Article The 6 Latest Phishing Emails to Avoid in 2018 Despite increased user awareness, phishing remains one of the biggest security threats to the enterprise. Of 1,450 data breach incidents in 2017,…
Article Threat Hunting for Mismatched Port – Application Traffic Indicators of compromise or IOCs are evidence indicating a breach of security. IOC includes virus signature, IP address, Hash value of Malware, Malici
Article Anti-phishing training vs. software: Does security awareness training work? Due to the increasing advances in today's technology, endpoint protection, and security software solutions are becoming even better at protecting…
Article The phishing response playbook As we know, phishing remains one of the most well-known forms of social engineering. Although this form of threat has been in existence for a long…
Article How to Detect and Prevent Direct Deposit Phishing Scams The same digital revolution that's ushered in an era of business innovation has been as much of a boon for the enterprising criminal set. Moreover,…
Article Security awareness, training, and education Learning is a continuum: it starts with awareness, builds to training, and evolves into education. We can use the definitions provided by NIST for…
Article WordPress Phishing Scams: What Every User Needs to Know WordPress powers 30% of the web and is by far the largest content management system (CMS). It's easy-to-use and has fans that range from regular…
Article How to Detect and Prevent Secure Document Phishing Attacks Secure document phishing attacks are some of the latest in client endpoint exploits that have been plaguing the computing world. While these…
Article International Association of Privacy Professionals (IAPP): Certification overview Learn about the IAPP, the different privacy certifications they offer and how they can help your career.
Article What is DoD 8570? Department of Defense Directive 8570, or DoDD 8570 provides guidance and procedures for the training, certification, and management of all…
Article How to achieve DoD 8570 IAT level I compliance Best practices for achieving DoD 8570 IAT level I compliance
Article How to Achieve DoD 8570 IAM Level III Compliance A definitive guide to achieving DoD 8570 IAM Level III Compliance
Article The DoD IAT level 2 The DoD IAT level 2 overview The Department of Defense (DoD) Directive 8570 can be specifically defined as follows: ". . . . guidance and procedures…
Article Breaking into the boys club: Career advice for aspiring female cybersecurity pros When it comes to recruiting new talent, the cybersecurity industry is facing a big challenge. The supply of qualified candidates is far short of…
Article Basic pentesting: 2 — CTF walkthrough In this article, we will try to solve another Capture the Flag (CTF) challenge. This CTF was posted on VulnHub by Hadi Mene and is part of a Basic…
Article 10 best jobs in information security Cybersecurity includes a wide variety of different roles. Here are 10 of the best you may want to consider pursuing.
Article Becoming a Cybersecurity Practitioner (CSXP) Introduction The growing concern of cybercrime is pushing more and more companies to staff their IT teams with professionals that are able to…
Article SolarWinds LEM SolarWinds Log & Event Manager (LEM) is a security information and event management (SIEM) system. SolarWinds LEM is an end-to-end SIEM that groups,…
Article How to document security incidents for compliance in 10 steps Many organizations are subject to regulations that enforce compliance to federal standards, such as HIPAA. This is because these organizations often…
Article The International Association of Privacy Professionals CIPT Certification One of the most pressing issues in the Internet age is data protection. The data of individuals and businesses must be protected from malicious…
Article The Increasing Threat of Banking Trojans and Cryptojacking Blockchain is one of the hottest and potentially among the most disruptive technologies today. So naturally, it's a magnet for the criminal element, w
Article Ten benefits of security awareness training Great training is the bedrock of engaged employees. Engaged means they are aware of and follow directives. Without training, employees could be…
Article The GSEC certification and exam GIAC Security Essentials (GSEC) is one of the top certifications on the market for professionals who want to prove their IT skills on…
Article VERIS INCIDENT FRAMEWORK The VERIS methodology was created by Verizon back in 2010. This was an effort to create an environment for the classification of specific…
