Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Stop Building Silos. Security Is Everyone’s Problem
Yes, it’s true that the speed of DevOps has made security more difficult. But that doesn’t mean accelerated release cycles and secure applications have to be mutually exclusive.
6 Reasons ISPs Must Step Up Defenses Against DDoS Attacks
Conducting a DDoS attack used to require a significant amount of talent. But today, a high school student with basic hacking skills can access tools that will challenge even the most experienced ISP security teams.
8 Signs Your Security Culture Lacks Consistency
Organizations that practice what they preach and match their actions to their words do far better achieving their goals than those that do not. Here's why that matters.
Crowdsourcing The Dark Web: A One-Stop Ran$om Shop
Say hello to Ran$umBin, a new kind of ransom market dedicated to criminals and victims alike.
Surviving InfoSec: Digital Crime And Emotional Grime
The never ending stream of threats, vulnerabilities, and potential attacks can take its toll on the typical security professional. Here’s how to fight back against the pressure.
Dark Reading Marks 10th Anniversary With Month Of Special Coverage
Looking back at the decade in security.
Be Prepared: How Proactivity Improves Cybersecurity Defense
These five strategies will help you achieve a state of readiness in a landscape of unpredictable risk.
The Problem With Patching: 7 Top Complaints
Is your security team suffering from patching fatigue? Check out these tips and eliminate critical vulnerabilities in your IT environment.
Mea Culpa: Time To Build Security Into Connectivity
How those of us who spent decades developing faster, easier, and more scalable networking technology have made the lives of our security counterparts a living hell.
Security Lessons from C-3PO, Former CSO of the Millennium Falcon
The business will take risks. When and how to speak up.
Internal Pen-Testing: Not Just For Compliance Audits Anymore
How turning your internal penetration team into a 'Friendly Network Force' can identify and shut down the cracks in your security program.
Device Advice: Keeping Fraudsters From Consumer Info
Data breaches are the first stop for criminals with intentions to steal personally identifiable information. These tips show how to fight fraud while optimizing the customer experience.
Privacy Debate: Apple & Google Today; AWS or Azure Tomorrow?
Why the recent fight over mobile phone security and encryption is moving to the cloud.
Rethinking Application Security With Microservices Architectures
The advantages offered by the container model go against many of the assumptions of traditional security mechanisms. Here are 5 new concepts & 4 best practices you’ll need to understand.
5 Steps to Improve Your Software Supply Chain Security
Organizations that take control of their software supply chains will see tremendous gains in developer productivity, improved quality, and lower risk.
Java Deserialization: Running Faster Than a Bear
Software components that were once good can sour instantly when new vulnerabilities are discovered within them. When that happens, the bears are coming, and you have to respond quickly.
Securing the Weakest Link: Insiders
No longer is a hoodie-wearing malicious hacker the most obvious perpetrator of an inside cyber attack.
Managing The Message Before The Breach
No leader wants to see their company exploited by creative cyber villains. Here’s how CISOs can stay ahead of the game with a strategic plan.
Dark Reading Radio: Advancing Your Security Career
INCYMI! Join us for a fascinating discussion on key trends and opportunities in the rapidly evolving world of cybersecurity.
7 Profiles Of Highly Risky Insiders
To understand who these insiders are and why they pose a risk, start by looking at the root of the problem.
Context & Awareness: It’s All About The Apps
Why data context, application awareness and training are keys to mitigating security risks,
Understanding The Cloud Threat Surface
How today’s borderless environment creates new threat vectors from third-party apps, brute force password attacks, and login attempts with stolen credentials.
How to Hack Your Own Car
As vehicles become more software-driven, car manufacturers are keeping the inner workings of electronics systems more secretive. Here's one way to maintain security updates and still preserve your 'freedom to tinker.'
CAs Need To Force Rules Around Trust
Google Symantec flap reveals worrisome weakness in the CA system.
Avoiding Legal Landmines in Data Breach Response
Building a legally defensible cybersecurity program means seeking out guidance from legal advisors before a serious incident forces you together.
Raising The Stakes For Application Security
Why, if we already know most everything we need to know about exploited vulnerabilities in software, do hacks keep happening?
|
Everything You Need to Know About DNS AttacksIt's important to understand DNS, potential attacks against it, and the tools and techniques required to defend DNS infrastructure. This report answers all the questions you were afraid to ask.
Domain Name Service (DNS) is a critical part of any organization's digital infrastructure, but it's also one of the least understood. DNS is designed to be invisible to business professionals, IT stakeholders, and many security professionals, but DNS's threat surface is large and widely targeted.
Attackers are causing a great deal of damage with an array of attacks such as denial of service, DNS cache poisoning, DNS hijackin, DNS tunneling, and DNS dangling. They are using DNS infrastructure to take control of inbound and outbound communications and preventing users from accessing the applications they are looking for. To stop attacks on DNS, security teams need to shore up the organization's security hygiene around DNS infrastructure, implement controls such as DNSSEC, and monitor DNS traffic
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
