Article So you want to move from the help desk to the security team Everybody has a start in their chosen field. Sometimes this start is a calculated, deliberate choice and sometimes it is a product of both chance…
Article MITRE ATT&CK vulnerability spotlight: Account manipulation Introduction MITRE functions as a U.S. government-funded research and development center (FFRDC). This role involves performing trusted third-party…
Article Cybersecurity Weekly: Securing open source apps, Facebook iPhone bug, multi-year breach GitHub recruits a team of tech companies to help secure open source software. A new Facebook bug secretly enables the iPhone camera. A tech company…
Article Malware Spotlight: What are wipers? Introduction Imagine showing up to work and sitting down at your computer on an average day. You turn the computer on, take a sip of coffee, and…
Article MITRE ATT&CK vulnerability spotlight: Bash history Introduction MITRE is a federally funded research and development center (FFRDC) for the U.S. government. This means that they perform a variety of…
Article Six things you should be spending your cybersecurity budget on Introduction: Plan to increase your focus on cybersecurity Cybercrime activity is escalating, both in number of incidents and sophistication. It’s…
Article Malware overview – Graboid Introduction In October 2019, security researchers from Unit 42 at Palo Alto Networks discovered a new malware called Graboid. It is a cryptojacking…
Article MITRE ATT&CK: Hardware Additions Introduction In this article, we shall discuss the very real threat of malicious hardware additions, what they are and their different types and…
Article Rules of engagement in pentesting When you create a software product or build a service or create a platform, it’s a good idea to make sure it is secure. The data we generate is…
Article New Cisco Certifications and Changes Coming in 2020 Introduction: Jump start your career with vendor-specific Cisco certifications Cisco Systems, Inc. offers a line of vendor-specific certifications…
Article Malware Spotlight: What is APT? Introduction For some things, the whole is greater than the sum of its parts. When it comes to cybersecurity, this saying is an appropriate…
Article Cybercrime Investigator Degree Requirements Introduction Cybercrime Investigators provide valuable forensics, investigative, and incident response services to cases that involve…
Article MITRE ATT&CK vulnerability spotlight: Brute force Introduction The MITRE ATT&CK matrix is a tool developed by MITRE, a U.S. government federally-funded research and development center (FFRDC). It is…
Article Malware spotlight: What is rogue security software? Remember before you became security-conscious? Or maybe you always have been — either way, you most likely have been faced with this scenario. You…
Article Cybersecurity Weekly: Competing bug bounties, Disney+ password reuse attack Google offers up to $1.5 million for Pixel Titan M exploits in 2020. A hacker offers $100,000 for corporate secrets. Disney+ suffers a password…
Article MITRE ATT&CK vulnerability spotlight: Credentials in files Introduction MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As part of its duties as an FFRDC, it…
Article Election security: Cybersecurity concerns for future elections The election security landscape APTs like Cozy Bear have a history of interfering with major elections in the U.S. and other countries. With the…
Article MITRE ATT&CK vulnerability spotlight: Credentials in registry Introduction MITRE is a U.S. government federally-funded research and development center (FFRDC). Its purpose is to act as a trusted third-party for…
Article 7 research-backed tips to improve your security awareness training We love talking to clients and security practitioners about what’s working at the ground level of their security awareness programs. However,…
Article Cybercrime certifications Introduction Cybercrime is the fastest-growing type of crime in the U.S. That means the days of detectives in deerstalker caps are gone, and in…
Article Knowledge and Skills Related to Applied Cryptography and Cryptanalysis Introduction to applied cryptography Cryptography is widely used in modern technology, particularly in software. The primary purpose of cryptography…
Article Hack the Box (HTB) machines walkthrough series — Celestial Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Cybersecurity Weekly: Gas pump hidden cameras, insecure smart TVs, ransomware recovery Hidden cameras found at gas station pumps in conjunction with card skimmers. The FBI warns consumers about security issues in smart TVs. The State…
Article Malware spotlight: What is a Remote Access Trojan (RAT)? A Remote Access Trojan (RAT) is a type of malware that allows covert surveillance, a backdoor for administrative control and unfettered and…
