Article How to create a more diverse cybersecurity workforce Introduction Some people reading this will probably think, oh no, not another article about diversity in the workplace. But what is diversity?…
Article MITRE ATT&CK vulnerability spotlight: Pass-the-hash Introduction Since the first appearance of pass-the-hash (PtH) in the nineties, this lateral movement tactic has been helping attackers leverage…
Article Lessons learned: the Marriott breach Overview of the breach Marriott International has been in the news throughout 2019 due to a major data breach discovered and investigated in late…
Article Types of ICS Introduction Industrial control systems (ICS) are mainstays in the worlds of manufacturing, automation, utilities facilities and more. They make…
Article Malware Analysis and Reverse Engineering Introduction This article provides a high-level overview of malware analysis and reverse engineering. If you are planning to get started with…
Article 16 business email/mobile phishing tricks to be aware of in 2019 Introduction It’s hard enough running a business without a cybercriminal trying to ruin it. According to PWC, in 2018, 49% of organizations across…
Article Disassembly 101 Introduction This article briefly explores topics connected to assembly basics, registers, operands, instructions, arithmetic instructions, logical…
Article Threat hunting with Kolide and osquery Introduction In this article, we’ll discuss how we can use Kolide Fleet for threat-hunting purposes. This article is not intended to be an…
Article MITRE ATT&CK vulnerability series: Trusted relationship Introduction What many who are not information security-savvy may think is that the attack surface of an organization is confined to simply the…
Article Security Concerns of Flying Motorcycles [Updated 2019] Section 1. Introduction Flying motorcycles resembling the flying machines from Star Wars are about to be placed on the market. A number of…
Article Debugging for malware analysis This article provides an overview of debugging and how to use some of the most commonly used debuggers. We will begin by discussing OllyDbg; using…
Article 16 phishing scams that consumers need to be aware of in 2019 Introduction Scams are as old as human society. There has, and likely always will be, an element of humanity that will try to take advantage of us…
Article Vigilante Malware: Do We Need a Cyber Vigilante? [Updated 2019] The Mystery Behind the Linux.Wifatch Malware Thousands of IoT devices across the world have been infected with a new strain of malware, but this…
Article Assembly Basics Introduction This article gives details about assembly programming for the Intel 8086 microprocessor. It also presents very clear details by…
Article Book Excerpt: Web Application Security, A Beginner's Guide [Updated 2019] Web Application Security: A Beginner’s Guide provides IT professionals with an actionable, rock-solid foundation in Web application security--from a…
Article SAP Security for CISO part 14: SOD [Updated 2019] Numerous articles covering different aspects of SAP Security mostly regarding vulnerabilities and risks paved the way for today's discussion on how…
Article ICS/SCADA Access Controls Industrial controls systems (ICS) and supervisory control and data acquisition (SCADA) systems (a subset of ICS) manage our critical national…
Article Saving lives with ICS and critical infrastructure security Introduction Digital transformation has revolutionized critical infrastructure industries like manufacturing, enabling them to harness new…
Article Phishing Attacks Using Public Data [Updated 2019] 1. Introduction According to John McAfee, the developer of the first commercial anti-virus program, hacking a large corporation is "so easy even a…
Article Reverse engineering packed malware In this article, you’ll get a better understanding of what a packed executable is and how to analyze and unpack malware. Finally, you’ll get to know…
Article Analyzing packed malware Malware is created with deception in mind. Malware authors want to go undetected in order to steal, alter or delete as much information as possible.…
Article Why diversity of thought matters in cybersecurity Introduction The cybersecurity industry has long struggled with gender disparity. And while the number of women in cybersecurity is growing, the gap…
Article Does it make sense to make a career move from law to data privacy? Introduction What exactly is data privacy? According to the Free Dictionary, the word “privacy” is defined as “The state of being free from public…
Article Gentoo Hardening: Part 4: PaX, RBAC and ClamAV [Updated 2019] Grsecurity and Xorg If we enable the "Disable privileged I/O" feature in the hardened kernel and reboot, we can't start X server. That's because…
