Article Drunk Admin Web Hacking Challenge This challenge includes a web application generally designed for image hosting. The application has a few vulnerabilities. The challenge is to…
Article Anatomy of an APT attack: Step by step approach This article will explore the technique, design and the inner workings of an APT (Advanced Persistent Threat) attack. It will also relate various…
Article pWeb Suite - A Set of Web Pentesting Tools pWeb Suite (formerly known as pCrack Suite) is a set of Perl-based penetration testing tools primarily focused on web application security and…
Article How to Become Your Own Security Champion In the last year, you may have heard the term “security champion” and wondered if this was a specific job or just another buzzword. In this article,…
Article An overview of the OWASP security champions playbook The OWASP Security Champions Playbook is a project that was initiated for the purpose of gearing up the OWASP Open Web Application Security Project…
Article Android hacking and security, part 2: Content provider leakage In the previous article, we discussed how an attacker exploits vulnerable Activity Components and ways to secure them. In this article, we will…
Article Nine Major Phishing Attacks of 2018 (and How to Spot Them) Phishing attacks are the most common type of cyberattack for good reason: because they work. If an attacker can convince you to click on a link in a…
Article Spam Filtering Cheat Sheet: 14 Ways to Reduce Spam What Is Spam? Spam is usually defined as irrelevant or unsolicited messages sent over the Internet, typically to a large number of users, for the…
Article What Is Protected Health Information (PHI)? Healthcare is a data-rich industry. These data are created across the entire healthcare ecosystem; they represent a wealth of information that can…
Article Spam or Phish? How to tell the difference between a marketing email and a malicious spam email Virtual crime is a side effect of the convenience of technology. With greater strides in technology making everything from banking to communication…
Article How a Data Protection Officer Will Benefit Your Organization In May of 2018, the European Union’s General Data Protection Regulation (GDPR) came into force. This wide-reaching law touches any company, no…
Article [FREE Training Resources] Posters, Infographics and more! Here at InfoSec Institute, we get pretty excited about events like National Cyber Security Awareness Month (NCSAM) and European Cyber Security Month…
Article What Should a Security Manager Know About US and UK Privacy Laws? George Bernard Shaw once said that the U.K. and U.S. were “two nations divided by a common language.” You can say a similar thing about security…
Article What Your Data Protection Officer Should Know About Privacy Requirements Data privacy suddenly got hot a few years ago when Edward Snowden made his revelations about the NSA snooping on U.S. citizens’ data. Since then,…
Article Do Security Managers Need an IAPP Certificate? You are probably looking into expanding your career in IT security, perhaps even aspiring to become a security manager, but you’re not sure about…
Article Why DevOps Need Penetration Testing When your goal is to innovate and deliver products and services at higher speed, security can be a bit of an afterthought. This is especially true…
Article Missed GDPR Deadline? 6 Steps You Need to Take Right Now Despite the recent mad dash to comply with European Union’s General Data Protection Regulation (GDPR), many organizations missed the May 25…
Article The IoT Security Skills Gap The Internet of Things (IoT) is changing the cybersecurity landscape. This shift in skills along with the already shortfall of IT workers is…
Article 15 Ways to Secure Your Business Wi-Fi Top 15 Business Wi-Fi Tips 1. Change the SSID This one might not sound like a big deal, but it can make it a lot harder for a would-be attacker to…
Article Security Awareness & Training for Small Business While it’s the attacks on well-known companies that make the headlines, the threat is just as worrying for small businesses. And the problem is made…
Article How to Use Biometrics in Logical Access Entry Introduction Biometrics is another security technology which is used to confirm the identity of an individual. The tools utilized can do this either…
Article CVE-2018-11776 RCE Flaw in Apache Struts Could Be Root Cause of Clamorous Hacks CVE-2018-11776 RCE in Apache Struts At the end of August, maintainers of Apache Struts released security updates for the Apache Struts 2 open-source…
Article Wakanda1 CTF walkthrough In this article, we will learn to solve a Capture the Flag (CTF) challenge which was posted on VulnHub by xMagass. According to the information…
Article GoldenEye 1: CTF walkthrough, part 1 In this article we will attempt a capture-the-flag (CTF) challenge called “GoldenEye 1.” This CTF was posted on VulnHub by the author Creosote. Per…
