Malware spotlight: What is rogue security software?

Remember before you became security-conscious? Or maybe you always have been — either way, you most likely have been faced with this scenario. You…

Cybersecurity Weekly: Competing bug bounties, Disney+ password reuse attack

Google offers up to $1.5 million for Pixel Titan M exploits in 2020. A hacker offers $100,000 for corporate secrets. Disney+ suffers a password…

MITRE ATT&CK vulnerability spotlight: Credentials in files

Introduction MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As part of its duties as an FFRDC, it…

Election security: Cybersecurity concerns for future elections

The election security landscape APTs like Cozy Bear have a history of interfering with major elections in the U.S. and other countries. With the…

MITRE ATT&CK vulnerability spotlight: Credentials in registry

Introduction MITRE is a U.S. government federally-funded research and development center (FFRDC). Its purpose is to act as a trusted third-party for…

7 research-backed tips to improve your security awareness training

We love talking to clients and security practitioners about what’s working at the ground level of their security awareness programs. However,…

Cybercrime certifications

Introduction Cybercrime is the fastest-growing type of crime in the U.S. That means the days of detectives in deerstalker caps are gone, and in…

Knowledge and Skills Related to Applied Cryptography and Cryptanalysis

Introduction to applied cryptography Cryptography is widely used in modern technology, particularly in software. The primary purpose of cryptography…

Hack the Box (HTB) machines walkthrough series — Celestial

Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…

Cybersecurity Weekly: Gas pump hidden cameras, insecure smart TVs, ransomware recovery

Hidden cameras found at gas station pumps in conjunction with card skimmers. The FBI warns consumers about security issues in smart TVs. The State…

Malware spotlight: What is a Remote Access Trojan (RAT)?

A Remote Access Trojan (RAT) is a type of malware that allows covert surveillance, a backdoor for administrative control and unfettered and…

Network traffic analysis for Incident Response (IR): TLS decryption

Introduction to TLS When the internet was being created, security wasn’t much of an issue. The internet (and the Arpanet before it) was primarily…

Network traffic analysis for IR: Data collection and monitoring

Data collection and analysis for use by network engineers, security professionals and incident response has only exploded over the years with the…

Top types of Business Email Compromise [BEC]

Infosec skills - Network traffic analysis for IR: DNS protocol with Wireshark

The Domain Name System (DNS) protocol was first defined in RFCs 1034 and 1035 but has been updated by many subsequent RFCs. A primary purpose of the…

Network traffic analysis for IR: FTP protocol with Wireshark

The File Transfer Protocol (FTP), as its name suggests, is designed for transferring files between computers. It is used for a variety of different…

MITRE ATT&CK: Drive-by compromise

Introduction In this article, we will discuss drive-by compromise attacks: exactly what they are and the different forms they can take. We will also…

Hack the Box (HTB) machines walkthrough series — Popcorn

Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…

Ethical hacking: Top 10 browser extensions for hacking

When it comes to ethical hacking, one of the critical skills you need to succeed is the usage of various tools to start your penetration testing…

Hack the Box (HTB) machines walkthrough series — Swagshop

Today we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine…

Cybersecurity Weekly: Ethiopia stops DDoS attack, Floridian city recovers from BEC, bug found in HackerOne

Ethiopia foils a mass cyber hacking attempt with prompt incident response. A city in Florida recovers almost all monetary losses after a BEC scam. A…

Hypertext transfer protocol (HTTP) with Wireshark

HTTP The Hypertext Transfer Protocol (HTTP) is the protocol that is used to request and serve web content. HTTP is a plaintext protocol that runs on…

Secure process audit

Introduction A secure process audit is a type of security audit in which the tester (auditor) tests the application or server or any network device…

Internet Relay Chat (IRC) protocol with Wireshark

Internet Relay Chat (IRC) uses a client-server model to provide a chatroom. A single IRC server is set up, and users connect to the server via IRC…