Article Computer forensics investigation – A case study Disclaimer: We have not performed any live investigation. This was a part of our university assignment, wherein we assumed the roles of forensics…
Article Combat Business Email Compromise Scams With New Awareness Training Tools From SecurityIQ Business email compromise (BEC) attacks are growing in both frequency and severity. According to the FBI, BEC attacks cost businesses $5.3 billion…
Article Basics of cryptography: The practical application and use of cryptography Cryptography originated about 4000 years ago, and the world of cryptography has evolved a lot since then. Today 'Cryptography' is omnipresent in our…
Article 2017 OWASP A9 Update: Using Components With Known Vulnerabilities Introduction It does not take a rocket scientist to understand using components with known vulnerabilities is a very poor choice. While solving this…
Article All You Need to Know About the Cambridge Analytica Privacy Scandal Introduction The commercial data analytics company Cambridge Analytica is in the middle of one of the biggest privacy scandals of the last years;…
Article Android penetration tools walkthrough series: MobSF This article reviews the step-by-step procedures for deploying a Pentesting tool called "MobSF," which is utilized primarily on the Android OS.…
Article Advance persistent threat - Lateral movement detection in Windows infrastructure - Part II In the previous article "Advanced Persistent Threat - Lateral Movement Detection in Windows Infrastructure - Part I," we discussed the advanced…
Article Introduction to the paros proxy lightweight web application tool The Paros Proxy Lightweight Web Application tool is one of the most popular penetration testing tools for web applications. Web app developers and…
Article XML vulnerabilities are still attractive targets for attackers XXE flaws in XML parsers can expose sensitive data, enable attacks, and affect major services. The article explains XXE basics, real exploits,…
Article Vulnerability scanning with Metasploit part I Metasploit Framework, the Metasploit Project's best-known creation, is a software platform for developing, testing, and executing exploits. It can…
Article 2017 OWASP A10 update: Insufficient logging & monitoring Many critics of the Open Web Application Security Project (OWASP) Top Ten list view insufficient logging and monitoring, new on the list in 2017, as…
Article Preventing Business Email Compromise (BEC) With Strong Security Policies Introduction Business email compromise (BEC) is a phishing and social engineering scam threatening every organization in every sector on every…
Article Android penetration tools walkthrough series: Apktool In this article, we will look at the step by step procedure to setup utility called "Apktool" and its usage in android application penetration…
Article Android penetration tools walkthrough series Dex2Jar, JD-GUI, and Baksmali In this article, we will be focusing on Android penetration testing tools such as Dex2Jar, JD-GUI, and Baksmali to work with reverse engineering…
Article 2017 OWASP A3 Update: Sensitive Data Exposure Introduction Si vis pacem, para bellum! This classic Latin quote by Vegetius translates to "If you want peace, prepare for war." As far as aphorisms…
Article 9 free risk management tools for IT & security pros Selecting and following the appropriate risk assessment methodology is key to creating a safe computing environment. However, the reality is that…
Article Pentesting for PCI DSS compliance: 6 key requirements For any organization that processes, stores or transmits credit card data, penetration testing has been an obligation since 2013. That's when the…
Article Android vs. iOS Mobile App Penetration Testing The adoption rate of smartphones has exploded in recent years. The two dominant smartphone operating systems (OS) of today are the Android OS develope
Article 5 real-world examples of business email compromise Business email compromise (BEC) is a type of phishing scheme where the cyber attacker impersonates a high-level executive (CIO, CEO, CFO, etc.) and…
Article How Business Email Compromise Attacks Work: A Detailed Case Study Business email compromise (BEC) attacks are widespread and growing in frequency. Due to their simplicity and effectiveness, BEC will continue to be on
Article How Secure Wire Transfer Procedures Can Prevent Business Email Compromise Introduction Formerly known as the “man in the email attack,” business email compromise (BEC) is a scam that takes control of a senior employee’s…
Article 2017 OWASP A7 Update: Cross-Site Scripting Introduction For the past 15 years, the Open Web Application Security Project (OWASP) has helped organizations develop, purchase, and maintain…
Article 2017 OWASP A8 Update: Insecure Deserialization Introduction 2017 saw a new addition to the Open Web Application Security Project’s (OWASP) Top Ten list of web application vulnerabilities —…
Article Free & open source rootkit and malware detection tools A lot of sniffers, rootkits, botnets, backdoor shells and malwares are still on the wild today, which are used by malicious attackers after…
