Article Privilege escalation on linux with live examples One of the most important phase during penetration testing or vulnerability assessment is privilege escalation. During that step, hackers and…
Article The Rowhammer: the Evolution of a Dangerous Attack The Rowhammer Attack Back in 2015, security researchers at Google's Project Zero team demonstrated how to hijack an Intel-compatible PCs running…
Article Top 5 email retention policy best practices Email retention policies are no longer just about conserving space on your Exchange server. Today you must take into account how your email…
Article Memory forensics and analysis using volatility Volatility is one of the best open source software programs for analyzing RAM in 32 bit/64 bit systems. It supports analysis for Linux, Windows,…
Article CGEIT Domain 4: Risk Optimization Introduction Risk optimization falls under the fourth domain of the ISACA’s Certified in the Governance of Enterprise IT (CGEIT) exam and…
Article DoD IASAE Overview What is the DoD IASAE? The U.S. Department of Defense (DoD) IASAE covers the requirements for the Information Assurance architecture and engineering…
Article NIST CyberSecurity Framework Introduction The National Institute for Standards and Technology (NIST) is a U.S.-based organization that was tasked by the U.S. government with…
Article The IAPP CIPP/US certification: The leading U.S. privacy credential Privacy issues have become increasingly important for organizations in recent years. While events such as Edward Snowden’s NSA revelations in 2013…
Article DoD 8570 IAM certification – Level I What is the DoD IAM Level 1? The Department of Defense (DoD) directive 8570 provides guidance on how the DoD workforce manages and executes…
Article CGEIT Domain 5: Resource Optimization [DECOMMISSIONED ARTICLE] NOTE: This article is based on an old version of the CGEIT exam, and should not be consulted for information on the current exam. Please consult the…
Article Closing the Gender Gap: Women in Cybersecurity March 8 was International Women's Day. A lot of folks will say, “why do we need a special day for women? Women have equality now - don’t they?” To…
Article 10 most common phishing attacks Phishing is one of the most common ways for scammers to steal information. Through social engineering or deception, fraudsters attempt to trick…
Article Android penetration tools walkthrough series: QARK In this article, we are going to learn how to use the Quick Android Review Kit. QARK one of the most efficient Android static analysis tool…
Article Importance of IP Fragmentation in Penetration Testing Introduction Penetration testing is an extremely important testing aspect when we consider the optimum level of security for any system pertaining…
Article IoT firmware analysis -- Firmwalker IoT is the next big technology that will change the way we communicate and exchange data. Every day thousands of IoT devices are coming into the…
Article 5 ways to identify a spear phishing email Spear phishing is a targeted form of email attack used to steal sensitive information through enticement, impersonation, or access-control bypassing…
Article Android penetration tools walkthrough series: AndroBugs framework Android apps are arguably the most commonly used features of smartphones on the market today. Our lives are made more organized, faster, and more…
Article 5 Security Awareness Tips for HIPAA Compliance Introduction The Healthcare field generates a lot of information that is very private. To address this issue, Congress passed what was originally…
Article 10 things employers need to know about workplace privacy laws In today's fast-paced business world, a lot of job-related duties can be done virtually, or either in a brick-and-mortar office. Employees can use…
Article A brief guide to GDPR compliance The European Union (EU) has a new data protection law – the General Data Protection Regulation (henceforth "the GDPR" or "the Regulation") will…
Article GIAC Certifications Overview GIAC® certifications are created and administered by the Global Information Assurance Certification and cover a variety of security domains. GIAC…
Article Minorities in Cybersecurity: The Importance of a Diverse Security Workforce In an earlier article, we looked specifically at the gender gap in cybersecurity. (1) This article will look more closely at the wider area of…
Article Why Military Veterans Make Good Cybersecurity Professionals Cybersecurity is a career that is increasingly broadening in scope as cybercriminals test the skills and resilience of security professionals by…
Article GDPR Provides Scammers with a New Golden Opportunity GDPR latest: Fraudsters posing as banks in data protection emails phishing scam The EU General Data Protection Regulation (GDPR) has arrived, and…
