Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
5 Free or Low-Cost Security Tools for Defenders
Not all security tools are pricey.
Qualys Buys NetWatcher Assets for Cloud-based Threat Intel
The cloud security company plans to add threat detection, incident response, and compliance management to its platform.
First US Federal CISO Shares Security Lessons Learned
Greg Touhill's advice for security leaders includes knowing the value of information, hardening their workforce, and prioritizing security by design.
Git Some Security: Locking Down GitHub Hygiene
In the age of DevOps and agile development practices that lean heavily on GitHub and other cloud resources, strong controls are more important than ever.
Retail and Hospitality Breaches Declined Over Past 2 Years
A drop in publicly disclosed breaches for the two industries is due in part to fewer point-of-sale breaches.
Trend Micro Buys Immunio
The acquisition is aimed at balancing the speed of DevOps with application security.
Uber's Security Slip-ups: What Went Wrong
The ride-sharing company's decisions leading to a 2016 data breach and its handling of the incident should serve as a cautionary tale for enterprises facing a breach.
McAfee Looks to Cloud with Skyhigh Acquisition
McAfee agrees to buy CASB provider Skyhigh Networks, demonstrating a strong focus on cloud security.
Thoma Bravo to Acquire Barracuda Networks for $1.6 billion
The cloud email security and management company accepts buyout offer as a means to accelerate its growth.
Mobile Malware Incidents Hit 100% of Businesses
Attempted malware infections against BYOD and corporate mobile devices are expected to continue to grow, new data shows.
Optiv Acquires Decision Lab to Expand Big Data Services
Deal enhances Optiv's big data, automation, and orchestration efforts.
Death of the Tier 1 SOC Analyst
Say goodbye to the entry-level security operations center (SOC) analyst as we know it.
Stealthy Android Malware Found in Google Play
Eight apps found infected with a new Trojan family that ups the ante in obfuscation with four payload stages.
Microsoft Word Vuln Went Unnoticed for 17 Years: Report
Researchers claim Microsoft Word vulnerability, patched today, has existed for 17 years.
Enterprise Physical Security Drives IoT Adoption
The vast majority of respondents to a new survey are deploying IoT technologies for building safety in the form of security cameras.
Companies Blindly Believe They've Locked Down Users' Mobile Use
IT security teams may be in for a surprise about their mobile exposure as the GDPR compliance deadline approaches, according to a new survey.
Cloudflare Buys Mobile Firm Neumob
The deal will give Cloudflare technology to optimize mobile security, performance.
ADT Expands Cybersecurity Business with Purchase of Datashield
Home and business security giant launches ADT Cybersecurity to offer managed detection and response (MDR) service.
Russian Developer Snuck Cryptocurrency Mining into Android Apps
Apps found in Google Play turned mobile devices into cryptocurrency miners unbeknownst to their users, according to researchers from security firm Ixia.
Emerging IT Security Technologies: 13 Categories, 26 Vendors
A rundown of some of the hottest security product areas, and vendors helping to shape them.
Why Common Sense Is Not so Common in Security: 20 Answers
Or, questions vendors need to ask themselves before they write a single word of marketing material.
Cybersecurity Staffing Shortage Tied to Cyberattacks, Data Breaches
Short-staffed cybersecurity teams contribute to data breaches and cyberattacks levied against their organizations, a survey finds.
AV Vendors Have Immunity for Malware-Blocking Decisions, Court Says
Enigma Software Group had sued Malwarebytes for characterizing its anti-malware software as unsafe, but its case was dismissed.
Stealthy New PLC Hack Jumps the Air Gap
Researchers at Black Hat Europe next month will demonstrate a data-exfiltration attack on Siemens PLCs that uses combination of code manipulation and Radio Frequency (RF) emissions.
'Eavesdropper' Exposes Millions of Mobile Conversations
App developers fail to remove their hardcoded credentials, affecting hundreds of millions of data records.
Hypervisors: Now a Tool to Protect against Security Blind Spots
By facilitating live introspection of virtual machine memory, the Xen Project is striving to eliminate stealthy attack techniques like EternalBlue.
Barracuda Buys Sonian for Cloud Analytics
Barracuda snaps up Sonian to improve on cloud archiving and email security and management.
Siemens Teams Up with Tenable
ICS/SCADA vendor further extends its managed security services for critical infrastructure networks.
Yahoo's Ex-CEO Mayer Calls Out Russian Hackers
Former Yahoo Chief Executive Marissa Mayer apologizes for massive data breach that exposed billions of user accounts.
Cognitive Mindhacks: How Attackers Spread Disinformation Campaigns
Researchers investigate the tools and techniques behind cyber propaganda and fake news and how it changes public opinion.
Virtual Reality Could Serve as a Cybersecurity Recruiting Tool
A recent study finds 74% of millennials and post-millennials agree VR use in cybersecurity tools may entice them into an IT security career.
8 Older Companies Doing New Things in Security
These organizations have been around for a while but aren't slowing down on security releases.
Consumers Don't Trust Businesses Can Protect Their Data
New data shows fears of irresponsible handling of sensitive data, to a lack of control over their personal digital information breeds distrust among consumers.
iPhone X Face ID a Facial Biometrics Catalyst?
Apple's new multi-factor authentication technology receives mixed reviews in separate surveys.
Average Employee Manages Nearly 200 Passwords
But single sign-on support lacks in over 50% of the most popular websites and services used by workers.
Will New Ownership Open New Opportunities for Digital Cert Vendors?
Francisco Partners acquires majority stake in Comodo CA; DigiCert completes purchase of Symantec's SSL cert business.
iPhone 7, Samsung Galaxy S8, Others Hacked in Pwn2Own
Researchers participating in the Mobile Pwn2Own 2017 competition developed exploits for the iPhone 7, Samsung Galaxy S8, and others.
|
Everything You Need to Know About DNS AttacksIt's important to understand DNS, potential attacks against it, and the tools and techniques required to defend DNS infrastructure. This report answers all the questions you were afraid to ask.
Domain Name Service (DNS) is a critical part of any organization's digital infrastructure, but it's also one of the least understood. DNS is designed to be invisible to business professionals, IT stakeholders, and many security professionals, but DNS's threat surface is large and widely targeted.
Attackers are causing a great deal of damage with an array of attacks such as denial of service, DNS cache poisoning, DNS hijackin, DNS tunneling, and DNS dangling. They are using DNS infrastructure to take control of inbound and outbound communications and preventing users from accessing the applications they are looking for. To stop attacks on DNS, security teams need to shore up the organization's security hygiene around DNS infrastructure, implement controls such as DNSSEC, and monitor DNS traffic
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
