Page 40 - White Papers in Next-Generation Technologies & Secure Development

Enhance Remote Access Security With Multifactor Authentication and Access Management

As organizations move toward remote work, security and risk management leaders should consider investing in MFA and access management for all kinds of remote access, and plan for rapid scaling. Download this whitepaper to learn: The challenges of securing remote access, such as the need to implement consistent...

DevSecOps Shifting Security to the Left to Protect the Enterprise

To ensure data and services are protected against attack, DevOps is evolving to incorporate cybersecurity practices across the lifecycle. Organizations need to take into account the fast-moving nature of continuous innovation, and a rapidly evolving and fragmented threat landscape: otherwise security can get in the...

The Three Keys to Secure and Successful Cloud Migrations

Most mid-sized to large enterprises have already moved some of their infrastructure, data, and workloads into the cloud for better agility, efficiency, and cost savings. To make cloud transformations as efficient and successful as possible, companies must remain secure and compliant throughout. And there are three...

Global DDoS Threat Landscape

2019 saw the biggest attack ever recorded but, overall, attacks were smaller, shorter, and more persistent. For some time now, carrying out a DDoS attack has no longer required any technical skills. With a myriad of "stressing" or DDoS-for-Hire services available to carry out both network and application layer...

Next Generation Cybersecurity: New Tactics for New Threats

Cyberattacks have rapidly evolved since the advent of online transacting almost 25 years ago, with attackers continually escalating and refining their techniques to protect their illicit revenue streams. More recently, cybercriminals have been weaponizing AI tools to easily bypass traditional security controls and...

Navigating the Open Source Risk Landscape

Open source use isn't risky, but unmanaged use of open source is. This paper provides insights and recommendations to help organizations and their development and IT teams better manage the open source risk landscape. It covers: Open source license risk and the need to identify and catalog open source...

Modern Application Development Security

Based on a survey of cybersecurity and application-development professionals conducted by Enterprise Strategy Group (ESG). This report examines the dynamics between development teams and cybersecurity teams regarding the deployment and management of application security solutions. Key Objectives: Examine the...

The CISO's Guide to Modern AppSec

As the rate of software development accelerates, organizations are forced to adopt new practices and undergo cultural shifts. To succeed, application security (AppSec) must be integrated into every stage of the development pipeline - in other words, DevSecOps. This requires the right mix of tools, people and...

Global Consumer Privacy State of Mind Report

In the 2020 Global Consumer State of Mind Report, Truata shows how consumers across the globe place a high value on their data privacy and will not be shy to abandon brands they feel don't treat their personal information responsibly. Learn more about the benefits of building trust and transparency with your...

Sponsored by Anomali

Closing the Critical Skills Gap for Modern and Effective Security Operations Centers (SOCs)

The 2020 SOC Survey launched two days prior to the World Health Organization (WHO) declaring COVID-19 as a pandemic. Some of the results reflect the uncertainty security managers are facing about their future hiring. With a vast number of businesses completely shut down or moving to a 100% work-from-home environment,...

Sponsored by Anomali

Global Phishing Campaign Spoofs Multiple Government Procurement Services With Credential Harvesting

Anomali researchers have identified a credential harvesting campaign designed to steal the login credentials for multiple government procurement services from a range of international countries. The procurement services are used by multiple public and private sector organizations to match buyers and suppliers. ...

Sponsored by Anomali

SANS Measuring and Improving Cyber Defense Using the MITRE ATT&CK Framework

One of the most exciting, useful, and needed efforts in recent years for information security is the MITRE ATT&CK (Adversarial Tactics, Techniques & Common Knowledge) framework, a way to describe and categorize adversarial behaviors based on real-world observations. The goal of ATT&CK is to be a living dataset that is...

Sponsored by Anomali

Economic Validation Report of the Anomali Threat Intelligence Platform

ESG Estimates a 233% ROI from Anomali Threat Intelligence Solutions Never before has it been so critical for enterprises to effectively empower an increasingly remote workforce with access to applications and resources across a number of geographic regions, networks, and devices. Enterprises have been...

Sponsored by Anomali

SANS 2020 Top New Attacks and Threat Report

A Secure and Resilient Cybersecurity Infrastructure Is Key to Mitigating Cyber Attacks As we have been reminded in 2020, standard hygienic practices are crucial to combating viruses like COVID-19. The same is true in cybersecurity, everyone must practice basic security hygiene to boost their defenses against...

Sponsored by Anomali

Sharing Threat Intelligence: An Important Component In Information Security Defense

Whether organizations have a full threat intelligence team, ingest threat feeds, or simply leverage threat intelligence features found in common security tools, they are now benefiting from threat intelligence in one way or another. Commensurate with the increase in the use of threat intelligence has been an increase...