Article Microsoft’s Project OneFuzz Framework with Azure: Overview and concerns In September 2020, the Microsoft Security Team announced that Microsoft’s new open-source fuzzing platform, Project OneFuzz, was available as an…
Article Web Browser Security in Windows 10 Web Browser Security Windows 10 browser security is a constantly evolving and update process. Data security in Windows 10 starts with a high…
Article Phishing with Google Forms, Firebase and Docs: Detection and prevention The COVID-19 pandemic spurred a massive shift toward telework as companies tried to both stay operational and safe. One of the biggest impacts of…
Article Application sideloading in Windows 10 Application Sideloading Windows 10 security is a constantly evolving and update process. Data security in Windows 10 starts with a high encryption,…
Article Presidential: 1 CTF walkthrough part 1 Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article CGEIT certification exam: overview of domains [Updated 2021] Introduction When it comes to IT governance, organizations hope to find professionals who can help ensure their operations adhere to specific…
Article Exploiting NFS share [updated 2021] Recently, while performing a network-level penetration testing activity for one of the clients, I came across a vulnerability which was used to…
Article Infosec Skills Author Jason Welsh shares his passion for Linux and Cybersecurity Infosec Skills author Jason Welsh on his passion for Linux
Article Introduction to Public Key Infrastructure (PKI) Public Key Infrastructure (PKI) Public Key Infrastructure (PKI) uses mathematical structures and operators. Cryptography and cryptanalysis functions…
Article Methods for attacking full disk encryption Full disk encryption is part of cryptography that uses mathematical structures and operators. Cryptography and cryptanalysis functions are used in…
Article IDS/IPS overview A typical corporate network makes use of a number of networking devices for preventing attacks originating from the internet and maintaining the…
Article SonicWall firewall VPN vulnerability (CVE-2020-5135): Overview and technical walkthrough A critical stack-based buffer overflow vulnerability was discovered in SonicWall Network Security Appliance (NSA) VPN. In this article, we will…
Article How to reserve a CVE: From vulnerability discovery to disclosure What is a CVE? A CVE, meaning Common Vulnerabilities and Exposure, is a publicly reported vulnerability in software products. Vulnerabilities are…
Article Key findings from ESG’s Modern Application Development Security report A deep dive into security issues In August 2020, the Enterprise Strategy Group (ESG) published its report, “Modern Application Development…
Article ELECTION: 1 VulnHub CTF walkthrough Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article Cybersecurity Weekly: Phishing attacks spike, SHAREit patch, NSA exploit Malformed URL prefix phishing attacks spike 6,000%. SHAREit fixes security bugs in their app with one billion downloads. Hackers used an NSA exploit…
Article Stacks and Heap Memory is a crucial resource for any system when conducting reverse engineering. Malware analysts must understand the way memory is assigned to a…
Article Hack the Box [HTB] machines walkthrough CTF series — Omni Hack the Box (HTB) is an excellent platform that hosts machines belonging to multiple operating systems. Individuals have to solve the puzzle…
Article What types of cybersecurity skills can you learn in a cyber range? What is a cyber range? A cyber range is an environment designed to provide hands-on learning for cybersecurity concepts. This typically involves a…
Article Basic snort rules syntax and usage [updated 2021] In this series of lab exercises, we will demonstrate various techniques in writing Snort rules, from basic rules syntax to writing rules aimed at…
Article Cyber ranges: Who are they for and how can they help Why do you need hands-on training? The field of cybersecurity has a number of great books and references. Whether general overviews, deep dives into…
Article Cybersecurity weekly: SolarWinds blames intern, AOL phishing scam, Kia ransomware attack SolarWinds blames an intern for the weak password that led to a cyberattack. An AOL phishing email states your account will be closed. Kia Motors…
Article Dumping a complete database using SQL injection [updated 2021] What is SQL injection? SQL Injection is a web-based attack used by hackers to steal sensitive information from organizations through web…
Article Ghimob Trojan Banker: What it is, how it works and how to prevent it | Malware spotlight Introduction Malware is a popular term used to classify software with bad proposes that is part of our lives these days. Ghimob Trojan Banker is one…
