It's the People: 5 Reasons Why SOC Can't Scale
Alan Zeichick | 4/23/2018 | There are always more security alerts and threats to respond, but the answer isn't to simply throw more money at the SOC to hire additional Tier 1 and Tier 2 security analysts.
At-Risk Routers & Russian Hacking Plans Stir Talk at RSA
News Analysis-Security Now | 4/23/2018 | At last week's RSA conference, the recent US and UK disclosure that Russia-backed actors have been targeting unpatched and older routers stirred conversations among security experts.
Login With Facebook & Watch Your Personal Data Leak
A common feature on many popular websites allows users to login with their Facebook profile. However, a trio of Princeton researchers show that this feature allows personal information to leak and be collected.
Free endpoint scanning service powered by Open Threat Exchange
Dark Reading Videos | 4/19/2018 | Russ Spitler, AlienVault’s SVP of Products, explains how security pros can leverage the community-powered threat intelligence of OTX – which sees more than 19 million IoCs contributed daily by a global community of 80,000 peers – to quickly protect themselves against emerging attacks.
Can machine learning improve your endpoint detection and response?
Dark Reading Videos | 4/19/2018 | To intervene with optimum efficiency, response team needs to zero in on the most potentially dangerous endpoint anomalies first. And according to Harish Agastya, VP of Enterprise Solutions at Bitdefender, machine learning-assisted EDR can help you do exactly that.
Successfully Using Deception Against APTs
Dark Reading Videos | 4/19/2018 | According to Illusive CEO Ofer Israeli, deception technology can provide a vital layer of protection from advanced persistent threats (APTs) by presenting attackers with seemingly genuine servers that both divert them from high-value digital assets and make it easier to pinpoint malicious network activity.
Should CISOs Be Hackers?
Dark Reading Videos | 4/19/2018 | Justin Calmus, Chief Security Officer at OneLogin, believes that cybersecurity professionals – including CISOs and other security team leaders – can be much more effective at their jobs if they stay actively engaged with hacking communities that keep them on their toes and give them deep insight into attack trends.
Protecting Data Anywhere and Everywhere
Dark Reading Videos | 4/19/2018 | SecurityFirst CEO Jim Varner explains how resellers and MSPs can work with their clients to ensure that all of their business-critical data everywhere can be kept safe from attackers and readily available for disaster recovery – even as threats intensify and digital assets are dispersed across multiple clouds.
Supporting Infosec Needs for Cybersecurity Speed, Scope and Skills
Dark Reading Videos | 4/19/2018 | Given intensifying threats and limited infosec budgets, Endgame CTO Jamie Butler suggests that security leaders deploy tools that leverage machine learning, chatbots, and other technologies to make Tier 1/Tier 2 staff much more effective at stopping even relatively sophisticated attacks.
Using Carrier Intelligence to Validate Mobile User Identity
Dark Reading Videos | 4/19/2018 | To confidently validate the identity of mobile users without adding business-killing friction to login and on-boarding processes, Lea Tarnowski and Wendell Brown of Averon suggest leveraging the intelligence mobile carriers already have about their customers.
Microsoft Security Is Channeling the Terminator
Alan Zeichick | 4/19/2018 | In its own way of channeling the Terminator and Skynet, Microsoft is looking to add more layers of artificial intelligence into its Windows Defender ATP to further reduce remediation and increase automation of security.
In Wake of Spectre & Meltdown, Intel Shifts Memory Scanning to GPU
Jeffrey Burt | 4/19/2018 | At the RSA Conference this week, Intel introduced several silicon-level security technologies, including moving memory scanning from the CPU to the GPU, as part of its larger 'security-first' strategy following the Spectre and Meltdown issues.
Stopping Bots and Credential Stuffing: A Smarter Strategy
Dark Reading Videos | 4/18/2018 | Patrick Sullivan, Senior Director Security Strategy at Akamai Technologies, explains why cybersecurity teams need better mechanisms for controlling bot activity – and why all bots are not created equal.
Leveraging Threat Intelligence across Infosec Roles
Dark Reading Videos | 4/18/2018 | Allan Liska, Senior Security Architect at Recorded Future, believes everyone in the infosec team – including vulnerability management and threat response staff – can take greater advantage of available threat intelligence to more effectively and efficiently mitigate risk.
Practically Applying Threat Intelligence to Your Business
Dark Reading Videos | 4/18/2018 | Travis Farral, Director of Security Strategy at Anomali, believes cybersecurity teams can operate much more efficiently by better identifying the specific threats that endanger their environment – and by better understanding the potential impacts of those specific threats.
Enabling Appropriate User Access in a “Zero Trust” World
Dark Reading Videos | 4/18/2018 | Bill Mann, Chief Product Officer at Centrify, suggests some strategies for securing today’s perimeter-less enterprise environments – including stronger enforcement of well-defined policies for user access, integration of security into DevOps processes, and smarter use of ML for anomaly detection.
Keeping the Business Safe Across Hybrid Cloud Environments
Dark Reading Videos | 4/18/2018 | Aggressive cloud adoption increases threat surface and makes it more difficult for infosec teams to keep track of what the business is doing. Donald Meyer, Head of Data Center and Cloud at Check Point Software, explains how infosec teams can more effectively mitigate risk without hampering business agility.
Beating Zero-Payload/Fileless Attacks with Unified EPP/EDR
Dark Reading Videos | 4/18/2018 | To cope with today’s fileless endpoint attacks – especially those that aren’t precisely similar to previously known exploits – Tomer Weingarten and Nicholas Warner of SentinelOne suggest a unified EPP/EDR approach that includes visibility into the dangers lurking within encrypted network traffic.
Optimizing the Security Awareness of Your End-Users
Dark Reading Videos | 4/18/2018 | End-users can be the weakest link in your infosec defense. But according to KnowBe4 founder and CEO Stu Sjouwerman, there is something you can do about that – if you implement the right behavioral diagnostics and focus your training needs on individual users’ actual weaknesses.
DHS Secretary Kirstjen Nielsen: Cybercrime Will Reach $6 Trillion Annually
News Analysis-Security Now | 4/18/2018 | Kirstjen Nielsen, the secretary of the US Department of Homeland Security, told this week's RSA Conference that cybercrime will reach $6 trillion annually within the next three years, and that the federal government and private business need to step up their game.
|