Article Degree vs. certification: Entry-level penetration tester Introduction Have you ever wanted to use your cybersecurity know-how and skills to help organizations improve their information security and stamp…
Article Ethical hacking: Breaking windows passwords Windows is the most common desktop platform currently in use. As a result, it is not uncommon for hackers to encounter a Windows password that they…
Article Managing Updates and Patches in Windows 10 Introduction Updates and patches are vital to maintain information security standards on Windows systems. They include recent changes in the threat…
Article The difference between cross-site and server-side request forgery Cross-Site Request Forgery and Server-Side Request Forgery attacks have similar names, and both take advantage of how servers process URLs. However,…
Article Red Team operations: Best practices Introduction The goal of a Red Team assessment is for the Red Team to find as many vulnerabilities as possible within the customer’s current…
Article Degree vs. certification: Mid-level cybersecurity architect Introduction Those looking to combine top-flight cybersecurity skills and knowledge with information security design and building principles should…
Article Best open-source tools for Red Teaming Best open-source Red Team tools One of the best features of the cybersecurity community is the vast number of free and open-source tools that are…
Article Inside the Ryuk ransomware What is Ryuk? Ryuk is a ransomware sample that has been making the rounds recently. It is designed to be used in targeted attacks and has no ability…
Article Lessons learned: The Capital One breach The Capital One breach was accomplished by a former AWS employee who took advantage of a misconfigured firewall used by Capital One to protect their…
Article Best commercial tools for Red Teaming Introduction A variety of different free tools exist for Red Team operations, and, in many cases, a Red Team can get by just fine taking advantage…
Article Network traffic analysis for incident response Introduction Sophisticated cybercriminals understand the techniques and tools that they need to employ to move undetected throughout a victim…
Article Using certificates in Windows 10 Trust is one of the most important things that can be established between two parties. It is a process where both parties suspend their disbelief of…
Article Cybersecurity Weekly: Hacker reveals black market credit cards, Linux Sudo flaw discovered, RDP honeypot experiment An anonymous hacker reveals 30% of the stolen credit cards on the black market. A Sudo flaw has been discovered that allows all Linux users run…
Article Network traffic analysis for IR: Threat intelligence collection and analysis Introduction While any security professional can call themselves an analyst, the full scale and scope of the cyber-threat intelligence analyst is…
Article Red Team Operations: Presenting your findings The importance of the Red Team presentation At the end of the Red Team assessment, there are usually two main deliverables. The Red Team report…
Article Ethical hacking: Social engineering basics What is social engineering? In a nutshell, social engineering is the art of manipulation and misdirection. A social engineer’s goal is to do…
Article Mitigating security risk with continuous employee training and development Earlier this month, Infosec surveyed 180 IT and security pros about the challenges they face in developing and retaining their organization’s…
Article Traffic analysis for incident response (IR): How to use Wireshark for traffic analysis Traffic analysis is the process of monitoring network protocols and the data that streams through them within a network. In this article, we’ll…
Article Certifications compared: GSLC vs. CISM Management is an important part of many organizations and their composite departments, including information security/technology and cybersecurity.…
Article Cybersecurity training becoming more specialized, hands-on, says Jason Dion Cybersecurity training is getting even more hands-on and lab based, said Infosec Skills author Jason Dion. “It’s about ‘what can you do?’ as opposed…
Article Network traffic analysis for IR: Content deobfuscation Introduction to obfuscation Encoding and encryption techniques are used for a variety of purposes. Some of these are legitimate, like the use of…
Article Network traffic analysis for IR: Credential capture Introduction to leaked credentials The concept of leaked or breached credentials is nothing new, with data breaches occurring on a daily basis. Most…
Article Red Team Operations: Report structure and content What to report The first stage in building a Red Team report is knowing what to put in the report. Three of the most important things to discuss in…
Article Network traffic analysis for IR: Analyzing fileless malware Introduction to fileless malware Fileless malware is malware authors’ response to traditional malware identification and analysis techniques. Many…
