Article The VPNFilter: A Powerful Botnet of More Than 500k Devices Ready to Attack VPNFilter botnet - The discovery Security researchers at Talos group, along with colleagues from other cybersecurity firms and law enforcement…
Article Android penetration tools walkthrough series: Drozer Drozer from MWR labs (formerly known as Mercury) is one of the most leveraged Android security frameworks for pentesting Android applications.…
Article Finding and exploiting XXE - XML external entities injection In this article, we will have an in-depth look at how to find and exploit XML External Entity Injection vulnerabilities. XXE (XML External Entity)…
Article User and Entity Behavioral Analytics (UEBA) Overview The human factor is one of the key issues of information security. On the one hand, humans are common sources of various threats to information…
Article Android Penetration Tools Walkthrough Series: AppMon AppMon is a suite of Python scripts that make gathering information on and penetration testing Android and iOS apps easier. AppMon integrates with…
Article 10 Tips to Increase IoT Cameras Protection From various security reports on IoT botnets, we know that most digital video surveillance systems used by small and medium-sized businesses contain…
Article What is the difference between the surface web, the deep web, and the dark web? The Surface Web is, for all intents and purposes, the internet we all know and love to surf, the internet we use to run businesses and connect with…
Article How to Identify and Detect a Phishing Email – 10 Tips Better than the average phsishing attempt by Rick Turoczy via Flickr. Licensed under CC BY 2.0[pkadzone zone="main_top"] A perennial favorite with…
Article What is the GCFE? The GIAC® Certified Forensic Examiner (GCFE) is a vendor-neutral certification created and administered by the Global Information Assurance…
Article GIAC penetration tester (GPEN) certification What is the GPEN certification? The GIAC® Penetration Tester (GPEN) is a vendor-neutral certification created and administered by the Global…
Article The International Association of Privacy Professionals CIPM Certification The Certified Information Privacy Manager (CIPM) is one of several popular privacy-focused certifications offered by the International Association…
Article The International Association of Privacy Professionals CIPP/E Certification The Certified Information Privacy Professional/Europe (CIPP/E) certification is one of several certifications offered by the International…
Article PowerShell for pentesters part 1: Introduction to PowerShell and Cmdlets PowerShell represents one of the most interesting and powerful languages for a pentesting purpose. [pkadzone zone="main_top"] So, we will try to fo
Article Gaining Shell Access via UART Interface Part 1 What is IoT The Internet of Things (IoT) is the network of physical devices, vehicles, home, appliances, vehicle, and other items embedded with…
Article What Is an IdM and how to discover if you need one IdM is an abbreviation for "Identity Management," i.e., management of user accounts. Let's turn to Wikipedia: "IdM is the security discipline that…
Article Gaining Shell Access via UART Interface Part 2 This is the 2nd post in IoT-Hacking-Shell-via-UART series. I hope you have gone through the first part. If not, please go through it. In this post,…
Article Mechanics Behind Ransomware-as-a-Service Introduction Ransomware is an increasingly serious concern, and this problem is getting worse over time. Initially, this malware began to compromise…
Article The Decline of Ransomware and the Rise of Cryptocurrency Mining Malware 1. Introduction ISACA, an international association focused on IT governance, has recently released its annual study "State of Cybersecurity." The…
Article Gaining Shell Access via UART Interface Part 3 This is the 3rd post in IoT-Hacking-Shell-via-UART series. I hope you have gone through the first two parts. If not, please go through them. In this…
Article And Again, About Storing Passwords When the question of storing passwords arise, the first idea is to simply keep them in clear text in the corresponding table in the database.…
Article Top threats to online voting from a cybersecurity perspective Last year, NASA set up an online voting campaign to pick a name for an astronomical object, a small ice-covered asteroid roving through a remote…
Article The top 15 must-have books in InfoSec An essential part of building information security (InfoSec) professionals' expertise is played by hands-on experience and years of activity.…
Article Mirai botnet evolution since its source code is available online Mirai – The evolving IoT threat Since the release of the source code of the Mirai botnet, crooks have improved their own versions by implementing…
Article Gmail Phishing Scams You Need to Know About Google Account Security Checkup by Wesley Fryer via Flickr. Licensed under CC BY 2.0 [pkadzone zone="main_top"] While Google has set up a war room
