Article Acceptable Use Policy Template for User Level Passwords As technology radically shapes the working environment of users across the globe, we are also responsible for keeping up with the security trends to…
Article Online Defamation Cases - Part I Introduction We all know how important it is nowadays to have a clean online record, almost as important as having no previous criminal offences.…
Article Online Defamation Cases - Part II Introduction We all know how important it is nowadays to have a clean online record, almost as important as having no previous criminal offences.…
Article How to Test the Security of IoT Smart Devices Just when we thought we had our applications secured, they pull us back in. No, this isn't a case of directory traversal bugs reappearing in IIS,…
Article StingRay Technology: How Government Tracks Cellular Devices StingRay Technology StingRay is an IMSI-catcher (International Mobile Subscriber Identity) designed and commercialized by the Harris Corporation.…
Article What Apple Knows about Us Introduction Every day, we share information about us or what we do on the Internet, and our information is targeted by multinational companies in…
Article All about AGDLP group scope for active directory - account, global, domain local, permissions Lately I've gotten a few questions from prospective clients about AD security group scope. I wanted to take a minute to give an overview of what…
Article Malware Threat Assessment Template for Financial Institutions Financial institutions conducting online brokerage, alternative payments, Internet banking and other similar activities have been facing a growing…
Article Understanding Disk Encryption on Android and iOS Introduction Mobile devices these days handle lots of sensitive information – messages, photos, contacts and more. The question about how this data…
Article The dos and don’ts of sharing sensitive business data All businesses handle sensitive data of one kind or another. Whether this is confidential client information, financial details, or even employee…
Article The Windows Kerberos Vulnerability: What You Need to Know A mythological three-headed dog was supposed to guard the gates of Redmond. But it turns out that Kerberos was very poorly implemented in numerous…
Article Penetration Testing Methodology for Web Applications Establishing a penetration testing methodology is becoming increasingly important when considering data security in web applications. The more we…
Article Foreign Hackers Constantly Target US Critical Infrastructure US critical infrastructure under attack US authorities are warning companies operating in every industry of a significant increase in the number of…
Article Android Application hacking with Insecure Bank Part 1 In this article series, we will learn at the various concepts of Android application security while exploiting a vulnerable app InsecureBankv2. We…
Article Aggressive Chinese IP Highlights Attribution Issues Recently, the Norse DarkWolf Labs noted that the IP address 218.77.79.43 had jumped into the top quadrant for malicious activity. Investigation into…
Article Simple yet Effective Methods to Solve Java Security Issues It is true that Java cannot take credit in being among the safest options to use online, due to the vulnerabilities that emerge within its…
Article Regin: State-Sponsored Malware or Cybercrime? Regin, a highly advanced spying tool A few weeks ago, Symantec security firm published the results of its investigation on the backdoor Regin, a…
Article Examining Android App Specific Data on Non-Rooted Devices In all of our previous articles so far in this series, we discussed all the examples only on rooted devices and emulators. Generally, there are…
Article A physical security policy can save your company thousands of dollars Investments in cybersecurity and physical security are proportionally connected to your organization's improved financial picture for a long-term…
Article WebSocket security issues In this article, we will dive into the concept of WebSocket introduced in HTML 5, security issues around the WebSocket model, and the best practices…
Article Avoiding mod security false positives with white-listing We have already discussed in my previous articles how to configure Mod Security Firewall with OWASP rules and also analysed the different types of…
Article How to Stop DNS Hijacking You have (probably more than once in your life) keyed in a familiar domain name and ended up in an entirely different page that was not even close…
Article Privacy risks of beacons On October 6th 2014, buzzfeed.com published a report stating that Titan, a company controlling a number of New York City's phone booth advertising…
Article Cyber attack on Sony Pictures is much more than a data breach - updated Sony Pictures corporate network compromised by a major cyber attack At the end of November, computer systems at the corporate network of Sony…
