Security Scar Tissue Can Make Organizations Smarter and Stronger

IT pros slammed again and again by security breaches can become desensitized--or they can gain strength from the experiences.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Tips for Securing Windows XP (Yes, Win XP)

Win XP may still be lurking in your organization. Here's where you might find it and how to go about securing Windows XP.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Ubuntu Long Term Support Announcement Begs Security Questions

Canonical's announcement that Ubuntu long term support will span a decade must be considered in the context of hardware, the cloud and CI/CD.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

How to Get Ahead of Container Cryptojacking

Linux container technology introduces several pathways through which cryptojackers can stealthily do their work.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Deep Packet Inspection Powers New Industrial Systems Security Tool

Nozomi's SCADAguardian uses deep packet inspection against tables of known malware behavior, as well as pattern recognition and relationship observations.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Quantum Computing Doesn’t Threaten Good Encryption--Yet

Quantum computers are currently extremely expensive, not very capable, and very few people know how to program them in a meaningful way.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Geoblocking Best Practices: When Geoblocking Is (and Isn't) Useful

In this article I explore geoblocking best practices based on my own experience using honeypot servers.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Vendors up Browser Security Ante

Vendors have been thickening browser security--slowly and assuredly--as the browser's UI role increases.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Start a Security To-Do List

Protecting an organization depends on deep knowledge and experience, but a security to-do list can go a long way toward locking things down.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

10 Points that Often Get Forgotten During Disaster Recovery Planning

Based on client "scar tissue," here are 10 disaster recovery planning lessons learned from experience.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Research Report: The State of IT Security

Our survey of 232 IT and security professionals reveals IT security headaches — the top threats, top perpetrators, breach prevalence, factors that led to decreased vulnerability levels and more — as well as the steps IT pros are taking to combat the problems.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

How STIX, TAXII and CyBOX Combine to Form a Threat Intelligence Ecosystem

Amalgamated threat intelligence is powerful, but procedural mechanisms need to evolve before widespread implementation becomes both cautious and effective.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Bluetooth Vulnerabilities: Researchers Explore 'Side Channel' Attacks

Side channel attacks make many kinds of "conversations" visible and adding to the list of Bluetooth vulnerabilities.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Why the Zero Trust Model Is Ultimate Trust

The zero trust model is the final departure from the concept of the secure perimeter.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

The Evolution of Docker Container Security: Part 3

When it comes to Docker container security, orchestration models favor integrated roles, network scrutiny and small attack surfaces with host protection.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Data Destruction Services Ensure that Data is Sincerely Dead

Vendor ecosystems offer both system refurb and data destruction services that can help companies meet compliance and security concerns.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

The Passwordless Authentication Future May Be Closer Than You Think

Microsoft Edge joins Firefox and Chrome in adding support for the WebAuthN protocol, smoothing the path toward true passwordless authentication.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Wordfence: Security Plugin in WordPress Provides Firewall Features

Wordfence, a security plugin in WordPress, helped a very big, very neglected site get back on its performance and security feet.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

The Evolution of Docker Container Security: Part 2

Maintaining image/configuration integrity is key to Docker container security.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools

Search Engine Hacks: What You Need to Know (Now) about Google Hacking

Google hacking often yields sensitive info. Turn the tables and use search engine hacks to test your own data's vulnerability.
by Tom Henderson via IT Pro - Microsoft Windows Information, Solutions, Tools