Article Buying personal information in the deep web The criminal underground Before starting our quick tour in the criminal underground to collect information on the principal items and services…
Article Browser-based vulnerabilities in web applications Abstract Web browsers or mobile browsers are software applications that act as the intermediary applications between a user and the World Wide Web…
Article Android Application hacking with Insecure Bank - Part 3 In this article, we will look at attacking components in Android applications, starting with activities. But first, it is essential to understand…
Article PCI-DSS and PA-DSS Today's online domain and a cashless way of transacting business have brought more players into the payment industry than yesterday. Cash is no…
Article Encryption Solutions for the New World Keeping personal information secure and protected remains a top priority for computer users who now rely heavily on information systems to manage a…
Article Security attacks via malicious QR codes With the increasing use of smartphones, QR codes are becoming popular. Recently, WhatsApp launched its web version, which needs QR code scanning to…
Article Are Browsers the Weakest Link of the Security Chain? Current scenario The number of cyber attacks is constantly increasing, and according to security experts they grow even more sophisticated. The…
Article Bypassing same origin policy (SOP) The same origin policy is an important concept in the web application information security domain. In this policy, a web browser allows scripts…
Article Android Application hacking with Insecure Bank Part 4 In this article, we will look at a very handy framework for analysis of android applications named Drozer. Drozer is a very useful tool as it…
Article DNA cryptography and information security What is cryptography? Cryptography is the science of study of secret writing. It helps in encrypting a plain text message to make it unreadable. It…
Article Security Policy Template for Web Applications Web applications are critical to the enterprise infrastructure. Companies rely on them to communicate with partners, clients, shareholders and…
Article Solutions to Net-Force steganography CTF challenges Steganalysis refers to the process of locating concealed messages inside seemingly innocuous 'containers'. The idea behind steganography is…
Article IT Security Awareness Programs [download]Download the BEST PRACTICES FOR DEVELOPING AN ENGAGING SECURITY AWARENESS PROGRAM whitepaper[/download] Learn the best practices for…
Article Bypassing In Safari SOP Bypassing in Safari To help you understand better, http://httpsecure.org and file://httpsecure are both treated as a different origin. The…
Article iOS Application Security Part 40 - Testing apps on your Mac In this article, we will discuss the extent to which you can test applications on your Mac rather than the device. This could be useful for many…
Article Solutions to net-force cryptography CTF challenges Cryptanalysis refers to the study of ciphers with the objective of breaking the code and obtaining plaintext (sensible) information. While older…
Article PoS Malware is More Effective and Dangerous Introduction to POS malware In September 2014, experts at Trustwave firm published an interesting report on the evolution of the point-of-sale (PoS)…
Article Anonymizing Activities in the Digital World using TOR Introduction When it comes to anonymizing activities in digital world, it can be referred to in various ways. Researchers might take it to identify…
Article Cracking NQ vault step by step The mobile encryption app NQ Vault has been in the news for bad reasons. Mobile encryption apps are commonly used to prevent access to sensitive…
Article Hardening IIS security Security is an essential part of a web application and should be taken into consideration from the first stage of the development process. A website…
Article iOS Application Security Part 41 - Debugging applications using LLDB In this article we will learn about the LLDB debugger used by Apple's Xcode for debugging applications, understand why it is better for security…
Article Spoof using right to left override (RTLO) technique In this article we will learn about the one of the most overlooked spoofing mechanisms, known as right to left override (RTLO). What is RTLO? RIGHT…
Article Why Do We Need Software Escrow? The practice of software escrow consists of the deposit of the source code of an application with a third party, indicated as the escrow agent.…
Article Interview: Morey Haber, VP of Technology at BeyondTrust Today we officially kick off our long-awaited IT Thought Leader Interview series. First up in the hot seat is Morey Haber, Platform Product Manager…
