Article ISIL, Terrorism and Technology: A Dangerous Mix Introduction I was watching the Homeland series on TV when I received the news of the dramatic events in Paris. The introduction to this latest…
Article Analyzing a DDoS Trojan MD5: 67877403db7f8ce451b72924188443f8 Installer: In the main function of the malware, two subroutines are used for checking whether the malware is…
Article Nishang: A Post-Exploitation Framework I was recently doing an external penetration test for one of our clients, where I got shell access to Windows Server 2012(Internal WebServer sitting…
Article The Cybersecurity Information Sharing Act of 2015 (CISA): Is It the Right Answer? In attempt to further cybersecurity efforts for the nation, a brand new cybersecurity bill, the S. 754, has just been discussed: the Cybersecurity…
Article Reversing the Pony Trojan Part I Pony is a stealer Trojan and has been active for quite a while now. It was responsible for stealing over $200,000 in bitcoins (…
Article What Is SIEM? A SIEM (security information and event management) is a software solution that normalizes, filters, correlates, assembles, and centrally manages…
Article When Your CEO Won’t Take Security Awareness Training CEOs are often the busiest people in any organization. As security professionals, we should respect that: but what can we do when our CEO won't take…
Article Malware researcher’s handbook (demystifying PE file) (For the Introduction, click here) PE file Portable executable file format is a type of format that is used in Windows (both x86 and x64). As per…
Article Will IoT Security Awareness Protect Me From My Toaster? Introduction The paradigm of the Internet of Things devices is rapidly transforming our relationship with technology. The diffusion of smart objects…
Article Security Challenges in the Internet of Things (IoT) The Global State of Information Security® Survey 2015 issued by PricewaterhouseCoopers comes to the conclusion that about 70% of connected IoT…
Article Introduction to SAP I decided to start a new series of articles, "SAP Security for beginners". Everyone who is already into security, but wants to know more about SAP…
Article A Case Study of Information Stealers: Part I Introduction: A stealer is a type of malware that looks for passwords stored on the machine and sends them remotely (e.g. mail, HTTP) to an…
Article XML Secure Coding ABSTRACT The XML (Extensible markup language) is a buzzword over the internet, rapidly maturing technology with powerful real world application,…
Article Security vulnerabilities of voice recognition technologies An increasing number of devices nowadays use voice recognition technologies for performing commands, allowing access to stored information, and…
Article Reversing the Pony Trojan part II Pony is a stealer Trojan and has been active for quite a while now. It was responsible for stealing over $200,000 in bitcoins (…
Article Securing Your WordPress Admin Panel Today, anyone can create their own website with tools such as WordPress, Joomla or Drupal. However, many people suffer when they do not take…
Article Budgeting for Security Awareness: Who - What - When - Where - Why - How much 1. Introduction The actions and/or inactions by members of an organization who lack security awareness can lead to various security incidents, such…
Article Is Safe Harbor 2.0 Another Tug of War between Privacy and Security? What led to the Safe Harbor's Demise? In Schrems v. Data Protection Commissioner, the Court of Justice of the European Union (also known as CJEU or…
Article Attacks on Hotel Wi-Fi Networks 1. Introduction Wi-Fi (Wireless Network LAN) is a widespread wireless networking technology that is used in various public places (e.g., coffee…
Article Why Throwing Away Your Old Boarding Pass is so Risky Don't throw away your old boarding pass It's the holiday season and probably most of you will travel during the Christmas time. For this reason, I…
Article When Basic Security Training MIGHT Be Enough When there are people who still open attachments willy-nilly, who click on links with reckless abandon and who let their guard down even though…
Article Oil and Gas Cyber Security – Interview In the recent presentation at BlackHat, you mentioned that oil and gas is one of the industries most plagued by cyber-attacks. What makes oil and…
Article Attacking WPA2 enterprise The widespread use of mobile and portable devices in the enterprise environment requires a proper implementation of the wireless network…
Article Application architecture review Application architecture review can be defined as reviewing the current security controls in the application architecture. This helps a user to…
