Article Decrypting SSL/TLS traffic with Wireshark [updated 2021] The internet wasn’t designed to be secure from the start. Many protocols (such as HTTP and DNS) were designed to serve their purpose of conveying…
Article Purple team cyber ranges: Hands-on training for red and blue teams Businesses are always adapting and innovating when it comes to cybersecurity. While the use of layered defenses and red and blue teams used to be…
Article How To Earn CGEIT CPE Credits [updated 2021] Introduction Earning Continuing Professional Education (CPE) credits is mandatory to keep your CGEIT certification active and alive. CPE policy is…
Article AWS APIs abuse: Watch out for these vulnerable APIs In December 2020, Unit 42 researchers at Palo Alto Networks discovered a class of AWS application programming interfaces (APIs) that can be abused…
Article Elliptic curve cryptography As its name suggests, elliptic curve cryptography (ECC) uses elliptic curves (like the one shown below) to build cryptographic algorithms. Because…
Article IT auditing and controls: A look at application controls [updated 2021] Portions of this article, including many of the definitions and terminology, have been sourced and summarized from ISACA.org and course materials…
Article Security of the PKI ecosystem Public Key Infrastructure (PKI) is the backbone of trust for many systems on the Internet. One of the most common uses of PKI is the HTTPS protocol,…
Article BlackBerry exposes threat actor group BAHAMUT: Cyberespionage, phishing and other APTs What do cybercrime, fake news, the Middle East/South Asia and a dragon from the Final Fantasy or the Dungeons & Dragons series all have in common?…
Article Blockchain and asymmetric cryptography Blockchain technology makes it possible to solve business problems in ways that were previously impossible. A major enabler of this is the…
Article A school district's guide for Education Law §2-d compliance During the 2014-2105 fiscal year, the New York State Education Department enacted Education Law §2-d, which includes a series of provisions designed…
Article Blockchain and hash functions Hash functions are cryptographic algorithms designed to protect the integrity of data. Hash functions have a few useful properties, including:…
Article Top 8 Microsoft Teams security issues Due to the COVID-19 pandemic and remote work, there has been an increase in the use of collaboration tools such as Microsoft Teams, Zoom and Google…
Article Entropy calculations Entropy is a measure of the randomness in a system. The more random the system, the less predictable it is and the higher its entropy. [pkadzone…
Article Breaking misused stream ciphers Encryption algorithms can be classified in a couple of different ways. A top-level distinction is between symmetric encryption algorithms (which use…
Article Most common MITRE ATT&CK tactics and techniques: CISA shares most common RVAs Introduction CISA has released a list of Risk and Vulnerability Assessments, or RVAs, to the MITRE ATT&CK Framework and have released their findings…
Article Commercial off-the-shelf IoT system solutions: A risk assessment The rise of the Internet of Things (IoT) The Internet of Things (IoT) is growing rapidly. IoT devices provide convenience and can be a more…
Article Introduction to container security Containers are becoming the new normal to deploy software applications and many organizations are embracing container technologies at a great speed.…
Article Securing containers using Docker isolation In the previous article, we discussed an overview of common container security misconfigurations such as mounting docker.sock, use of root users…
Article Building container images using Dockerfile best practices Docker images are built by writing all the build instructions in a configuration file named Dockerfile. Once an image is built using this…
Article Worst passwords of the decade: A historical analysis Cybersecurity breaches are on the rise, so it’s perplexing that so many people continue to use the same basic passwords. Perhaps it’s the exhaustion…
Article Hack the Box (HTB) machines walkthrough series — Teacher Hack the Box (HTB) is an excellent platform that hosts machines belonging to multiple operating systems. Individuals have to solve the puzzle…
Article Common container misconfigurations and how to prevent them Docker is a containerization software that comes with a great set of features that make it easy to build and run containers. With the great features…
Article Top 4 Zapier security risks Zapier is a platform that allows you to integrate web apps across an organization. It can make fast work of data from various web applications;…
Article How Docker primitives secure container environments Docker makes heavy use of Linux kernel features. One of the fundamental aspects that containers make use of from Linux Kernel are namespaces and…
