Tips

Tips

• Unpack the use of AI in cybersecurity, plus pros and cons

  The use of AI in cybersecurity is now under renewed scrutiny as its popularity rises. Discover the pros and cons of machine learning and AI for incident response.  Continue Reading

• 3 key identity management tips to streamline workflows

  Organizations must audit IAM processes to ensure that opportunities to streamline workflows are not missed. Use these identity management tips to get started.  Continue Reading

• How security teams can prevent island-hopping cyberattacks

  Learn how to prevent island-hopping cyberattacks to keep hackers from gaining the confidence of a phishing victim who could then accidentally commit corporate financial fraud.  Continue Reading

• How to ensure security for 3 types of digital identity

  Enterprise identity and access management strategies must include processes for managing and securing three types of digital identity. Learn how.  Continue Reading

• Benefits of open source container vulnerability scanning

  Containers have revolutionized app development but pose many security challenges. Uncover how container vulnerability scanning can help and why to consider open source tools.  Continue Reading

• 4 essential identity and access management best practices

  Now is the time to shore up the who, what and where of network identities. Adopt these four critical identity and access management best practices to bolster your infosec program.  Continue Reading

• How to fortify IoT access control to improve cybersecurity

  Security technology is still playing catch-up with the new risks and attack vectors associated with IoT. Learn how to improve IoT access control and identity management here.  Continue Reading

• 12 Microsoft 365 security best practices to secure the suite

  Migrating to or operating cloud-based Microsoft 365 can bring with it a host of problems and misconfigurations. Check out 12 best practices to tighten Microsoft 365 security.  Continue Reading

• 5 steps to determine residual risk during the assessment process

  Even the best security controls have data management gaps that create risk. Here are steps to identify and offset residual risk during an assessment.  Continue Reading

• Top 6 cloud security analytics use cases

  Security analytics use cases vary from fraud detection to threat intelligence analysis. Learn how deploying this technology in the cloud can improve enterprise infosec programs.  Continue Reading

• AI threat intelligence is the future, and the future is now

  Threat intelligence services and tools get a boost from advanced technology like AI and, specifically, machine learning. Learn how that works.  Continue Reading

• Uncover and overcome cloud threat hunting obstacles

  You can be an effective cyberthreat hunter even if your organization's assets are in the cloud. Know the likely obstacles you'll face, then learn how to surmount them.  Continue Reading

• Top 2 post-COVID-19 CISO priorities changing in 2020

  CISO priorities for 2020 were upended when the COVID-19 pandemic hit. Learn two ways forward-thinking CISOs are planning to deal with the new normal.  Continue Reading

• How to balance secure remote working with on-site employees

  Post-pandemic, organizations must strike the right balance between on-site and remote work security. Here's how to make sure your cybersecurity program is prepared.  Continue Reading

• Comparing single cloud vs. multi-cloud security challenges

  A multi-cloud environment is not inherently more secure than a single cloud. Learn how to choose between single cloud vs. multi-cloud for your organization from a security perspective.  Continue Reading

• How to protect the network from ransomware in 5 steps

  Stronger network security could be the key to preventing a ransomware infection. Follow these five steps to protect your network from ransomware.  Continue Reading

• Prevent spyware through user awareness and technical controls

  Find out how to protect devices from spyware and educate users to avoid the most common traps from which spyware infections might come, including phishing attacks and rogue apps.  Continue Reading

• How data loss prevention strategies benefit from UBA

  Data loss prevention strategies require unique insight into user activity. Can user behavior analytics capabilities benefit threat management and breach detection?  Continue Reading

• Identifying common Microsoft 365 security misconfigurations

  Microsoft 365 security problems can double the time it takes to contain a breach, according to a new survey. Check out best practices and operational strategies to fix them.  Continue Reading

• How can security benefit from cyberthreat intelligence?

  Cyberthreat intelligence is essential to understand common external-facing risks. Learn how to find the right threat intelligence feed and how the data can benefit cybersecurity.  Continue Reading

• SSL certificate best practices for 2020 and beyond

  SSL/TLS security is continuously improving, and there are steps site owners should take to ensure the safety of their SSL certificates, websites and users. Read on to learn more.  Continue Reading

• How to prepare for ransomware and phishing attacks

  Follow these best practices to properly prepare for ransomware and phishing attacks, as well as further steps to stay secure in the face of a pandemic or widespread health event.  Continue Reading

• Use an IoT security architecture to protect networks end to end

  Organizations can reap benefits from IoT technology but only if it is properly secured. Learn the components of IoT network architecture and the unique security considerations of each.  Continue Reading

• Building security, privacy and trust in IoT deployments

  The T in IoT doesn't stand for trust, but it's a critical component of any IoT deployment. Follow the AEIOU vowel framework for an actionable blueprint of building trust in IoT.  Continue Reading

• AI pen testing promises, delivers both speed and accuracy

  AI is making many essential cybersecurity tasks more effective and efficient. AI-enabled penetration testing, or BAS, technologies are a case in point.  Continue Reading

• SASE identity policies enhance security and access control

  Will the Secure Access Service Edge model be the next big thing in network security? Learn how SASE's expanded definition of identity is fundamental to this emerging access model.  Continue Reading

• Using AIOps for cybersecurity and better threat response

  AIOps platforms, when properly tuned, can benefit all of IT in important ways. Learn how these advanced security tools improve threat detection and response in myriad ways.  Continue Reading

• Comparing SASE vs. traditional network security architectures

  Today's dispersed environments need stronger networking and security architectures. Enter cloud-based Secure Access Service Edge -- a new model for secure network access.  Continue Reading

• Best practices for threat modeling service mesh, microservices

  In microservices and service mesh environments, communications don't follow static paths. As such, security teams must update their application threat modeling methods.  Continue Reading

• Answering the top IoT risk management questions

  Vulnerable IoT devices are commonly installed on enterprise networks, putting IT on the lookout for security issues. Here are answers to the biggest IoT risk management questions.  Continue Reading

• How to prevent buffer overflow attacks

  Read up on types of buffer overflow attacks, and learn secure coding best practices that prevent such vulnerabilities, as well as post-deployment steps to keep apps and websites safe.  Continue Reading

• 4 tips to ensure secure remote working during COVID-19 pandemic

  Don't let teleworkers compromise your enterprise's security. Follow these tips to ensure secure remote working in the event of a teleworker boom during a pandemic.  Continue Reading

• Get to know the elements of Secure Access Service Edge

  Cloud services use cases continue to expand, but implementation challenges remain. Discover Secure Access Service Edge, or SASE, offerings and how they can simplify connectivity.  Continue Reading

• Updating the data discovery process in the age of CCPA

  Privacy regulations are changing the enterprise data discovery process. Now, automation is key for fulfilling data discovery mandates, including those for CCPA and GDPR.  Continue Reading

• How nation-state cyberattacks affect the future of infosec

  Any company can be a nation-state cyberattack victim. Brush up on the latest and most common nation-state techniques and their implications on the threat landscape of tomorrow.  Continue Reading

• 5G network slicing security benefits IoT, mobile

  The fifth generation of mobile cellular technology offers a unique benefit its predecessors don't: network slicing. Learn more about these virtual slices and their security benefits.  Continue Reading

• Use this CCPA compliance checklist to get up to speed

  California leads the pack in terms of state regulations on data privacy and transparency. Now, it's time for businesses to be proactive with this CCPA compliance checklist.  Continue Reading

• Tips for cybersecurity pandemic planning in the workplace

  Is your security team prepared for a workplace pandemic? This guidance will ensure your company's cybersecurity posture can be maintained despite a potentially severe health event.  Continue Reading

• Balance fraud compliance and prevention with these tips

  IT leaders must be vigilant against cyberfraud. Use this list of fraud compliance statutes and prevention tips to protect IT resources, customers and your company's reputation.  Continue Reading

• 6 cybersecurity strategies to solidify personal data protection

  As consumers add more connected devices to personal networks, cybersecurity risk is hitting close to home. Here are steps individuals can take to ensure personal data protection.  Continue Reading

• How to use TODO comments for secure software development

  Don't let security be a software development burden. Learn app developer tricks, such as using TODO comments, to ensure security controls make it from development to production.  Continue Reading

• Privacy controls to meet CCPA compliance requirements

  Existing risk management programs are a solid foundation for CCPA compliance requirements. Learn the privacy controls needed to remain CCPA-compliant and improve IT security.  Continue Reading

• Stop business email compromise with three key approaches

  Why is BEC such a popular attack? Because it works, unfortunately, tempting hackers with huge potential payouts. Learn how to keep them from lining their pockets with your assets.  Continue Reading

• Boost security with a multi-cloud workload placement process

  IT must incorporate a multi-cloud workload placement process into its multi-cloud strategy in order to maintain or improve cloud security and cloud operations.  Continue Reading

• Tackle identity management in the cloud with AaaS or IDaaS

  Has your organization considered outsourcing cloud identity management? Learn more about the benefits of AaaS, aka IDaaS, and what to consider before settling on a particular service.  Continue Reading

• AI-driven cybersecurity teams are all about human augmentation

  AI is often associated with technology replacing humans. In the case of AI-based cybersecurity teams, however, AI will augment its human counterparts, not supplant them.  Continue Reading

• Who wins the security vs. privacy debate in the age of AI?

  When trying to maintain balance between security and privacy in an AI-enabled world, who decides which side should tip and when? So continues the security vs. privacy debate.  Continue Reading

• How to handle nation-state cyberattacks on the enterprise

  It's only a matter of time before nation-state cyberattacks that threaten government entities today target the enterprise. Follow our expert's tips to prepare in time.  Continue Reading

• Benefits of cloud data discovery tools and services multiply

  With multi-cloud and privacy regulations becoming the new normal, infosec teams need data discovery tools and services to keep up. Learn more about available cloud options.  Continue Reading

• Protect against evolving data security threats

  As data security threats evolve, knowing how to protect your data is more important than ever. Learn about the latest security threats and how to ward them off.  Continue Reading

• How does antimalware software work and what are the detection types?

  Virus detection techniques used by antimalware tools can be a huge boost to enterprise cybersecurity programs. Learn how antimalware software works and its benefits in this tip.  Continue Reading

• How to write a quality penetration testing report

  Writing a penetration testing report might not be the most fun part of the job, but it's a critical component. These tips will help you write a good one.  Continue Reading

• Improve data security in the modern enterprise

  From growing attack surfaces to new regulations, these data security considerations must be on every company's radar.  Continue Reading

• Lyft's open source asset tracking tool simplifies security

  Security teams need information and context about data in order to keep it safe. Learn how Cartography, Lyft's open source asset tracking tool, creates highly comprehensive maps.  Continue Reading

• Craft an effective application security testing process

  For many reasons, only about half of all web apps get proper security evaluation and testing. Here's how to fix that stat and better protect your organization's systems and data.  Continue Reading

• HIPAA compliance checklist: The key to staying compliant in 2020

  Putting together a HIPAA compliance program can be fraught with difficulty. Review best practices and a HIPAA compliance checklist to avoid common pitfalls and pass an audit.  Continue Reading

• Top 10 cybersecurity predictions: 2020 edition

  When it comes to cybersecurity predictions, in many ways, 2020 is a continuation of the present. Emerging trends include nation-state activity, IoT infrastructure attacks and more.  Continue Reading

• AI and machine learning in cybersecurity: Trends to watch

  AI and machine learning in cybersecurity are not so much useful to security teams today as they are necessary. Examine cybersecurity automation trends and benefits.  Continue Reading

• 5 steps to a secure cloud control plane

  A locked-down cloud control plane is integral to maintaining cloud security, especially in multi-cloud environments. Here are five steps to a secure cloud control plane.  Continue Reading

• 3 steps to prepare IT operations for multi-cloud

  Organizations must ready their IT operations for multi-cloud and the unique security challenges ahead. Equip your IT ops team with the right people and processes to adapt smoothly.  Continue Reading

• NIST CSF provides guidelines for risk-based cybersecurity

  Organizations benefit from identifying their unique risks when developing cybersecurity processes. Here's how the NIST Cybersecurity Framework can help guide risk-based IT protection.  Continue Reading

• IT vs. OT security -- and how to get them to work together

  While IT and OT security have historically been separate, the advent of IoT is forcing the two together. Cross-pollinating IT with OT is critical to ensuring IoT security.  Continue Reading

• Learn some key cloud workload protection best practices

  Learn key practices to protect cloud workloads whether using VMs, endpoints or containers. And don't forget to consider the best means for building a fruitful feedback loop.  Continue Reading

• What cloud workload security tools and controls work best?

  Read on to learn how to build a cloud security model that allows your team to embed controls and monitor deployment without getting in the way of business processes.  Continue Reading

• Perimeterless security still has borders -- and APIs need it

  Many people believe perimeterless security means borders are a thing of the past. But virtual borders secure APIs needed by mobile users and cloud workloads. Check out how to manage them.  Continue Reading

• Master IoT and edge computing security challenges

  Edge devices are not necessarily designed with security in mind. Organizations need to think critically about how to approach today's edge computing security challenges.  Continue Reading

• Use a data privacy framework to keep your information secure

  Find out how a data privacy framework gives companies the tools they need to ensure their information is protected -- from both internal and external threats.  Continue Reading

• How to implement zero-trust cloud security

  The nature of cloud environments and workloads is changing. Security team approaches must evolve in response. Learn how to implement zero-trust cloud security from expert Dave Shackleford.  Continue Reading

• As cybersecurity insurance coverage becomes common, buyer beware

  Cybersecurity insurance coverage can certainly have its benefits after a breach, but companies must consider a variety of unique business factors before choosing a policy.  Continue Reading

• Building a security operations center with these features

  Building a security operations center means understanding the key features you need to ensure your network remains protected against threats.  Continue Reading

• The top 3 use cases for AI endpoint security tools

  Endpoint attack surfaces are growing, and cybersecurity pros struggle to keep up. Consider the following use cases for AI endpoint security techniques in the enterprise.  Continue Reading

• How to use and manage BitLocker encryption

  Built into business versions of the Windows OS, Microsoft BitLocker encryption is an integral enterprise encryption tool. Read on to learn how BitLocker works and how to manage it.  Continue Reading

• Boost network security visibility with these 4 technologies

  The network is where it's at if you want to stop malicious actors. But first you need to up your network visibility. Learn about four technologies that can help.  Continue Reading

• Network visibility and monitoring tools now amp up security

  Three technology trends are currently making network visibility even more central to security tools. Learn more about the impact of big data, AI and APIs.  Continue Reading

• Use network traffic analysis to detect next-gen threats

  Network traffic analysis, network detection and response -- whichever term you prefer, the technology is critical to detecting new breeds of low-and-slow threats.  Continue Reading

• How container adoption affects container security

  Scalability and efficiency make container adoption an attractive option for enterprises today. Learn how containerization has evolved and grown since the release of Docker 1.0 five years ago.  Continue Reading

• A fresh look at enterprise firewall management

  Enterprises need to know where and how to install firewalls for maximum protection. Find out firewall management best practices that can help protect your organization.  Continue Reading

• Zero-trust framework creates challenges for app dev

  Enterprises implement zero-trust frameworks to adapt to today's changing IT infrastructures. Learn about the implications for app developers.  Continue Reading

• 3 security and ethics considerations for modern-day CISOs

  Many conversations today revolve around security and ethics. A strong CISO voice is crucial to keeping enterprises safe while embracing this critical cultural awakening.  Continue Reading

• Risks of container escape vulnerabilities and how to counter them

  Container escape vulnerabilities create new challenges for security and risk management teams. Learn more about container escapes and how to prevent exploitation.  Continue Reading

• Understand the top 4 use cases for AI in cybersecurity

  AI applications in security offers organizations four unique benefits. Learn how machine learning advances can change industry approaches to threat detection and prevention.  Continue Reading

• 5 cloud storage privacy questions to ask potential providers

  Data confidentiality in cloud computing is a major enterprise concern, yet providers are often lacking in their details. Here are the questions to ask before adopting a service.  Continue Reading

• Essential instruments for a pen test toolkit

  Does your penetration testing toolkit have the proper contents? Learn the must-have tool for any pen tester, as well as specific tools for wireless, network and web app pen testing.  Continue Reading

• Defining and evaluating SOC as a service

  As cloud use increases, many enterprises outsource some security operations center functions. Evaluate if SOCaaS is the best model for your enterprise.  Continue Reading

• How to beef up S3 bucket security to prevent a breach

  Security teams have plenty of tools at their disposal to help their organizations achieve and maintain S3 bucket security. Learn about the threats and best practices to stay safe.  Continue Reading

• Virtual network security measures to thwart access threats

  Virtual networks add a layer of complexity to the real networks below them. Follow these three virtual network security measures to prevent complexity from creating issues.  Continue Reading

• How can DNS privacy issues be addressed?

  Learn two techniques for improving end-user DNS privacy protection that prevent DNS from exposing information about websites users visit and the people users communicate with.  Continue Reading

• The 3 types of DNS servers and how they work

  DNS is a core internet technology, instrumental in mapping human-readable domains into corresponding IP addresses. Learn about the three DNS server types and their roles in the internet.  Continue Reading

• How PCI DSS compliance milestones can be a GDPR measuring stick

  Constantly evolving regulations can cause confusion for security officers, but sometimes, there is process overlap. Here's how achieving compliance with PCI DSS can help meet GDPR mandates.  Continue Reading

• Build an agile cybersecurity program with Scrum

  Scrum's core principles translate well into an agile cybersecurity program setting. Learn how this framework bolsters communication and collaboration within infosec teams.  Continue Reading

• How software-defined perimeter authentication ups security

  Find out how the emerging software-defined perimeter model increases security by its design and how it can serve as a building block to zero-trust security.  Continue Reading

• How to shore up your third-party risk management program

  A third-party risk management program has to go beyond questionnaires and poorly designed policies. Learn what you should do to protect yourself against vendor security flaws and core risks.  Continue Reading

• Create a manageable, secure IT/OT convergence strategy in 3 steps

  An effective IT/OT strategy requires at least three things: an evangelist, an infrastructure reference architecture and a plan to sanely divide operations between IT and OT.  Continue Reading

• Tips and tricks to integrate IT and OT teams securely

  IT and operational teams can work in tandem to support IoT projects, but their separate roles and responsibilities to one another must be clearly defined.  Continue Reading

• What's the role of people in IT/OT security?

  To enable a smoother, more secure IT/OT convergence, get wise to the potential conflicts between IT and OT historical priorities and traditional work cultures.  Continue Reading

• How to encrypt and secure a website using HTTPS

  The web is moving to HTTPS. Find out how to encrypt websites using HTTPS to stop eavesdroppers from snooping around sensitive and restricted web data.  Continue Reading

• Cybersecurity frameworks hold key to solid security strategy

  Cybersecurity frameworks take work, but they help organizations clarify their security strategies. If you don't have one, here's what to consider, even for emerging perimeterless security options.  Continue Reading

• RPA security best practices include access control, system integration

  Robotic process automation can revolutionize enterprise workflows, but if RPA security risks aren't controlled, bots could end up doing more harm than good.  Continue Reading

• What it takes to be a DevSecOps engineer

  To address security early in the application development process, DevSecOps requires a litany of skills and technology literacy. Learn what it takes to be a DevSecOps engineer.  Continue Reading

• How to build and maintain a multi-cloud security strategy

  When using multiple cloud service providers, it's critical to consider your enterprise's cloud scope and the specifics of each cloud service to maintain security.  Continue Reading