Article Average Data Recovery (CDRP) Salary in 2018 Do your interest areas lie in computer hardware? Do the words "data recovery" excite you? If you are looking to update your skills in data recovery…
Article PHP Lab: Prevent exposure of configuration/backup files from web root. Introduction and background A developer has created a web application in PHP, and the application makes use of configuration files from the config…
Article Tips for Managing Physical Security What is Physical Security? Source: GAO[pkadzone zone="main_top"] According to the security expert S. Harris, “physical security protects people,…
Article How Security Awareness Training Can Protect the Military Introduction There stills seems to be no true consensus on the need for or importance of security training in the workplace. There are people on…
Article Does History Need to Repeat Itself? Lessons Learned From WannaCry Often, at the end of a project, especially a long and complicated one, there will be a ‘lessons learned’ session held. These sessions usually bring…
Article PHP Lab: Exploiting SQL Injection Identifying SQL Injection vulnerabilities The first step in exploiting a SQL injection is to identify the vulnerability. This first section of this…
Article WannaCry, The Aftermath: How WannaCry Could Have Been WannaSmile I have been working in the field of cyber security and related areas for over 20 years. In that time there have been many cyber incidents. Those…
Article The Importance of C-Level Security Awareness Training As a CEO, it’s important for you to understand a harsh and terrifying reality: Your company is under constant attack from hackers, thieves, and…
Article PHP lab: File inclusion attacks File inclusion is one of the popular yet old vulnerabilities that are often seen in websites. [pkadzone zone="main_top"] PHP websites that make use
Article PHP lab: File upload vulnerabilities: Many websites require file upload functionality for their users. Social networking websites, such as Facebook and Twitter allow their users to…
Article PHP lab: PHP double submit problem. If a user refreshes a page after submitting a form, he may accidentally post the content again resulting in duplicate submission, thus causing…
Article HBO Hacked, Game of Thrones script leaked on the Internet Early August, hackers announced to have breached the systems of the television network HBO that is owned by the giant Time Warner. Crooks claimed to…
Article OWASP 2017 top 10 vs. 2013 top 10 After a long interval of four years, OWASP in April 2017 released a draft of its latest list of “Top 10 Web Application Security Vulnerabilities.”…
Article PHP Lab: Analyze the code and spot the vulnerability Introduction and background: A penetration test has been conducted on the following URL, and a SQL Injection vulnerability was identified.…
Article OWASP Top 10 #3: Cross-Site Scripting (XSS) Cross-Site Scripting Cross-site scripting (XSS) attacks involved the injection of malicious code into trusted websites. One of the traditional uses…
Article PHP Lab: Review the code and spot the vulnerability Introduction and background An application has been developed in PHP, and the source code of the login page is given for source code review to…
Article OWASP Top 10 #4: Broken Access Control Recently, OWASP (the Open Web Application Security Project) announced an update of their "Ten Most Critical Web Application Security Risks.” OWASP…
Article OWASP Top 10 #5: Security Misconfiguration Recently, the Open Web Application Security Project (OWASP) announced an update of their "Ten Most Critical Web Application Security Risks.” OWASP…
Article A guide to installing and using the Nessus vulnerability scanner Nessus is an automatic vulnerability scanner that can detect most known vulnerabilities, such as misconfiguration, default passwords, unpatched…
Article The security awareness hazards of removable media What is removable media? Removable media can be thought of as a portable storage medium that allows users to copy data to it and then take it…
Article Top 10 Threats from Unprotected Intelligent Personal Assistants (IPAs) 1. Introduction Intelligence personal assistants (IPA), also known as virtual personal assistant (VPA), is the rising star in the high technology…
Article Security Awareness for Sales Representatives The performance of salespersons is usually measured in terms of revenue, not in terms of security awareness. As a result, most of their efforts are…
Article Managing Wireless Network Security Why Is Network Security Important? Keeping your network secure is vitally important. Your network is the lifeblood of your company and it is…
Article PCI Security Awareness: Who Needs Training and Compliance? With financial reward being one of the main motives behind online frauds, the Payment Card Industry (PCI) is constantly under cyber-attack by…
