Article Transitioning from DevOps to DevSecOps Introduction DevOps is essentially the combination of software development and IT operations, and it is found in many enterprise environments.…
Article 5 legitimate tools commonly used for malicious purposes Introduction It should come as no surprise that there is quite a lot of malicious activity that can be accomplished with seemingly harmless tools.…
Article Securing Windows 10 Hosts Introduction Windows 10 is popular, but success has made the operating system a target for hackers and malicious coders. While Windows 10 has been…
Article Remote access security in Windows 10 Introduction One of the most ubiquitous forms of technology in the business world today is remote access technology. Just like other areas of IT,…
Article MITRE ATT&CK vulnerability spotlight: Access token manipulation Introduction MITRE is a U.S. government federally-funded research and development center (FFRDC) which performs a large amount of research and…
Article What are tagged and untagged ports? Back in the old days, there were no such things as managed switches. Instead, modern Ethernet connections were handled by simple devices called…
Article User Account Management in Windows 10 Introduction Windows 10 categorizes users into three types, each with a distinct purpose. Let’s explore the Local, Domain, and Microsoft user types.…
Article Ethical hacking: Attacking routers Routers are one of the most attractive points of a network for attackers to prey upon. These ubiquitous network devices often have more than one…
Article Penetration testing: TOR, VPN or proxy If you’re reading this article, chances are good that you already know what penetration testing is. Let's take things a step further and look at the…
Article Windows 10 Backup and Recovery Options Introduction From the moment computing was created, backing up and recovering lost data has been a primary concern, leading Microsoft to integrate…
Article Ethical hacking: Breaking cryptography (for hackers) Cryptography is the science of protecting secrets. As a result, it’s designed to make it impossible for an unauthorized party (like a hacker) to…
Article Reducing cybersecurity staff stress and turnover with continuous skill development While the causes of the cybersecurity skills shortage and its impact on job satisfaction vary by region, the reality is this challenge is faced by…
Article Get 30 days of free training for National Cybersecurity Awareness Month! National Cybersecurity Awareness Month (NCSAM) begins October 1, and we’re celebrating by giving away 30 days of free cybersecurity training — to…
Article Cybersecurity Weekly: Adolescent hacking study, DoorDash breach, Outlook file extension blacklist A study decodes how kids get into hacking. DoorDash loses personal records of 5 million clients and drivers. Outlook plans to add 38 more file…
Article Malware spotlight: what is ransomware? Introduction Ransomware is a type of malware that is used to digitally extort victims. It does this by preventing them from accessing their systems…
Article Windows 10 Authentication Mechanisms Introduction Windows 10 offers several authentication mechanisms for users. This article will detail Windows 10 authentication methods and explore…
Article Phishing-as-a-Service Introduction IKEA, the famous Swedish home furnishing superstore, is incredibly successful. One of the secrets of their success is making the home…
Article Ethical hacking: Log tampering 101 Getting caught is exactly what every hacker does not want. They want to be able to gain entry into a system and then quickly withdraw to the safety…
Article Wireless Security in Windows 10 Introduction Wireless internet technology has been with us for some time, with many identifying 2005 as the year when wireless connectivity first…
Article 32 hardware and firmware vulnerabilities Hardware and firmware vulnerabilities can put your business and your customers’ sensitive data at risk, costing you in diminished sales, reputation…
Article Ethical hacking: Passive information gathering with Maltego In this article, we’ll discuss passive information gathering. We’ll first look at how we can use Maltego, a common information-gathering tool, to…
Article DoD's Cybersecurity Maturity Model Certification (CMMC) initiative Introduction: High-profile data breaches are hitting Defense Industrial Base (DIB) supply chains Government organizations are just as likely to…
Article MITRE ATT&CK: Clipboard data Introduction Copying data to a Windows or macOS system clipboard is a well-known time saver that many take advantage of, myself included. The…
Article Hack the Box (HTB) machines walkthrough series — Luke Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…