NIST SP 800-177 Revision 1: “Trustworthy Email”

The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 800-177 Revision 1, that includes security recommendations for achieving "Trustworthy Email." SP 800-177 Rev 1 includes updated guidelines for securing email ...
Read More
/ Cryptography, DKIM, DMARC, Messaging, Messaging Security, NIST, SPF, Standards & Guidelines, TLS

NIST SP 1800-4: Mobile Device Security

The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 1800-4, that includes security guidelines for mobile device security in cloud and hybrid environments. The latest SP 1800-4 document titled "Mobile ...
Read More
/ BYOD, CAG 20, Cybersecurity Framework, Data Privacy, ISO 27002, mobile, Mobile Security, NIST, SP 800-1400, SP 800-53, Standards & Guidelines

NIST SP 800-37 Rev. 2: Risk Management Framework for Information Systems and Organizations

The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 800-37 Rev. 2: "Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy." SP ...
Read More
/ Application Security, NIST, Privacy, Risk, RMF, Server Security, SP 800-37, Standards & Guidelines, Third-Party Security

Many organizations lacking adoption of key CIS controls

A recent survey conducted by Tripwire revealed organizations are not fully adopting security controls from key benchmarks, such as the Center for Internet Security (CIS). CIS established the "top 20" set of critical security controls ...
Read More
/ CIS, SANS, Standards & Guidelines

PCI DSS 3.2.1 release

The PCI Security Standards Council (PCI SSC) has published a minor revision to the PCI Data Security Standard (PCI DSS) many businesses use to safeguard payment card data. The latest version 3.2.1 replaces the previous ...
Read More
/ Cryptography, Data Security Standards, DSS 3.2.1, MFA, PCI, PCI DSS, SSL, Standards & Guidelines, TLS, TLS 1.2

New CIS Controls V7 released

The Center for Internet Security (CIS) has released its next revision (Version 7) of the top 20 Critical Security Controls.  The CIS controls are a recommended set of cyber defense actions that provide detailed and actionable ways to ...
Read More
/ 800-53, CIS, NIST, Security, Standards, Standards & Guidelines, Top 20 CIS Controls

PCI security standards for mobile point of sale

The PCI Security Standards Council (PCI SSC) announced a new PCI Security Standard for software-based PIN entry on commercial off-the-shelf devices (COTS), to include smartphones and tablets. According to the press release on Wednesday, the PCI Software-Based PIN ...
Read More
/ EMV, mobile, Mobile Security, PCI, SCRP, Security, SPoC, Standards, Standards & Guidelines

My 6 Favorite Mac Security Hardening Recommendations

In the wake of Apple's most recent and embarassing blunder regarding the macOS High Sierra root login flaw, I felt it was a good time to revisit Apple Mac hardening guidelines that can help users ...
Read More
/ 10.10, Apple, CIS, EFI, Endpoint Security, Mac, macOS, OS X, SP 800-179, Standards & Guidelines

What Are Application Containers And How Do I Secure Them?

test You may have wondered what application containers are, let alone how to secure them. The National Institute of Standards and Technology (NIST) sets out to explain the benefits and security concerns with application container ...
Read More
/ AppArmor, Application Security, Containers, Docker, EC2, LXC, NIST, RTM, SELinux, Server Security, SP 800-190, Standards & Guidelines, virtual machine, virtualization, VM

New Email Security Guidelines To Combat Phishing Threats

The NIST standard, SP 800-177 Revision 1, Trustworthy Email (Draft) was released last month and offers up-to-date security guidance to include SPF, DKIM, DMARC, and email digital signatures and encryption (via S/MIME), among others. Update: ...
Read More
/ Crypto, Cryptography, Cryptography, DKIM, DMARC, Messaging Security, NIST, SHA-256, SP 800-177, SPF, SSL, Standards & Guidelines, TLS