Ed Moyle
New Hampshire
SecurityCurve is an independent IT research and consulting company founded by Diana Kelley and Ed Moyle. securitycurve.com
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Ed Moyle
What CISOs need to know about AIOps security
How to prepare As AIOps use cases move beyond predictive AI and into generative modes that embrace LLMs and agentic AI, what can we do to stay ahead and ensure risks are accounted for? First, understand how, where and for what purpose ops teams are using these technologies. That's easy to say, but much harder to do in practice -- particularly given organizational complexities and how rapidly existing vendors incorporate AI functionality into new releases of products already deployed.
How to explain AI risk to the board: What directors need to hear
AI has altered enterprise risk dynamics, although that transformation hasn't resulted in the uniformly threatening direction many security professionals assume. Like any new technology, AI introduces new risks. It also helps mitigate existing ones. Consider a firm using a customer support chatbot.
How to construct an effective security controls evaluation
I once received an ad from a company that promised to lower home energy costs by conducting a free energy audit. The audit, it said, could be done over the phone -- no home visit -- and would require absolutely "zero questions asked" -- i.e., about our current energy use, heating and cooling systems, insulation or anything else. It struck me as objectively ridiculous. How can you reach a fact-based, evidence-driven conclusion without at least measuring something?
MLSecOps: Brückenschlag zwischen Security und KI
In der freien Wildbahn sind längst eine steigende Anzahl von KI-spezifischen Angriffen und Schwachstellen zu beobachten. Um diesen Risiken wirksam zu begegnen, ist es notwendig zeitnah zu handeln und Sicherheit aktiv anzugehen. Die Situation weist Parallelen zur Anwendungssicherheit auf. Ebenso wie bei der Softwareentwicklung muss auch die KI-Entwicklung in die Security-Programme von Unternehmen einbezogen werden.
MLSecOps: Bridging security and AI development processes
MLSecOps ensures AI security by automating controls, fostering collaboration and addressing vulnerabilities early in the development lifecycle. By Ed Moyle, SecurityCurve Published: 19 Feb 2026 As security practitioners, we know that securing an organization isn't necessarily a monolithic exercise: We don't -- literally can't -- always focus equally on every part of the business. This is normal and natural, for many reasons.
Réseau : les 14 meilleurs outils Open source de test d'intrusion
Les tests d'intrusion permettent aux hackers éthiques de tester les contrôles de sécurité d'une entreprise, de mettre en évidence les failles dans les défenses et d'identifier les vulnérabilités exploitables dans les réseaux, les applications et les appareils. Il existe un certain nombre d'outils offensifs de cybersécurité, dont beaucoup sont open source.
How to use Netcat: Commands and use cases
The versatile utility is small, powerful and gives security and network engineers a variety of ways to incorporate it as part of an overall security strategy. By Ed Moyle, SecurityCurve Published: 21 Nov 2025 Netcat is arguably the most flexible network security tool available to security administrators today, and one that is valuable for any security practitioner to have in-depth knowledge of. Let's take a look at how to use Netcat and explore some situations where you can put it to good use.
Comment utiliser Wireshark pour analyser le trafic réseau
Wireshark est un outil essentiel pour les administrateurs réseau et les équipes responsables de la sécurité informatiques. Cet article explique comment s’en servir. En matière de sécurité, les outils qui nous offrent la meilleure visibilité sont souvent les plus puissants et les plus utiles. Wireshark est l'un des principaux outils permettant d'obtenir une visibilité au niveau du réseau.
Wie ein gutes Security-Team zusammengesetzt sein kann
Um diese Aufgaben optimal zu bewältigen, müssen CISOs ihre Teamstruktur auf den Prüfstand stellen. Dazu gehören auch die Rollen und Verantwortlichkeiten sowie die Frage, wer in welcher Gruppe arbeitet und wem sie unterstellt sind. Wie dies in einer bestimmten Organisation aussehen sollte, hängt von den jeweiligen Gegebenheiten ab. Was für ein Unternehmen funktioniert, muss für ein anderes nicht unbedingt geeignet sein.
セキュリティを担う「専門チーム」はどうあるべき？ 役割と具体的な業務内容 ： セキュリティチームのつくり方【後編】
関連キーワード サイバー攻撃 | マルウェア | セキュリティ セキュリティチームの成功には、企業の目標に合わせてセキュリティ施策を明確にし、それを実行するための取り組みが重要だ。セキュリティ施策の実行に当たって、1つの「正解」があるわけではない。さまざまな選択肢がある中で、自社に最適なものを模索することが求められる。本稿は、セキュリティ施策を実行するに当たっての組織づくりのポイントを解説する。 セキュリティ運用の鍵を握る「リーダーシップ」を発揮するには リーダーシップは、セキュリティ戦略を事業目標と連携させ、リスクを管理し、リソースを配分し、コンプライアンス（法令順守）要件を理解するために不可欠だ。リーダーシップには、運用チームの監督、進捗（しんちょく）確認、パフォーマンス分析、セキュリティの各関係者の間の調整などが含まれる。主にCISO（最高情報セキュリティ責任者）がセキュリティ施策を監督し、戦略を主導するだ。 運用チーム セキュリティの運用チームは主に以下の4チームで形成される。 SOCチーム 脅威の監視や検出、「SIEM」（Security Information and...
「できるCISO」が考慮すべきセキュリティチーム構築のポイントとは
関連キーワード サイバー攻撃 | マルウェア | セキュリティ セキュリティチームは企業のシステムを保護する上で中核的な役割を果たす。攻撃の手口やセキュリティ技術が常に進化する中で、定期的にセキュリティチームの在り方を見直し、自社のニーズに合致させることは重要だ。セキュリティ対策が成果を挙げ、セキュリティリーダーが掲げる目標を達成するための鍵は、チームの構造にある。自社の状況に最適なセキュリティチームづくりのためのポイントをまとめた。 なぜ「セキュリティチームの構造」が重要なのか セキュリティチームは攻撃を防いだり、攻撃を受けた際の被害を最小限に抑えたりするために、以下をはじめとするさまざまなタスクを実施する。 脅威の分析 脆弱（ぜいじゃく）性の特定によるリスク管理 セキュリティ製品の導入や運用 攻撃後のシステム復旧作業 セキュリティポリシーの作成 従業員のセキュリティ意識向上を促すトレーニングや情報共有...
Red teams and AI: 5 ways to use LLMs for penetration testing
Red teams can harness the power of LLMs for penetration testing. From session analysis to payload crafting, discover five ways AI transforms security testing. By Ed Moyle, SecurityCurve Published: 25 Aug 2025 Large language models, such as ChatGPT, Gemini and Claude, are redefining how people obtain information and perform their daily tasks. The cybersecurity industry is no different.
Qu'est-ce que le maillage de cybersécurité ? Principales applications et avantages
La plupart des programmes de sécurité sont extrêmement complexes. Ils utilisent plusieurs fournisseurs de services Cloud, un éventail de services Cloud différents, à travers des modèles IaaS, SaaS et PaaS. Les environnements peuvent être extrêmement complexes. Même une application individuelle peut couvrir plusieurs modèles de services Cloud provenant de plusieurs fournisseurs.
How to use the John the Ripper password cracker
Password crackers are essential tools in any pen tester's toolbox. This step-by-step tutorial explains how to use John the Ripper, an open source offline password-cracking tool. By Ed Moyle, SecurityCurve Published: 01 Aug 2025 What is John the Ripper? John the Ripper is an offline password cracking tool that was developed in 1996 by Openwall Project. It is notable for supporting a diversity of password formats.
How to Build a Cybersecurity Team to Maximize Business Impact
By Ed Moyle, SecurityCurve Published: 18 Jul 2025 No two security teams are identical. Even organizations that look similar on paper vary in performance, thanks to differences in team skills, technologies and culture. An often-overlooked variable is team structure, but in fact, it plays a key role in how effectively a CISO's security team meets its objectives.
How CISOs Can Manage and Reduce Compliance Fatigue
Compliance fatigue can undermine security when poorly managed. CISOs can combat it by starting conversations, automating processes and using compliance to drive security initiatives. By Ed Moyle, SecurityCurve Published: 30 Jun 2025 "Compliance doesn't equal security." You've heard it a million times. Perhaps you've even said it yourself. While true, this is deeply limiting. Compliance doesn't guarantee security, but compliance fatigue can actively undermine it.
M&A Cybersecurity Due Diligence Best Practices for Executives
Companies wouldn't think of merging with another organization without performing financial or business due diligence. The same is true of cybersecurity. By Ed Moyle, SecurityCurve Published: 27 Jun 2025 Mergers and acquisitions represent major moments in a company's journey -- promising new markets, expanded capabilities and strategic growth. Yet beneath this excitement is a challenge to address: cybersecurity.
How to build an effective IAM architecture
Identity and access management is changing and so must strategies for managing it. Read up on IAM architecture approaches and how to select the best for your organization. By Ed Moyle, SecurityCurve Published: 21 Feb 2025 Identity and access management, or IAM -- the discipline of ensuring the right individuals have access to the right things at the right times -- sometimes falls into the category of things that are so foundational to enterprise security that we don't stop to think about them.
What is threat hunting? Key strategies explained
If you are ready to take a more proactive approach to cybersecurity, threat hunting might be a tactic to consider. Here's what security teams should know. By Ed Moyle, Drake Software Published: 05 Sep 2024 Early detection is a proven way to minimize undesirable consequences. It is a truism in healthcare, where tests can identify problems while they are still treatable, and it applies in cybersecurity, too.
CrowdStrike outage lessons learned: Questions to ask vendors
The July 2024 CrowdStrike Channel File 291 incident was a significant event for many security practitioners. While the number of affected devices was relatively small -- estimated to be about 8.5 million devices, less than 1% of all hosts running Windows -- the impact was significant. The outage led to air traffic delays and hospitals going offline, as well as issues in banking, retail, entertainment and beyond.
How to use Social-Engineer Toolkit
Testing system components for vulnerabilities is just one part of the network security equation. What's the best way to measure users' resilience to social engineering threats? By Ed Moyle, Drake Software Published: 28 Jun 2024 Every security professional knows that systematically testing defenses is a good idea. Systematic and empirical control testing quite literally underpin much of our discipline.
8 SaaS security best practices for 2024
SaaS has become ubiquitous. To secure it, take steps to inventory SaaS usage, securely authenticate usage, encrypt data, adopt single sign-on and more. By Ed Moyle, Drake Software Published: 10 Jun 2024 SaaS has become the normative path for many enterprises in how they consume business applications. Data from Productiv, which makes software to help businesses manage their application spending, showed that the average company used 342 SaaS applications in 2023.
What is a cloud security framework? A complete guide
With so many apps and data residing in cloud, employing a security framework to help protect cloud infrastructure is an essential move for an organization. By Ed Moyle, Drake Software Published: 05 Jun 2024 A cloud security framework is a set of guidelines and controls used to help secure an organization's cloud infrastructure. It provides cloud service providers (CSPs) and their customers with security baselines, validations and certifications.
How it Works and How to Prevent It
The ability to identify the various methods of cloud account hijacking is key to prevention. Explore three ways to limit potential consequences of cloud credential compromise. By Ed Moyle, Drake Software Published: 25 Mar 2024 Security practitioners are familiar with the dangers of an attacker tapping into privileged accounts. An attacker obtaining access to domain admin credentials or root access to a critical server could be a veritable catastrophe.
Fuzzy about fuzz testing? This fuzzing tutorial will help
Organizations are searching for ways to automate and improve their application security processes. Fuzz testing is one way to fill in some of the gaps. By Ed Moyle, Drake Software Published: 22 Mar 2024 Software development is in a period of transition. Developers are embracing automation to increase development cadence through a variety of strategies, from DevOps and infrastructure as code to test automation and microservices. Now, it's time for security to do the same.
Fuzzy about fuzz testing? This fuzzing tutorial will help
Software development is in a period of transition. Developers are embracing automation to increase development cadence through a variety of strategies, from DevOps and infrastructure as code to test automation and microservices. Now, it's time for security to do the same. Application security has always been a challenge for security teams; recent transitions in software development are only making it more difficult. Automation can ease some of the burden.
5 PaaS security best practices to safeguard the app layer
Underlying APIs, language choice and cybersecurity features can vary widely across PaaS providers. These five security best practices can help in almost any PaaS scenario. By Ed Moyle, Drake Software Published: 11 Mar 2024 PaaS is a cloud model through which service providers deliver an environment where customers can develop, run and manage applications. Because PaaS providers host the hardware and software on their infrastructure, customers aren't burdened with having to do so in-house.
5-Step IaaS Security Checklist for Cloud Customers
Many organizations have almost completely replaced virtual data centers, on-premises servers and appliances with IaaS. This widespread implementation requires a mobilization to secure IaaS environments to match this increased usage. With IaaS, the customer has more security responsibilities than in PaaS or SaaS environments. The shared responsibility model stipulates that the lower one goes in the stack, the more operational security tasks the customer takes on.
IT Security: Bewährte Verfahren zum Umgang mit Logfiles
Es ist nicht nur wichtig, was Teams aufzeichnen, sondern auch der Kontext, in dem ein Ereignis stattgefunden hat. Stellen Sie sich vor, ein Mitarbeiter sagt, dass ein neues privilegiertes Benutzerkonto erstellt wurde. Das ist interessant, aber viel weniger nützlich als die Aussage: Ein neues privilegiertes Benutzerkonto wurde um 15:45 Uhr von einem DevOps-Mitarbeiter von seinem Büro-Desktop aus in einer Testumgebung erstellt.
How to implement a risk-based security strategy: 5 steps
Making the move from compliance-based to risk-based security helps organizations prioritize threats using systematic assessment and strategic planning. By Ed Moyle, SecurityCurve Michael Cobb Published: 01 Jul 2025 Merely conforming to cybersecurity standards, such as ISO/IEC 27001, or complying with regulatory requirements, such as PCI DSS, won't automatically make an enterprise's security complete, effective or economical.
What is Security Log Management? Logging Best Practices
By Ed Moyle, SecurityCurve Michael Cobb Published: 09 Jul 2025 A well-known management principle states: You can't manage what you can't see. For a security program, this means observability into the environment is a key operational tenet -- and observability rests on the ability to record and analyze events. So, though it isn't very exciting, one of the best enablers of a security program is a comprehensive log and event management framework.
How to use Wireshark to sniff and scan network traffic
In security, the tools that give us the greatest visibility often become the most powerful and the most useful.... Please provide a Corporate Email Address. I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy. Please check the box if you want to proceed.
How to Secure Your Modern Corporate Perimeter with Endpoint Security
In a rapidly evolving cyber-threat landscape and surging digitization, organizations face a daunting challenge to protect their IT infrastructure. All IT assets require strong protection, but many organizations still struggle to strike the right balance between proactive and reactive security measures when safeguarding their endpoints. In addition, getting these measures wrong can damage the end user experience, leading employees to circumvent controls.
Enterprise dark web monitoring: Why it's worth the investment
If you know your enemy and you know yourself, you won't be defeated in a hundred battles. -- Sun Tzu, The Art of War In many respects, this simple truism has become a pillar of how security controls are built. Knowing our adversaries' behaviors informs everything from threat intelligence and penetration testing to monitoring strategies and threat modeling.
Top 5 Ransomware Attack Vectors and How to Avoid Them
Protecting your organization against ransomware attack entryways could mean the difference between staying safe or falling victim to a devastating breach. By Ed Moyle, SecurityCurve Diana Kelley, SecurityCurve Published: 21 Apr 2025 Ransomware is everywhere. This disruptive malware infiltrates and disrupts everyone and everything from healthcare organizations to schools, retailers and energy distribution pipelines. But do you know how ransomware finds its way onto its victims' systems?
Top 30 incident response interview questions
Additional tips for answering incident response interview questions In preparing for incident responder job interviews, consider the following additional tips. Brush up on incident response frameworks from information security standards organizations, such as NIST, ISACA and ISO.
How to become an incident responder: Requirements and more
An incident response career path might be the answer for anyone who loves information security and thrives on excitement and technical challenges. The explosion of cyberthreats means that incident responders -- sometimes referred to as the firefighters of the cybersecurity world -- are needed more than ever. A skills shortage plagues the cybersecurity industry.
CERT vs. CSIRT vs. SOC: What's the Difference?
What's in a name? Parse the true differences between a CERT, a CSIRT, a CIRT and a SOC, before you decide what's best for your organization. By Ed Moyle, SecurityCurve Published: 17 Jan 2024 CERT, CSIRT, CIRT and SOC are terms you'll hear in the realm of incident response. In a nutshell, the first three are often used synonymously to describe teams focused on incident response, while the last typically has a broader cybersecurity and security scope. Still, terminology can be important.
10 Open-Source-Tools für Security- und Pentests
SFIO CRACHO - stock.adobe.com 10 Open-Source-Tools für Security- und Pentests Mit Open-Source-Tools kann man Penetrationstests in Eigenregie in der eigenen Umgebung durchführen. Die Palette reicht von Kali Linux, über Mimikatz bis zum Metasploit Framework. von Zuletzt aktualisiert:02 Nov.
Fünf Aspekte zur Auswahl von Cloud Detection and Response
natali_mis - stock.adobe.com Fünf Aspekte zur Auswahl von Cloud Detection and Response Bevor Unternehmen in eine Security-Lösung aus dem Segment Cloud Detection and Response investieren, sollten sie sich mit fünf Überlegungen intensiv auseinandersetzen. von Zuletzt aktualisiert:28 Sept. 2022 Sicherheitsexperten wissen um die Bedeutung von Detection-and-Response-Lösungen.
Security Service Edge: Was vor dem Kauf zu klären ist
Tierney - stock.adobe.com Security Service Edge: Was vor dem Kauf zu klären ist In dem Maße, in dem Unternehmen zunehmend auf die Cloud setzen und flexible Arbeitsortmodelle etablieren, gewinnen neue Lösungen der Kategorie Security Service Edge an Bedeutung. von Zuletzt aktualisiert:20 Sept.
5 key questions to evaluate cloud detection and response
5 key questions to evaluate cloud detection and response Consider these five questions before deciding to invest in a specialized cloud detection and response product. By Security practitioners know the importance of detection and response activities. Some have jokingly said the significance of a topic can be measured in how many acronyms it has. Detection and response has plenty: Given how critical cloud implementation is, it's no surprise cloud detection and response (CDR) has emerged.
How to Create a CSIRT: 10 Best Practices
Best practices for creating a CSIRT A variety of personnel and skills are needed during an incident. But how do you organize them? And how do you prepare to gain access to them ahead of time? For help in building a CSIRT in your organization, follow these 10 best practices. Start with a small, nimble group of stakeholders as the core team. This core group represents the individuals in the organization with direct responsibility for managing the incident as it unfolds.
How to Secure Your Applications Against API Attacks
Application programming interfaces (APIs) are the basic building blocks to enabling business applications and software to communicate and share data. Therefore, cyber-attacks targeting APIs can be a major headache to businesses, potentially leading to large-scale data breaches as well as causing massive disruption. Yet, API security has never been more broken, with security teams unprepared for surging levels of attacks targeting these software intermediaries.
How to evaluate security service edge products Original
As organizations become more cloud-centric and adapt to remote work, a new technique known as security service edge is gaining traction. By Ed Moyle, Drake Software The evolution of security service edge products parallels the steps organizations are taking to become more cloud-centric as they adapt to a work-from-anywhere framework. Indeed, the evolution and emergence of SSE from the broader concept of Secure Access Service Edge makes a lot of sense.
Which are Best for You?
Penetration testing enables ethical hackers and red teams to test an organization's security controls, expose gaps in defenses and identify exploitable vulnerabilities in networks, applications and devices. A number of offensive cybersecurity tools are available, many of which are open source. As a security practitioner, it's valuable for you to have a working knowledge of multiple popular and relevant open source pen testing tools, especially because many solve specific problems.
How to get started with multi-cloud threat hunting Original
Almost every organization is in the cloud. In fact, most organizations above a certain size are in more than one. As multi-cloud becomes more common, however, ensuring security among multiple providers becomes more challenging. There are a few reasons why this is true, among them different security models and mechanisms between providers, lack of seamless visibility across environments and nonunified tool sets.
7 free GRC tools every compliance professional should know about
Compliance professionals know that governance, risk and compliance efforts don't often get the appropriate level... Please provide a Corporate Email Address. I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy. Please check the box if you want to proceed.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Ed
Contact Ed, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack