CSO Update

May 09, 2019

How to outwit attackers using two Windows registry settings

These Microsoft Windows registry settings will prevent attackers from scheduling tasks that will hide their activities or gain unauthorized access. Read more ▶

Your Must-Read Stories

•	What should your company's change password policy be?

•	FREE Download: Get the Spring 2019 digital issue of CSO magazine

•	What is opsec? A process for protecting critical information

•	How to get started using Ghidra, the free reverse engineering tool

•	Public SAP exploits could enable attacks against thousands of companies

•	Does it matter who the CISO reports to?

White Paper: DELL EMC + AMD

AMD EPYC Presents Opportunity to Save on Software Licensing Cost

Software licensing models for many server applications have long been tied to the hardware infrastructure resources on which they are run, particularly server processor resources. As server processor architectures have evolved, software licensing models have evolved with them. Download this white paper to learn more. Read more ▶

What should your company's change password policy be?

Microsoft's recent dropping of its maximum password age default renews the debate over forced password changes. Here's why you should continue to expire passwords. Read more ▶

DEALPOST

Buy More, Save More -- This HP Coupon Code Cuts Prices on Business PCs

Configure your new business PC to $599+ and save $60. Create a $1299 configuration and save $150. Spend $1,999 and save $350. For a limited time, and only with this coupon code. Read more ▶

FREE Download: Get the Spring 2019 digital issue of CSO magazine

Learn how leading security organizations are rising to the cloud security challenge and finding new ways to protect data and assets. Read more ▶

What is opsec? A process for protecting critical information

Opsec, which stands for operations security, is a process by which organizations assess and protect public data about themselves that could, if properly analyzed and grouped with other data by a clever adversary, reveal a bigger picture that ought to stay hidden. Read more ▶

How to get started using Ghidra, the free reverse engineering tool

The Ghidra reverse engineering tool is free to download and use and is a worthy alternative to incumbent IDA Pro. Here's what you need to know to get started. (Some assembly required.) Read more ▶

Public SAP exploits could enable attacks against thousands of companies

A recently released exploit takes advantage of a known configuration vulnerability that persists among many on-premise and cloud SAP instances. Here's what companies using SAP should do. Read more ▶

Does it matter who the CISO reports to?

Reporting relationships are more than lines on an org chart, they're lines of authority. Ultimately, who the CISO reports to may say more about an organization's maturity than it does about an individual's effectiveness. Read more ▶

White Paper: DELL EMC + AMD

Dell EMC PowerEdge R7415 AMD EPYC VMware vSAN Mixed Workloads Performance

Dell EMC provides VMware vSAN Ready Nodes that combine a wide range of Dell hardware and VMware vSAN software into a ready-to-order package. These include the new single-socket Dell EMC PowerEdge R7415 servers powered by the AMD EPYC 7000-series processors. These Dell EMC vSAN Ready Nodes are validated and configured to meet hyper-converged workload needs while taking advantage of lower single-socket licensing costs from VMware. Read more ▶