Vulnerability scans: How effective are they for web apps?
Jan. 4, 2018
Android bootloader: How does it work and what is the risk?
Jan. 4, 2018
How should undocumented features in software be addressed?
Jan. 3, 2018
Broadpwn flaw: How does the new iOS exploit compare?
Jan. 2, 2018
Get great results from authenticated vulnerability scanning
Dec. 19, 2017
How security controls affect web security assessment results
Nov. 16, 2017
Email security issues: How to root out and solve them
Nov. 9, 2017
Addressing web server vulnerabilities below the application layer
Oct. 11, 2017
Common web application login security weaknesses and how to fix them
Aug. 17, 2017
Incorporating static source code analysis into security testing
June 28, 2017
Windows 10 security tools to have handy
June 13, 2017
To secure Office 365, take advantage of controls Microsoft offers
June 12, 2017
Office 365 security features: As good as it gets?
June 12, 2017
Address Office 365 security concerns while enjoying its benefits
June 12, 2017
Android VPN apps: How to address privacy and security issues
March 28, 2017
Monitoring outbound traffic on your network: What to look for
Jan. 24, 2017
Best practices for an information security assessment
July 12, 2016
Windows POSReady 2009 registry hack brings back Windows XP updates
June 27, 2016
What enterprises need to know about Internet traffic blocking
March 7, 2016
Should the Netdump flaw deter enterprise ODL SDN use?
Sept. 9, 2015
Why you should remove local administrator rights once and for all
July 23, 2015
State of the Network study: How security tasks are dominating IT staff
June 19, 2015
The secrets of proper firewall maintenance and security testing techniques
April 6, 2015
IIS exploits in Windows Server and how you can fix them
Feb. 24, 2015
Benefits of the Cisco OpenSOC security analytics framework
Feb. 17, 2015
How emerging threat intelligence tools affect network security
Feb. 2, 2015
Tighten Windows 8.1 security in five simple steps
Jan. 28, 2015
Lessons learned: Network security implications of Shellshock
Jan. 13, 2015
Hidden vulnerabilities on your IIS 8 servers
Oct. 31, 2014
Proactive additions shore up forms-based authentication
June 17, 2014
Before you clone HDD to SSD, know the benefits and danger to data
Dec. 30, 2013
Locking down Internet Explorer settings with Group Policy in IE 11
Dec. 11, 2013
Windows Server Update Services weaknesses you may not know about
Jan. 22, 2013
Microsoft Office 2013 crackable, so look to Office password recovery
Jan. 7, 2013
How vulnerable is Microsoft IIS 7.5 to attacks?
Dec. 9, 2010
Common security flaws to check for on your Linux-based Web systems
March 31, 2010
Why use POST vs. GET to keep applications secure
Feb. 9, 2010
Lack of incident response plan leaves hole in compliance strategy
Jan. 22, 2010
What’s the difference between a disaster recovery plan and a business continuity plan?
Nov. 2, 2009
Using Sysinternals tools in security management scenarios
Feb. 18, 2009
Sysinternals tools: A must-have for every Windows security toolbox
Feb. 6, 2009
Web application security testing checklist
Feb. 3, 2009
The 10 most common Windows security vulnerabilities
Sept. 24, 2008
Ten hacker tricks to exploit SQL Server systems
Jan. 17, 2008
Find Windows vulnerabilities with a hex editor
Sept. 18, 2007
What to look for in a Web application security testing tool
June 23, 2007

Select Newsletter: TechTarget AI Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget CIO Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget Data Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget Cybersecurity Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget Infrastructure Every M/W/F, starting Nov. 16th
Select user consent: By signing up to receive our newsletter, you agree to our Terms of Use and Privacy Policy. You can unsubscribe at anytime.

This website is owned and operated by Informa TechTarget, a global network that informs, influences and connects the world's technology buyers and sellers.

People also ask

Kevin Beaver

Get in touch

137 articles by Kevin Beaver