Article Cross-Site Scripting (XSS) Vulnerabilities XSS: The most commonly exploited vulnerability Cross-site scripting (XSS) is one of the most common and well-known vulnerabilities contained within…
Article Fuzzing, security testing and tips for a career in AppSec In this episode of Infosec’s Cyber Work Podcast, host Chris Sienko welcomes back previous guest Dr. Jared DeMott. In the previous episode, the topic…
Article Hack the Box (HTB) machines walkthrough series — Nest, part 1 Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Cross-Site Request Forgery (CSRF) Vulnerabilities Introduction to cookies and user authentication Cross-site request forgery (CSRF) vulnerabilities are designed to take actions on a website on…
Article How to use Assigned Access in Windows 10 What is Assigned Access? Suppose you would like a user to use only one application on Windows OS. If this is a requirement, then the first thing…
Article Configuring DNS in AWS Introduction The Domain Name System (DNS) is necessary for routing traffic across the internet. It accomplishes this task by converting easily…
Article Windows Supported wireless encryption types Introduction We all want to keep our wireless network secure, to keep our personal data and information safe, don't we? Fortunately, Windows…
Article How to use Radare2 for reverse engineering This article defines reverse-engineering as it is used in the analysis of software. We will explain in detail how to use radare2 for reverse…
Article App isolation in Windows 10 What is app isolation in Windows 10? Suppose you want to install and run a new program on Windows but you think it may be risky and may harm your…
Article Data Loss Protection (DLP) for ICS/SCADA Introduction Data loss prevention (DLP) is a strategy that seeks to avoid the deletion, corruption or leakage of confidential or proprietary data…
Article Bypassing security products via DNS data exfiltration Criminals are using different strategies to compromise computer networks, infrastructures and organizations. Cyber incidents have increased in…
Article RTS threshold configuration for improved wireless network performance [updated 2020] In a scenario where a lot of users connect to a wireless network and where they occasionally lose their connections, an individual or a company can…
Article Hack the Box (HTB) machines walkthrough series — Nest, part 2 Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Work-from-home network traffic spikes: Are your employees vulnerable? A shift to work-from-home culture Social distancing during the COVID-19 pandemic has forced employees to work from home, and many businesses were…
Article Network design: Firewall, IDS/IPS There are many different types of devices and mechanisms within the security environment to provide a layered approach of defense. This is so that…
Article Cybersecurity Weekly: Industrial VPN flaws, Zoom bug, New side-channel attacks Industrial VPN flaws let attackers target critical infrastructures. A new Zoom bug allowed snoopers to crack private meeting passwords in minutes. A…
Article Lab: Hacking an android device with MSFvenom [updated 2020] In this lab, we are going to learn how you can hack an android mobile device using MSFvenom and the Metasploit framework. We will use MSFvenom for…
Article Tesla Model 3 vulnerability: What you need to know about the web browser bug Introduction In 2020, Jacob Archuleta, a researcher nicknamed Nullze, discovered an important information security vulnerability on the web browser…
Article Cyber Work Podcast recap: What does a military forensics and incident responder do? Introduction Cybersecurity meets CSI in the exciting field of digital forensics and incident response. In this role, tech-savvy investigators sift…
Article The most common social engineering attacks [updated 2020] What's the easiest way into a locked system? Ask someone for the key. Here are the most common social engineering attacks targeting employees.
Article Capture the flag: A walkthrough of SunCSR’s Sumo Introduction Welcome to my write-up for the Sumo machine from VulnHub. This is a beginner-level, intentionally vulnerable virtual machine created…
Article Securing cookies with httponly and secure flags [updated 2020] Securing cookies is an important subject. Think about an authentication cookie. When the attacker is able to grab this cookie, he can impersonate…
Article Hack the Box (HTB) machines walkthrough series — ServMon Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Top 10 highest-paying jobs in information security It's a good time to be in the security field. The shortage of talent to fill those jobs motivates employers to offer top salaries to candidates.
