Article Attacking Web Applications With Python: Recommended Tools Python is a powerful scripting language and it is used in developing several real world tools that are heavily used by security professionals. This…
Article Email-based attacks with Python: Phishing, email bombing and more The ability to send emails using an automated software tool such a python script can be useful in performing mass email based phishing attacks. This…
Article Cybersecurity Weekly: New SolarWinds backdoor found, affects Microsoft and VMWare A new SUPERNOVA backdoor found in SolarWinds cyberattack analysis. Microsoft says its systems were also breached in the SolarWinds hack. VMware is…
Article Top 6 JavaScript plugin security risks Introduction If you're on the web for more than about two hours, there's a good chance that you'll hear someone use the word “analytics.” This does…
Article Comparing endpoint security: EPP vs. EDR vs. XDR What are EDR, EPP and XDR? What is EDR? Endpoint detection and response is a type of security solution that provides real-time visibility into…
Article SO SIMPLE 1: CTF walkthrough In this article, we will solve a capture the flag (CTF) challenge that was posted on the VulnHub website by an author named Roel. As per the…
Article MITRE Shield: An active defense and adversary engagement knowledge base Introduction When it comes to collecting tips, tricks and workarounds, it is easy to see quickly that certain concepts and methods are strong…
Article What is a vulnerability disclosure policy (VDP)? Introduction The vulnerability disclosure policy, or VDP, may be a term that you have heard thrown around at work, in an elevator, at an event and…
Article Phishing domain lawsuits and the Computer Fraud and Abuse Act Introduction The worlds of trademark law and marketing seem to be constantly at odds with each other, occasionally collapsing into a court of law…
Article Cybersecurity Predictions For 2021 Here we are again for the annual predictions of the trends and events that will impact the cybersecurity landscape in 2021. Let’s try to predict…
Article What is the difference between the NICE framework and DoDD 8140/8570? For those looking into government work, or for those just plain interested in the different cybersecurity frameworks out there, have probably…
Article Drovorub malware: What it is, how it works and how to prevent it | Malware spotlight Introduction Malware is a threat that has increased exponentially in the last few years, with many sophisticated threads impacting citizens,…
Article Cybersecurity Weekly: Ledger account leak, SUPERNOVA malware, Citrix NetScaler attacks Physical addresses of 270,000 Ledger owners were leaked on a hacker forum. A new SolarWinds flaw likely let hackers install SUPERNOVA malware.…
Article What senior citizens need to know about security awareness Introduction As a result of the coronavirus pandemic, many older adults sought out new technologies. Whether as a means to connect with friends or…
Article Arrays, Structs and Linked Lists Reverse engineering is the practice of analyzing a software system, either in whole or in part, to extract design and implementation information 1.…
Article Software vulnerability patching best practices: Patch everything, even if vendors downplay risks Software vulnerability continues to be a challenging cybersecurity risk. Cybercriminals are able to seize on these vulnerabilities and breach…
Article Hack the Box (HTB) machines walkthrough series — Node Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Storytelling in cybersecurity: The impact of a great story (with Sarah Moffatt) “It's not people, armies, gold or flags that unites people; it's stories. There's nothing more powerful in the world than a good story.” The power…
Article How to exploit race conditions Race conditions vulnerabilities can exist in applications that contain parallel processing. These vulnerabilities exist if multiple threads of…
Article Average chief security officer salary [updated 2021] The role of a chief security officer is one that combines management with a deep understanding of information technology and data protection. A…
Article Cybersecurity Weekly: Paypal phishing texts, Facebook ad phishing, T-Mobile data breach PayPal phishing texts state users accounts are limited. Facebook ads are being used to steal 615,000+ credentials in a phishing campaign. T-Mobile…
Article Improving web application security with purple teams What is the purple team in cyber security? The cybersecurity industry - and especially the area of security assessments - is very fond of…
Article NSA report: Indicators of compromise on personal networks Introduction The advent of the novel coronavirus pandemic has brought with it a sharp rise in the number of government workers that work telework,…
Article Rethinking the human factor in security awareness Moving employees from a “have-to” to a “want-to” mindset As organizations begin to understand that security is everyone’s understanding,…
