Article Browser Forensics: IE 11 Browsers have become an inherent part of our virtual life and we all make use of browsers for surfing the internet in some or the other way. Also,…
Article Blockchain: Beyond the basics Beyond the basic blockchain The core blockchain protocol implements a distributed ledger capable of performing cryptocurrency transfers. Smart…
Article NY SHIELD Act: Security awareness and training requirements for New York businesses Introduction The world of data protection and privacy regulations has brought us many laws and acts. The most commonly cited are the EU’s General…
Article How to spot a malicious browser extension Let’s not kid ourselves — the experience of surfing the web wouldn’t be the same without extensions. Browser extensions make it possible to block…
Article Capture the flag: A walkthrough of SunCSR’s Geisha Introduction Welcome to my write-up for the Geisha machine from VulnHub. This is a beginner- to intermediate-level, intentionally vulnerable virtual…
Article Introduction to printing and format strings This article provides an overview of how printing functions work and how format strings are used to format the data being printed. Developers often…
Article How to exploit format string vulnerabilities In the previous articles, we discussed printing functions, format strings and format string vulnerabilities. This article provides an overview of…
Article 21 free training resources for Cybersecurity Awareness Month (NCSAM 2020) October is Cybersecurity Awareness Month — your best opportunity to jumpstart security awareness at your organization and highlight the importance…
Article Format String Vulnerabilities Exploitation Case Study Introduction: In the previous article of this series, we discussed how format string vulnerabilities can be exploited. This article provides a case…
Article Security theatrics or strategy? Optimizing security budget efficiency and effectiveness Introduction I am a staunch advocate of the consideration of human behavior in cybersecurity threat mitigation. The discipline of behavioral ecology…
Article Top 5 ways ransomware is delivered and deployed If your computer has not yet been affected by ransomware, odds are it could soon be. With ransom payments averaging more than $80,000 in Q4 2019,…
Article How to mitigate Format String Vulnerabilities Introduction: This article provides an overview of various techniques that can be used to mitigate Format String vulnerabilities. In addition to the…
Article IoT Security Fundamentals: Intercepting and Manipulating Wireless Communications Introduction: IoT Manufacturers Favor Convenience over Security Because IoT security is still an afterthought, cybercriminals in general consider…
Article Linux vulnerabilities: How unpatched servers lead to persistent backdoors Vulnerability management is a challenge Humans make mistakes, software has bugs and some of these bugs are exploitable vulnerabilities. The…
Article 8 of the world's biggest insider threat security incidents Introduction If you work in security or are just interested in the general area of cybersecurity you will no doubt have heard of the dreaded insider…
Article Cybersecurity Weekly: Ransomware casualty, Google App Engine phish, SecOps struggling A patient dies after ransomware attack paralyzes German hospital systems. Google’s App Engine feature was abused to create phishing pages. SecOps…
Article DoD 8570 IAT certification and requirements [updated 2020] The US Department of Defense (DoD) hosts a number of directives that set out the requirements of their workforce. DoD 8570, titled “Information…
Article Endpoint hardening (best practices) Endpoint hardening: If you were to tell the average person that you were going to be performing this task for your organization, they'd probably ask…
Article Encryption vs Encoding Encryption and decryption Encryption is the process of converting plaintext to encrypted text. Since encrypted text cannot be read by anyone,…
Article The OSI model and TCP/IP model What is the OSI model? The OSI model was the primary standard model for network communications, adopted by all major telecommunication companies and…
Article 8 best WordPress security plugins Over a third of websites (37%) are hosted on WordPress, making it the world’s most popular content management system (CMS). This includes everything…
Article IoT security fundamentals: IoT vs OT (Operational Technology) Introduction: Knowing the Notions Industrial Internet of Things (IIoT) incorporates technologies such as machine learning, machine-to-machine (M2M)…
Article Zero-day Sophos XG firewall vulnerability: an exploit guide for pentesters The Sophos XG firewall vulnerability The Sophos XG Firewall recently had a publicly-reported zero-day vulnerability. The vulnerability in question…
Article How to verify and respond to vulnerability reports from security researchers Introduction Part of doing business in today’s increasingly cyber-world is dealing with security vulnerabilities and bugs that come up along the…
