CSO

Protecting your network from DDoS attacks starts with planning your response. Here, security experts offer their best advice for fighting back.

As an infosec professional, you’ve likely heard about using a cyber kill chain, also known as a cyber attack lifecycle, to help identify and prevent intrusions. Attackers are evolving their methods, which might require that you look at the cyber kill chain differently. What follows is a recap of what the cyber kill chain approach

Antivirus software can’t keep up with new malware or variants of known malware, but it still plays a role in an overall endpoint protection strategy.

Traditional signature-based antivirus is notoriously bad at stopping newer threats such as zero-day exploits and ransomware, but it still has a place in the enterprise, experts say, as part of a multi-layer endpoint security protection strategy. The best antivirus products act as the first layer of defense, stopping the vast majority of malware attacks and

These top-ranking Windows 10 client antivirus products were tested on three primary criteria: protection, performance, and usability.

Cybersecurity risks are now a key part of the ERM process. Here’s how infosec professionals should talk about cybersecurity risk and assess its impact.

Cybersecurity startups, not weighed down by legacy platforms, can be more nimble and innovative than their more established competitors, and can often offer more personalized service at a more attractive price. Atiq Raza has seen this from both sides. Today, he’s the CEO of Silicon Valley cybersecurity startup Virsec Systems, but he’s also worked for

Improving cybersecurity is becoming a driving factor for starting digital transformation projects. Mistakes in implementation, however, can be costly.

Nextgen firewalls add features like behavioral analytics, malware detection, and content monitoring to prevent unauthorized access and data exfiltration. They could do much more in the future.

First comes the embarrassing breach announcement. Then, a few days or weeks later, another one — a few million stolen records were missed the first time around. Then another announcement, with another upward correction. With each new revelation, the hacked organization loses credibility and faces greater liability. To read this article in full, please click

California’s new privacy law, AB 375, might not burden security as much as the GDPR, but details are subject to change.

Experts warn of blockchain security risks in non-cryptocurrency use cases.

Hackers are getting better at exploiting encryption gaps that expose plain-text data. New hardware and software runtime encryption solutions aim to close those gaps.

Cloud functions, or serverless apps, are small, fast and pop in and out of existence. So, how do you secure them?