Article Security Awareness for Vendors and Contractors Introduction Security awareness is of utmost importance in today’s business world. Your current organization most likely has a security awareness…
Article The psychological profile of a hacker with emphasis on security awareness The term “hacker” is a little vague. For instance, it is usually derogatory when actually there are “good” hackers too, ethical hackers whose job it…
Article How to Get Started in InfoSec: Tips, Certifications and Career Paths In a time when it’s crucial for business data to be safeguarded and protected from hackers and breaching attempts, there is a significant need for…
Article Top 30 data center manager interview questions and answers for 2019 Data center management: two words that encompass far more than most people realize. Faster than a speeding SSD! More powerful than hot-swap power…
Article VCP 6.5 Certification & Exam The VMware Certified Professional 6.5, or VCP 6.5, is a data center virtualization certification offered by VMware. To earn this certification,…
Article Return Oriented Programming (ROP) attacks According to Wikipedia, "Return-oriented programming (also called "chunk-borrowing à la Krahmer") is a computer security exploit technique in which…
Article An Overview of the Proposed DIGIT Act 1. Introduction On 10th of January 2017, the U.S. Senate introduced the Developing Innovation and Growing the Internet of Things (DIGIT) Act that…
Article Seven benefits of security awareness training [Updated 2019] Security awareness training is a method of educating employees to the dangers of phishing or other online scams and should be a required component…
Article Red teaming overview, assessment & methodology As we all know today, the cybersecurity threat landscape is a dynamic one and is constantly changing. The cyberattacker of today uses a mix of both…
Article Hiding malware in certificates Late last year, Sophos published a blog post describing a new tactic in the arms race between hackers trying to sneak malicious content past…
Article Hack the Box (HTB) Machines Walkthrough Series — Valentine [Updated 2019] Today, we will be continuing with our exploration of Hack the Box (HTB) machines as begun in the previous article. This walkthrough is of a HTB…
Article How Organizations Can Benefit If the CISO Is an Attorney The idea of having a CISO with a legal degree came to me some years back, while I worked as a travelling security consultant. I lost count of the…
Article Top 10 Free Threat-Hunting Tools Threat hunting is an alternative approach to dealing with cyber-attacks, compared to network security systems that include appliances such as…
Article Phishing: Who Is Being Targeted by Phishers? Phishing Targets Industries Financial Phishing Government and Military Phishing Healthcare Phishing Retail Phishing Phishing Individuals Overview of…
Article Quick and dirty BurpSuite tutorial In this article we look at BurpSuite, a framework of tools that can be used during penetration testing. We’ll cover the latest release of BurpSuite,…
Article Mimikatz: Walkthrough [updated 2019] Security researchers have been obsessed with Windows security since the beginning of time. Various tools have been released over the years which try…
Article Exploring Commonly-Used Yet Vulnerable Components Introduction In this article, we will explore some technologies that are commonly used today despite being known to be vulnerable. We’ll discuss why…
Article The Not-So-Black-and-White of Grayware We hear a lot about malware, and fair enough — malware is behind some of the world’s largest data breaches. However, malware has a cousin. This…
Article Top 30 information assurance analyst interview questions and answers for 2019 The Information Assurance Analyst position is an exciting information security position that comes with many responsibilities. Chief among these…
Article Bob 1.0.1: CTF walkthrough In this article, we will learn to solve a Capture the Flag (CTF) challenge which was posted on VulnHub by “c0rruptedb1t.” According to the…
Article What Happens on the Endpoint Stays on the Endpoint When attacks bypass endpoint security, it can often take months for enterprises to discover them. Some security reports even estimate that it…
Article FourAndSix 2.1: CTF Walkthrough In this article, we will solve a Capture the Flag (CTF) challenge that was posted on VulnHub by the author Fred. As you may be aware from my…
Article Tips to Help You Move Beyond a Help Desk Role Climbing the professional ladder is not an easy task, and this can seem especially scary when you are a newcomer at an entry-level position. In…
Article How to Align Training With the NIST NICE Framework The talent gap in the cybersecurity workforce has been widening every year. In 2018, ISC2 estimated the shortage at 2.93 million cybersecurity…
