General security

The Gaming Industry: A Privileged Target for Crooks — The Fortnite Case

Introduction In the past, we've reported many cases of cyberattacks against companies operating in the gaming industry. We observed many attacks, especially

The top 15 must-have books in InfoSec

An essential part of building information security (InfoSec) professionals' expertise is played by hands-on experience and years of activity. However, a soli

Top threats to online voting from a cybersecurity perspective

Last year, NASA set up an online voting campaign to pick a name for an astronomical object, a small ice-covered asteroid roving through a remote part of the

And Again, About Storing Passwords

When the question of storing passwords arise, the first idea is to simply keep them in clear text in the corresponding table in the database. However, in 201

What Is an IdM and how to discover if you need one

IdM is an abbreviation for "Identity Management," i.e., management of user accounts. Let's turn to Wikipedia: "IdM is the security discipline that enables

What is the difference between the surface web, the deep web, and the dark web?

The Surface Web is, for all intents and purposes, the internet we all know and love to surf, the internet we use to run businesses and connect with famil

User and Entity Behavioral Analytics (UEBA) Overview

The human factor is one of the key issues of information security. On the one hand, humans are common sources of various threats to information security, and

BEC Attacks: How Attorney Impersonation Works

Cases of attorney impersonation are on the rise and often, they are accompanied by fraudulent requests for money or sensitive information. Techniques, such a

BEC Attacks: How Fake Invoice Schemes Work

According to Agari's Business Email Compromise (BEC) Attack Trends Report, 96% of companies experienced BEC attacks in the second half of 2017, mainly becaus

BEC Attacks: How Email Account Compromise Works

Business email compromise (BEC) is a form of phishing attack in which a cyber attacker impersonates a high-level executive (often the CEO). From there, they