Retail December 6, 2018

5 More Retail Cybersecurity Practices to Keep Your Data Safe Beyond the Holidays

7 min read - These five retail cybersecurity tips will help organizations mitigate cyberattacks and provide customers with the safest shopping experience during the holiday season.

Advanced Threats November 28, 2018

Phish or Fox? A Penetration Testing Case Study From IBM X-Force Red

7 min read - The IBM X-Force Red team recently ran into trouble on a black-box penetration testing assignment. Here's how the testers overcame the obstacles to ultimately establish a solid adversarial operation.

November 12, 2018

Enterprises Using IaaS or PaaS Have 14 Misconfigured Instances on Average, Cloud Adoption Study Finds

< 1 min read - A cloud adoption report found that companies that deploy infrastructure-as-a-service (IaaS) or platform-as-a-service (PaaS) have an average of 14 misconfigured instances running at a given time.

November 2, 2018

DemonBot Targeting Hadoop Clusters to Perform DDoS Attacks

2 min read - Security researchers reported that a new bot called DemonBot is targeting Hadoop clusters to execute distributed denial-of-service (DDoS) attacks.

Security Services November 1, 2018

How Dimitry Snezhkov Balances the Yin and Yang of Penetration Testing

4 min read - Dimitry Snezhkov didn't touch a computer until he was 18. Now he spends his days penetration testing to uncover security gaps and his nights meditating on the balance of life.

Application Security October 31, 2018

Major Application Security Oversights You Can’t Afford

4 min read - Many IT teams have developed a habit of treating application security as an afterthought. As a result, it might be their greatest vulnerability.

Incident Response October 15, 2018

3 Lessons That Are Informing the Next Generation of the Cyber Range

5 min read - With the success and lessons learned from our X-Force Command Cyber Range, IBM is excited to launch its new mobile command center, the X-Force Command Cyber Tactical Operations Center (C-TOC).

October 12, 2018

YouTube Scam Lures Eager ‘Doctor Who’ Fans to Reveal Personal Data

2 min read - Researchers uncovered a YouTube scam in which several fraudulent channels urge unsuspecting "Doctor Who" fans to submit personal data to supposedly stream the British science fiction show.

Fraud Protection October 5, 2018

Signing Up for Benefits? Beware of Phishing Attacks

3 min read - Over the next two months, companies should educate and test their employees to prepare for the rise in phishing attacks related to benefits enrollment and holiday party and charity campaign planning.

Security Services October 4, 2018

The Inconvenient Truth About Your Eight-Character Password

4 min read - Your eight-character password is not as secure as you might think, but there are several simple actions you can take to truly strengthen your password security.