Categoria: Security Infrastructure

PCI Data Security Standard v4.0 Released to Address Emerging Threats

The PCI Security Standards Council (SSC), the organization that oversees the Payment Card Industry Data Security Standard (PCI DSS), this week announced the release of PCI DSS v4.0.

The Need for Resilient Zero Trust

Making Zero Trust resilient

It is essential to ensure that any Zero Trust technology used is resilient to external factors

Demystifying Zero Trust

Zero Trust security architecture information

While many vendors use terms that include “zero trust,” they often use it to mean different things

U.S. Security Vendors Launch Critical Infrastructure Defense Project

Amid rising Russia tensions, Cloudflare, CrowdStrike and Ping Identity offer free security for Critical National Infrastructure operators

NSA Publishes Best Practices for Improving Network Defenses

The National Security Agency (NSA) this week published a set of best practices for organizations looking to improve the overall security of their networks.

The guidance is meant to be generic, applicable to a broad range of network devices, and should help administrators prevent adversaries from exploiting their networks.

Universities Should Prepare for Attacks

Universities have a long tradition of open learning and collaboration, where information is shared freely among students and researchers alike. In fact, universities played a key role in growing the internet from its early military roots to the global communication platform it has become. Unfortunately, in today’s world, ransomware gangs and other bad actors have become a regular part of online life.

The Many Faces of Threat Intelligence Part 1: Identifying the Problems

Threat intelligence data has become more and more crucial to effective enterprise security practices. Threat intelligence solutions gather raw data and indicators about existing and emerging threat actors and threats. This data is then analyzed with the hope of informing and preparing organizations for cybersecurity risks like zero-day risks, threat actor attacks, advanced persistent threats, and the exploitation of known vulnerabilities. Many organizations view threat intelligence exclusively in this context.