Article Using certificates in Windows 10 Trust is one of the most important things that can be established between two parties. It is a process where both parties suspend their disbelief of…
Article Cybersecurity Weekly: Hacker reveals black market credit cards, Linux Sudo flaw discovered, RDP honeypot experiment An anonymous hacker reveals 30% of the stolen credit cards on the black market. A Sudo flaw has been discovered that allows all Linux users run…
Article Network traffic analysis for IR: Threat intelligence collection and analysis Introduction While any security professional can call themselves an analyst, the full scale and scope of the cyber-threat intelligence analyst is…
Article Red Team Operations: Presenting your findings The importance of the Red Team presentation At the end of the Red Team assessment, there are usually two main deliverables. The Red Team report…
Article Ethical hacking: Social engineering basics What is social engineering? In a nutshell, social engineering is the art of manipulation and misdirection. A social engineer’s goal is to do…
Article Mitigating security risk with continuous employee training and development Earlier this month, Infosec surveyed 180 IT and security pros about the challenges they face in developing and retaining their organization’s…
Article Traffic analysis for incident response (IR): How to use Wireshark for traffic analysis Traffic analysis is the process of monitoring network protocols and the data that streams through them within a network. In this article, we’ll…
Article Certifications compared: GSLC vs. CISM Management is an important part of many organizations and their composite departments, including information security/technology and cybersecurity.…
Article Cybersecurity training becoming more specialized, hands-on, says Jason Dion Cybersecurity training is getting even more hands-on and lab based, said Infosec Skills author Jason Dion. “It’s about ‘what can you do?’ as opposed…
Article Network traffic analysis for IR: Content deobfuscation Introduction to obfuscation Encoding and encryption techniques are used for a variety of purposes. Some of these are legitimate, like the use of…
Article Network traffic analysis for IR: Credential capture Introduction to leaked credentials The concept of leaked or breached credentials is nothing new, with data breaches occurring on a daily basis. Most…
Article Red Team Operations: Report structure and content What to report The first stage in building a Red Team report is knowing what to put in the report. Three of the most important things to discuss in…
Article Network traffic analysis for IR: Analyzing fileless malware Introduction to fileless malware Fileless malware is malware authors’ response to traditional malware identification and analysis techniques. Many…
Article Cybersecurity Weekly: Equifax default password discovered, NordVPN data breach, Army retires floppy disks A default admin password was used to "secure" sensitive data at Equifax. NordVPN suffered a data breach, exposing private encryption keys of some of…
Article Malware spotlight: Malvertising Introduction: The impact of malicious ads One of the most deceptive ways cybercriminals use to distribute malicious software (malware) is…
Article Red Team Operations: Reporting for compliance The growing compliance landscape In recent years, the number of standards and regulations that organizations have to demonstrate compliance with has…
Article Network traffic analysis for IR: Network mapping for incident response Introduction to network mapping The concept of network mapping is not a new one. Creating network maps in the design phase of a network and updating…
Article Malware spotlight: Crypto-jacking Introduction In this article, we will explore crypto-jacking, a growing malware-based epidemic in the cryptocurrency realm. Before understanding…
Article Red Team Operations: Providing recommendations The importance of recommendations The Red Team’s final report is the most valuable part of the entire exercise for the client. In many cases, a Red…
Article The future of Red Team operations Introduction The Red Team assessment is an increasingly popular method for an organization to get a realistic feel for their overall security.…
Article MITRE ATT&CK: Man-in-the-browser Introduction Web browsing is a well-known cause of exposure to a variety of nasty pieces of malware and related maladies for web surfers. This is…
Article MITRE ATT&CK: Screen capture Introduction There is an old saying that goes “a picture is worth a thousand words.” In many ways, this saying is true: you can learn a great deal…
Article Malware spotlight: Point of sale malware Introducing point of sale malware Point of sale (PoS) systems are the payment devices that you can find at almost any store. Depending on their…
Article ThreatMetrix Cybercrime Report: An interview Introduction In a recent Infosec Cyber Work podcast, we welcomed Rebekah Moody, market planning director at ThreatMetrix, a LexisNexis Risk…
