Article Japan’s IoT scanning project looks for vulnerable IoT devices The growing world of IoT — and security concerns The Internet of Things (IoT) is still a baby compared to other computing technologies, but the…
Article Source 1: VulnHub CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named darkstar7471. Per the…
Article How to avoid getting locked out of your own account with multi-factor authentication Multi-factor authentication (MFA) is one of the most popular authentication security solutions available to organizations today. It really comes as…
Article Open-source application security flaws: What you should know and how to spot them Introduction Open-source software helped to revolutionize the way that applications are built by professionals and enthusiasts alike. Being able to…
Article Typo 1: VulnHub CTF walkthrough (part 1) In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named Akanksha Sachin Verma.…
Article How to mitigate XSS Vulnerabilities Introduction: In the previous articles, we discussed what Cross Site Scripting vulnerabilities are, what causes Cross Site Scripting vulnerabilities…
Article How to exploit XSS Vulnerabilities Introduction: In the previous article, we discussed what XSS vulnerabilities are and what causes XSS vulnerabilities. This article provides an…
Article How to mitigate SQL Injection Vulnerabilities Introduction: In the previous articles, we discussed what SQL Injection vulnerabilities are and what causes SQL Injection vulnerabilities. This…
Article How to exploit SQL Injection Vulnerabilities Introduction: In the previous articles, we discussed what SQL Injection vulnerabilities are and what causes SQL Injection vulnerabilities. This…
Article How to mitigate Command Injection Vulnerabilities Introduction: In the previous articles of this series, we discussed various topics around Command Injection vulnerabilities. We began by…
Article Command Injection Vulnerabilities Exploitation Case Study Introduction: This article provides an overview of how command injection vulnerabilities can be identified and exploited. We will discuss two…
Article Command Injection Vulnerabilities Introduction: In the previous articles, we discussed what Command Injection vulnerabilities are and what causes command injection vulnerabilities.…
Article What Causes Command Injection Vulnerabilities? (How are Data and Code Handled in Execution Environments) Introduction: This article provides an overview of how command injection vulnerabilities occur and what are some of the causes for command injection…
Article Implementing a zero-trust model: The key to securing microservices Introduction Organizations are increasingly integrating microservices into their software development processes. As noted by DZone, microservices…
Article Cost of non-compliance: 8 largest data breach fines and penalties Different regulations and laws will slap organizations with fines and penalties for data breaches. This is because the organization did not take the…
Article How to mitigate CSRF Vulnerabilities Introduction: In the previous articles, we discussed what Cross Site Request Forgery vulnerabilities are and how one can detect and exploit them.…
Article Case Studies in Poor Password Management Introduction In essence, a password is a cryptographic secret that needs proper storage and management. Even for individual users this can be a…
Article Deanonymizing Tor using ML Standard Tor Traffic and Machine Learning /ML/ Unlike conventional non-Tor encrypted traffic that comes with openly visible destination attributes…
Article How to exploit CSRF Vulnerabilities Introduction In the previous article, we discussed what CSRF vulnerabilities are and what causes CSRF vulnerabilities. This article provides an…
Article 2020 Verizon data breach investigations report: Summary and key findings for security professionals The Verizon Data Breach Investigations Report, or the Verizon Data Breach Report, is an annual report intended for information security…
Article Brand impersonation attacks targeting SMB organizations Introduction Building and maintaining a brand is an important part of a successful business. Having a recognized brand confers recognition, and if…
Article Reactive vs. proactive security: Three benefits of a proactive cybersecurity strategy I’ve been writing cybersecurity articles for many years, and in that time, I have only seen increasingly complex security threats. Cybercriminals…
Article How to use the NICE Cybersecurity Workforce Framework to plan career progression: A practitioners’ guide Introduction: An overview of the NICE Cybersecurity Workforce Framework In 2017, the National Institute of Standards and Technology (NIST) published…
Article Typo 1: CTF walkthrough, part 2 Introduction In the previous article, Part 1 of this CTF, we were able to complete the following steps on the victim machine: Getting the target…
