Article Cybersecurity Weekly: Active phishing attacks, breach blamed on password reuse, insecure smart lights New phishing attacks target U.N. and enterprise executives. Bed Bath & Beyond blames their breach on password reuse. A new study finds smart light…
Article Understanding if statements in C “If” statements in C programming are used to execute a block of statements if a certain condition is true. They allow programmers to control the…
Article MITRE ATT&CK: Audio Capture Introduction A common theme in literary, cinematic and real-world espionage is the use of a wire or bug that records audio of a target subject.…
Article Malware spotlight: What are botnets? Introduction They say simple plans are the most likely to be successful, and this adage definitely carries over to the world of cybersecurity. This…
Article Using data science to combat deepfakes, malware and social engineering Cybersecurity data science is a fast-growing field, but it’s difficult to find up-to-date training due to all the new technologies, said Infosec…
Article Network traffic analysis for IR: Data analysis for incident response Introduction While no incident is the same, security professionals have come to rely on pre-established procedures and best practices to help…
Article MITRE ATT&CK: Input capture Introduction Since the early days of computing, input has been the most basic form of interface with a system. Until attackers find a way to…
Article Malware spotlight: What are backdoors? Introduction Imagine staring down an impregnable fortress or network and determining that there is no conceivable way in without obvious detection.…
Article Network traffic analysis for IR: Connection analysis Introduction to connection analysis Connection analysis is the highest-level type of network analysis that is used in incident response. Rather than…
Article MITRE ATT&CK: Network sniffing Introduction Network sniffing may conjure images of a network-based bloodhound to some, but in the world of information security, it means the…
Article Network traffic analysis for IR: Event-based analysis Introduction to event-based analysis Event-based analysis, as its name suggests, focuses on analysis of specific events that occur on the monitored…
Article Network traffic analysis for incident response (IR): What incident responders should know about networking Introduction In this article, we’ll discuss the various things that incident responders must know about the operation of a network and how this can…
Article Network traffic analysis for IR: Statistical analysis Introduction to statistical analysis Statistical analysis is one of the three main categories of analysis that can be performed on network traffic…
Article MITRE ATT&CK: Command-line interface Introduction Try to remember the first time you sat at a PC. What was one of the seemingly high-level features about it that impressed you? Chances…
Article How to prepare for a ransomware attack The threat of ransomware Ransomware has become a common and well-known threat to organizations. Its success is largely based on the fact that it is…
Article Network traffic analysis for IR: Alternatives to Wireshark It is almost impossible to leave a conversation with a cybersecurity professional, take an introductory networking class, or break into ethical…
Article MITRE ATT&CK: Replication through removable media Introduction The progression of information security has been heavily focused on the internet as the primary source of threats. What may be…
Article Phishing in academic environments Introduction Higher education is a popular target for phishing scams. However, the industry’s vulnerability is often overlooked by both…
Article Cybersecurity Weekly: Record bug bounty payouts, new phishing attacks, smartphone fingerprint hack Bug bounty platform Bugcrowd breaks weekly payout record with over $500,000. Paypal upsets Microsoft as phishers’ favorite brand for the first time…
Article Network traffic analysis for IR: Address resolution protocol (ARP) with Wireshark The Address Resolution Protocol (ARP) was first defined in RFC 826. As the name suggests, it is designed to resolve IP addresses into a form usable…
Article Be aware of these 20 new phishing techniques Most of us have received a malicious email at some point in time, but phishing is no longer restricted to only a few platforms. The evolution of…
Article What does dark web monitoring really do? Introduction The dark web has earned a reputation as the internet’s shadowy underbelly. Hidden from search engines and only reachable with an…
Article Everyone should learn the OWASP Top Ten, says John Wagnon “It's important to know the world you're living in,” Infosec Skills author John Wagnon said. “You need to know what these threats look like and if…
Article GPEN vs. OSCP: Which one is better for a career in ethical hacking and/or pentesting? Cybercrime statistics suggest that unethical attackers have become more innovative in their ways to exploit vulnerabilities on internet-connected…
