Network traffic analysis for Incident Response (IR): TLS decryption

Introduction to TLS When the internet was being created, security wasn’t much of an issue. The internet (and the Arpanet before it) was primarily…

Network traffic analysis for IR: Data collection and monitoring

Data collection and analysis for use by network engineers, security professionals and incident response has only exploded over the years with the…

Top types of Business Email Compromise [BEC]

Infosec skills - Network traffic analysis for IR: DNS protocol with Wireshark

The Domain Name System (DNS) protocol was first defined in RFCs 1034 and 1035 but has been updated by many subsequent RFCs. A primary purpose of the…

Network traffic analysis for IR: FTP protocol with Wireshark

The File Transfer Protocol (FTP), as its name suggests, is designed for transferring files between computers. It is used for a variety of different…

MITRE ATT&CK: Drive-by compromise

Introduction In this article, we will discuss drive-by compromise attacks: exactly what they are and the different forms they can take. We will also…

Hack the Box (HTB) machines walkthrough series — Popcorn

Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…

Ethical hacking: Top 10 browser extensions for hacking

When it comes to ethical hacking, one of the critical skills you need to succeed is the usage of various tools to start your penetration testing…

Hack the Box (HTB) machines walkthrough series — Swagshop

Today we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine…

Cybersecurity Weekly: Ethiopia stops DDoS attack, Floridian city recovers from BEC, bug found in HackerOne

Ethiopia foils a mass cyber hacking attempt with prompt incident response. A city in Florida recovers almost all monetary losses after a BEC scam. A…

Hypertext transfer protocol (HTTP) with Wireshark

HTTP The Hypertext Transfer Protocol (HTTP) is the protocol that is used to request and serve web content. HTTP is a plaintext protocol that runs on…

Secure process audit

Introduction A secure process audit is a type of security audit in which the tester (auditor) tests the application or server or any network device…

Internet Relay Chat (IRC) protocol with Wireshark

Internet Relay Chat (IRC) uses a client-server model to provide a chatroom. A single IRC server is set up, and users connect to the server via IRC…

Hands-on training is key to understanding cybersecurity, says Infosec Skills author Howard Poston

“Everyone learns the most during the labs that accompany each lecture,” Infosec Skills author Howard Poston said. “That’s when you realize, ‘Oh,…

MITRE ATT&CK: Exploiting a public-facing application

Public/internet-facing applications are the most common applications present on the internet today. In this article, we’ll take a close look at…

Malware spotlight: Badware

Introduction: What is badware? Malware, as the name indicates, is malicious software designed to cause damage to computer systems and networks.…

MITRE ATT&CK: External remote services

Introduction In this article, we will discuss the various ways that attackers are able to abuse external remote services to gain unauthorized access…

How to become a cybersecurity analyst

This article will explore some interesting details from an episode of Infosec’s information security career podcast, Cyber Work. This episode, with…

Hack the Box (HTB) machines walkthrough series — Nibbles

Today we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine…

8 phishing simulation tips to promote more secure behavior

The goal of simulated phishing is to both prepare employees to spot real attacks while also encouraging them to report suspicious emails to your…

Simple Mail Transfer Protocol (SMTP) with Wireshark

The Simple Mail Transfer Protocol (SMTP) is one of three protocols used for email. The other two are Post Office Protocol v3 (POP3) and Internet…

Hack the Box (HTB) machines walkthrough series — Haystack

Today we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine…

Abusing email rules

Introduction For the average email user, setting up rules like automatic email forwarding is a harmless exercise. But for the individual whose role…

How deep learning is changing cybersecurity

The lesson here is clear. The use of machine learning for cybercrime is no longer a future threat. It is present threat, and an important part of…