For organizations looking to use pen testing as part of cybersecurity defense tactics to improve security, consider the practice in three steps. 

Mandiant and Google identified a significant jump in 2021 in security vulnerabilities that threat actors exploited before a patch became available.

With the number of cyberattacks faced by enterprise organizations, security teams need to rely on artificial intelligence to mitigate risk. However, a fully automated approach to cybersecurity presents challenges as well.

From multi-factor authentication to annual penetration testing, there are always more methods to implement in order to better secure small businesses from cyberattacks.

Ed Skoudis, a cybersecurity leader and educator, has been named the new President of the SANS Technology Institute, according to a statement. Ed will lead the institute's degree programs and Internet Storm Center.

Sitting on the frontlines as a red-teamer, people regularly ask me, “Should I do a pentest or hire a red team?”  But that’s not the question they should be asking. 

A team of Stanford students took the top prize at a recent international cybersecurity hacking competition.

The implementation of a secured perimeter and internal firewall network architecture and conducting Vulnerability Assessments and Penetration Tests (VAPT) are often seen as enough to protect critical business information and guard against unexpected cybersecurity threats. However, as we will discover and despite this approach being a good start, there is substantially more to information security than firewalls and VAPT.