Article Integer overflow and underflow vulnerabilities Integer overflow and underflow vulnerabilities are considered the eighth most dangerous vulnerability in the Common Weakness Enumeration (CWE) Top…
Article Ethical hacking: SNMP recon In this article, we will discuss the various methods of ethical hacking one could take to perform reconnaissance on the SNMP protocol. As you may…
Article AI and machine learning and their uses in cybersecurity Artificial intelligence and machine learning trends Although artificial intelligence and its subfield of machine learning have been applied in…
Article Networking Basics for Reverse Engineers Introduction This article will define network reverse engineering, list tools used by reverse engineers for reverse engineering and then highlight…
Article Logical instructions in x86 This article defines logical instructions as executed by x86 processors. It goes on to describe four key classifications of logical instructions in…
Article Cryptography careers and IoT vulnerabilities with Ted Shorter In this episode of Infosec’s Cyber Work podcast series, host Chris Sienko speaks with Ted Shorter. Ted is co-founder and CTO of Keyfactor, a…
Article The state of threats to electric entities: 4 key findings from the 2020 Dragos report Introduction In January 2020, industrial cybersecurity firm Dragos released the North American Electric Cyber Threat Perspective, referred to as the…
Article Hack the Box (HTB) machines walkthrough series — JSON Today we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine…
Article AI for intrusion detection: Conquering the unknown unknowns An anomaly detection component, which allows detection of previously unknown behavior, is an essential and forward-looking solution to intrusion…
Article Web server security: Command line-fu for web server protection Introduction Adequate web server security requires proper understanding, implementation and use of a variety of different tools. In this article, we…
Article Hack the Box (HTB) machines walkthrough series — Postman Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Cybersecurity Weekly: LokiBot spearphish, Marriott breach, Zoom vulnerability A spearphishing campaign exploits COVID-19 to spread Lokibot infostealer. Marriott suffers a second breach, exposing data of 5.2 million hotel…
Article Network traffic analysis for IR: Data exfiltration Introduction Understanding network behavior is a prerequisite for developing effective incident detection and response capabilities. ESG research…
Article Web server protection: Web application firewalls for web server protection Introduction Firewalls are an integral part of the tools necessary in securing web servers. In this article, we will discuss all relevant aspects of…
Article Cybersecurity reporting and closing the skills gap with Dark Reading's Kelly Sheridan The need for talented cybersecurity professionals is on the rise, but a huge amount of job postings go unfilled. Why is that? Cybersecurity is in…
Article Web server security: Infrastructure components Introduction Cybercriminals understand that your website is not only the face of your organization, but often also its weakest link. With just one…
Article How to work with HR or recruiters to improve your cybersecurity hiring strategy Is there a talent gap in your organization? With the IT security industry’s skills shortage and the high demand for advanced cybersecurity pros,…
Article Malware spotlight: Sodinokibi Introduction Ransomware is not new at this point in time and will be with us for the foreseeable future, as new types of ransomware are constantly…
Article Information security auditor certifications Introduction For those with a passion for information security and a mind for auditing, the role of information security auditor is tailor-made. Not…
Article CTF walkthrough - Five86: 2 In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub. As you may know from previous articles,…
Article Network forensics overview Most attacks move through the network before hitting the target and they leave some trace. According to Locard’s exchange principle, “every contact…
Article Overview of phishing techniques: Order/delivery notifications Introduction One thing no one can deny is that online shopping is a common practice these days. With this, of course, comes order notifications and…
Article Ethical hacking: TCP/IP for hackers In this article, we’ll discuss TCP/IP: the importance of mastering it and how this mastery can be beneficial to hackers. We will then look at how…
Article Cybersecurity Weekly: Travelex pays ransom, Maze hacks HMR, Microsoft buys corp.com Travelex paid $2.3 million ransom to restore operations after a ransomware attack. The Maze ransomware gang discloses data from drug testing firm…
