Article Russia and Ukraine: Information Warfare The Current Situation The fighting in Ukraine has escalated sharply since the elections on May 25th. President-elect Petro Poroshenko, backed by the…
Article What you must know about OS fingerprinting For those of us in the information technology field, there are two reasons why we should understand operating system fingerprinting. The first…
Article Domain Generation Algorithm (DGA) Introduction We all know there have been (and still is) a lot of malware lurking around the Internet. It's quite usual today that once the victims…
Article Data Access Governance: Security's Biggest Unaddressed To-Do If you are like me, there are many things you can check off your to-do list every day. However, if you are really like me, then there are some…
Article Network Time Protocol (NTP): Threats and countermeasures In this article I am going to illustrate how NTP is vulnerable to attacks like replay-delay attacks, MITM, and a very recent attack termed as NTP…
Article Extending Debuggers Sometimes we come across situations when we are in need of doing something inside our debuggers or to extend the functionality of them. For such…
Article Key Elements of an E-mail Retention Policy 1. What is an E-mail Retention Policy? Simply put, an e-mail retention policy/ERP is the process of keeping emails for compliance or business…
Article How Russia Controls the Internet Russia and Internet Freedom The Russian government is increasing its pressure on social media. Many experts maintain that the population is…
Article Why Passwords Won’t Die "What I would really love to be able to do is to kill the password dead," said White House cybersecurity coordinator Michael Daniel recently. A…
Article Root detection and evasion In this article, we will look at the techniques being used by Android developers to detect if a device on which the app is running is rooted or not.…
Article Islamic State of Iraq and Syria (ISIS) a Global Threat: Analysis of the Effects on Cyberspace of the Iraqi Situation What is ISIS and why it is menacing the world? The Islamic State of Iraq and Syria and Islamic State of Iraq and al-Sham, also known as ISIS, is an…
Article Insecure local storage: Shared preferences In the previous article, we discussed the common techniques of how application developers check for a rooted device and then how an attacker can…
Article Data loss prevention (DLP) strategy guide In this article, we'll learn about the concept of data loss prevention: why it is needed, what are the different types of DLP and its modes of…
Article Advanced sqlmap sqlmap is an attack tool which can be effectively used to perform SQL injection attacks and post exploitation acts. It is a versatile tool when it…
Article Windows Cryptography API Microsoft Windows provides a sleek API for cryptographic purposes. It is a generic interface for accessing cryptographic services provided by…
Article Honey Encryption Current Scenario In today's world, cyber criminals often use software to brute force passwords, and some may lead to successful attacks. Since there…
Article DragonFly, Cosmic Duke and Pitty Tiger: From State-Sponsored Espionage to Campaign of Independent APTs Introduction Cyber espionage is one of the most aggressive cyber threats for private companies and government entities. In recent years, the number…
Article Computer Forensics with P2 Commander Introduction Computer Forensics is the methodical series of procedures and techniques used for procuring evidence from computer systems and storage…
Article File integrity monitoring (FIM) and PCI-DSS In this article, we will learn about the requirement of file integrity monitoring in PCI-DSS (Payment Card Industry Data Security Standard). If we…
Article Configuring the ModSecurity Firewall with OWASP Rules In today's world, over 70% of all attacks carried out over are done so at the web application level, so we need to implement security at multiple…
Article Explaining cyberterrorism Introduction People feel endangered by cyberterrorists, and this topic has raised an alarm in many societies. Many experts in the IT field and many…
Article Pafish (Paranoid Fish) Introduction In this tutorial we'll take a look at a Pafish tool, which performs anti debugger/vm/sandbox tricks to detect whether the malware is…
Article Padding oracle attack Firstly, this vulnerability is not related to the Oracle database or the Oracle Company in any way. In cryptography, an 'oracle' is a system that…
Article How cybercrime exploits digital certificates What is a digital certificate? The digital certificate is a critical component of a public key infrastructure. It is an electronic document that…
