Resources
Cybersecurity white papers, data sheets, webinars, videos and more
Resource Library
Blog
What Is Nmap and How Can It Help Identify Network Vulnerabilities?
Nmap is a powerful open-source tool for network scanning and vulnerability detection. Learn how security teams use Nmap to discover hosts, assess risks, and strengthen cybersecurity postures.
Blog
What Is HTTPS and Why Is It Still Essential for Cybersecurity in 2025?
HTTPS is not just about website encryption—it underpins secure digital transactions, protects privacy, and builds trust online. Discover why HTTPS is still vital for cybersecurity in 2025.
Threat-Informed TPRM
Blog
How File Transfer Software Became the #1 Third-Party Breach Vector
File transfer software vulnerabilities now lead third-party breaches. Learn how these tools are exploited and how to reduce your supply chain exposure through risk management.
Cybersecurity
Blog
What Is HSTS and How Does It Strengthen HTTPS Security?
HSTS is a browser security policy that protects users from HTTP downgrade attacks. Learn how HSTS works and why every secure website needs it in 2025.
Cybersecurity
Resources
Typhoon-like gang slinging TLS certificate ‘signed’ by the Los Angeles Police Department
Learn more in this resource.
STRIKE News
Blog
How Do You Write a Strong Information Security Policy in 2025?
A strong information security policy in 2025 must go beyond compliance. Learn how to build a policy that supports risk management, zero trust, and Third Party Risk Management (TPRM) .
Blog
What You Need To Know About DeepSeek Security Issues and Vulnerabilities
DeepSeek is a powerful AI model with significant enterprise applications. But it also introduces security risks, according to SecurityScorecard STRIKE Team’s research.
Blog
What Is a Web Application Firewall and Do You Need One?
Web application firewalls help protect your digital infrastructure from attacks like SQL injection and cross-site scripting. Learn what a WAF is, how it works, and whether your organization needs one in 2025.
STRIKE
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability (CVE-2025-32433) Added to CISA KEV
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability (CVE-2025-32433)
STRIKE Alert
Blog
What Are the Best Tools and Techniques to Recover from Ransomware in 2025?
Explore top tools and proven recovery techniques to respond to ransomware in 2025. Learn how to restore operations quickly and minimize long-term damage.
Blog
How Does Role-Based Access Control (RBAC) Improve Organizational Security?
Role-Based Access Control (RBAC) minimizes risk by assigning permissions based on roles. Learn how RBAC improves enterprise security, compliance, and operational efficiency.
Blog
How Do You Stay FERPA Compliant? A Cybersecurity Guide for IT Leaders
Learn how to maintain FERPA compliance in 2025 with this cybersecurity guide for IT leaders. Understand key requirements, common risks, and practical steps to protect student data.
Blog
What Is Doxing and How Can You Prevent It?
Doxing is the malicious exposure of private information online. Learn how it works, the risks it poses to individuals and enterprises, and how to prevent it.
Blog
What Are Must-Do Security Steps When Setting Up a New Server?
Setting up a new server? Follow this essential security checklist to harden your system, avoid misconfigurations, and defend against common threats from the start.
Blog
What Is CIFS and How Does It Impact Enterprise File System Security?
CIFS is an aging file-sharing protocol still found in enterprise environments. Learn what CIFS is, the security risks it introduces, and how to manage those risks in 2025.
Blog
Kerberos vs. LDAP: Choosing the Right Enterprise Protocol
Kerberos and LDAP serve different roles in enterprise security. This guide compares their features, use cases, and integration with modern access control strategies.
Blog
What Are Lessons Learned from the Biggest Financial Sector Cyber Breaches?
Explore the biggest cybersecurity breaches in the financial industry and learn the critical lessons organizations must apply to prevent similar incidents in 2025.
Blog
OAuth vs. SAML: Identity Federation Showdown
Explore the key differences between OAuth and SAML for identity federation. Understand their architectures, use cases, and which is better for secure access management.
Cybersecurity
Blog
Top Free Port Scanner Tools for IT and Cybersecurity Teams
Explore the best free port scanner tools available in 2025 for IT and cybersecurity teams. Learn how these tools help discover open ports, identify vulnerabilities, and secure your network.
Threat-Informed TPRM
Blog
What Is Fourth-Party Visibility and Why It’s Critical for TPRM
Fourth-party visibility gives organizations insight into the risks buried inside their vendors’ networks. Learn why it’s the missing piece in third-party risk management and how to uncover hidden exposure.
Cybersecurity
Blog
What Is Risk Quantification in Cybersecurity and Why It Matters
Cyber risk quantification translates technical vulnerabilities into financial risk—giving boards and CISOs a shared language. Learn how to use quantification models to drive smarter decisions.
Cybersecurity