Article Cybersecurity Weekly: California school ransomware, Office Sway phishing campaign, SNAKE ransomware A ransomware attack causes a California school district to teach with pen and paper for the week. A new phishing campaign is hosting landing pages…
Article Ethical hacking: How to hack a web server When practicing ethical hacking, a hacker is searching for vulnerabilities. An ethical hacker has several reasons to try gaining unauthorized…
Article Network traffic analysis for IR: TCP protocol with Wireshark The Transmission Control Protocol (TCP) is one of the most commonly-used protocols on the internet. Unlike the User Datagram Protocol (UDP), TCP is…
Article Why microlearning works: A security awareness perspective In this post, we’ll explore microlearning techniques, how you can use it to achieve your training goals and what it means for one of the most…
Article Malware obfuscation, encoding and encryption Malware is complex and meant to confuse. Many computer users think malware is just another word for “virus” when a virus is actually a type of…
Article MITRE ATT&CK: External remote service Introduction If you would have told the average person fifty years ago that in the future people would be able to view what you are doing on a…
Article Network traffic analysis for IR: UDP with Wireshark The User Datagram Protocol (UDP) is one of the two main protocols that sits between the Internet Protocol (IP) layer and higher-level, specialized…
Article MITRE ATT&CK: Shortcut modification Introduction Most people love shortcuts — they make things faster and easier. This common passion is behind a lot of the conveniences we experience…
Article Cyber Work: How to become a Chief Information Security Officer Introduction In this episode of Infosec’s cybersecurity podcast series Cyber Work, host Chris Sienko talks with Joshua Knight, cybersecurity…
Article PayPal credential phishing with an even bigger hook With the increased adoption of multi-factor authentication, login credentials alone may not be enough for scammers to gain the access or information…
Article MITRE ATT&CK: Supply chain compromise Introduction Attackers are well known to install malicious software, or malware, onto compromised systems during a cyberattack. But what many may…
Article NIST CSF core functions: Detect The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide guidance for…
Article Cybersecurity Weekly: Citrix backdoor, Amazon data leak, Equifax to spend on data security Hackers patch Citrix servers to deploy their own backdoor. Amazon fires employees for leaking customer data. Equifax commits to spending $1 billion…
Article Malware spotlight: Wabbit Introduction Beginnings are often steeped in myth, legend and a good helping of storytelling, with malware being no exception to this rule. Way back…
Article MITRE ATT&CK: Disk structure wipe Introduction Denying the availability of systems and resources of an attack target is a main objective of many real-world attack campaigns. If you…
Article The user experience of security Introduction Back in the 1990s, when you mentioned cybersecurity to anyone, a glazed look would come over their face. And fair enough. Security, as…
Article MITRE ATT&CK: Disk content wipe Introduction Classic moves, no matter what the subject matter is, are timeless. Be it the hook shot in basketball, the uppercut in boxing or the…
Article Cybersecurity Weekly: Jeff Bezos hacked, DDoS mitigation firm admits to DDoS, TrickBot steals AD credentials Saudi prince allegedly hacked Jeff Bezos using WhatsApp. The founder of a DDoS mitigation firm admits to launching DDoS attacks. TrickBot now steals…
Article Wireshark for incident response 101 Wireshark is a freely available tool for network traffic analysis. It can be used to either analyze saved packet capture files or perform live…
Article Malware spotlight: EvilGnome Introduction The name EvilGnome may conjure images of a malicious creature of folklore. Instead, this name actually refers to an emerging type of…
Article Cybercrime investigator resume tips Get valuable tips for crafting an effective cybercrime investigator resume and increase your chances of landing your desired job in the field.
Article Network traffic analysis for IR: Analyzing DDoS attacks Introduction Distributed Denial-of-Service (DDoS) attacks are one of the powerful cyber weapons threat actors use today. We often hear about a…
Article Network traffic analysis for IR: SSH protocol with Wireshark SSH protocol The Secure Shell (SSH) is designed to allow confidential and authenticated remote access to a computer. Like the Telnet protocol, it…
Article Malware spotlight: Droppers There’s a cloud of confusion around droppers. Often seen as a sort of helper program in a cyberattack, droppers are actually a type of malware that…
