Learn Blogs
Latest Articles
ISO 27002: Information Security Controls Explained
In this article, we will look at the origin story of the ISO 27002 standard, as well as its structure, and how to apply the guidelines.
What is Threat Modeling?
Get started with threat modeling today. We’ll define threat modeling, discuss how it works, and share simple and advanced threat modeling frameworks.
CVSS: The Common Vulnerability Scoring System
Common Vulnerability Scoring System (CVSS) is a framework designed to provide a consistent and objective way to assess the severity of security vulnerabilities in IT systems. Learn more in this blog post.
Homomorphic Encryption: How It Works
Homomorphic encryption is a new way to protect data. Learn how homomorphic encryption reduces certain problems inherent in traditional decryption.
What is Penetration Testing (Pen Testing)?
Learn about penetration testing — simulating attacks to find security weaknesses. Plus: the six pentesting stages, sample tools and hands-on examples.
Defining & Improving Your Security Posture
What is your security posture? The result of all your security strategies, processes and practices. Get the total low-down on evaluating & improving yours.
Incident Response Plans: The Complete Guide To Creating & Maintaining IRPs
Need to update your incident response plan? Start here! We’ll show how to create one that works, and how to maintain it for the long haul so it stays effective.
Ransomware & Extortionware in 2025: Stats & Trends
Ransomware is among the worst threats you face. Even worse? Ransomware keeps changing how it attacks. Get the latest ransomware trends & stats here.
Security Testing for Mobile Applications
The security of mobile apps is a critical point in your security posture. Get the full story on why and HOW to test the security of your mobile apps.
What Is Data Architecture?
Data architecture determines how you can use your data. Read on to learn how to choose data storage, data pipeline and data management strategies.
The National Cyber Workforce & Education Strategy (NCWES) Explained
Learn about the National Cyber Workforce & Education Strategy, a U.S. program for shaping the future of cybersecurity by promoting cybersecurity education.
Secure AI System Development
CISA & NCSC have issued joint guidelines for developing secure AI systems. Let's understand these guidelines, so we can mitigate risk in AI development.
Data Breach Defined & Ways To Prevent One in 2025
Data breaches can happen in many ways — ransomware, phishing, accidental exposure — but one thing is clear: our data is being breached all the time.
Availability Management: An Introduction
Understand application availability, why traditional availability monitoring fails, and best practices for end-to-end monitoring for today’s availability.
Endpoints and Endpoint Detection: Importance & Risk Mapping
Endpoints sound like an afterthought...not like the most important part of your cybersecurity posture. Learn what endpoints are, and why detecting them is so important.
Endpoint Security Explained
Discover the role of endpoint security in protecting network integrity. This guide shares insights into implementing robust security measures for effective cyber defense.
What is a Computer Server?
Computer servers do indeed serve: they serve up compute power and data! Get the full server story in this in-depth article.
Continuous Threat Exposure Management (CTEM)
Attack surfaces changing daily? Cyber threats on the rise? Old ways of working ain't cutting it? CTEM may be your cyber solution. Get the full story here.
The SaaS Security Guide: Best Practices for Securing SaaS
In this article, let’s look at SaaS security: what it is, the most common threats to SaaS and actionable best practices for securing SaaS applications.
Google Dorking: An Introduction for Cybersecurity Professionals
In this blog post, we'll take a look at the basics of Google Dorking (AKA Google Hacking), how it can impact your organization, and steps you can take to mitigate this risk.
RED Monitoring: Rate, Errors, and Duration
In this blog post, we'll take a brief look at the RED monitoring framework, its benefits, and how it is used in the modern digital enterprise.
Subscribe to our blog
Get the latest articles from Splunk straight to your inbox.
Connect with Splunk on X
Follow @Splunk
Connect with Splunk on Instagram
Follow @Splunk
