Article NIST CSF core functions: Detect The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide guidance for…
Article Cybersecurity Weekly: Citrix backdoor, Amazon data leak, Equifax to spend on data security Hackers patch Citrix servers to deploy their own backdoor. Amazon fires employees for leaking customer data. Equifax commits to spending $1 billion…
Article Malware spotlight: Wabbit Introduction Beginnings are often steeped in myth, legend and a good helping of storytelling, with malware being no exception to this rule. Way back…
Article MITRE ATT&CK: Disk structure wipe Introduction Denying the availability of systems and resources of an attack target is a main objective of many real-world attack campaigns. If you…
Article The user experience of security Introduction Back in the 1990s, when you mentioned cybersecurity to anyone, a glazed look would come over their face. And fair enough. Security, as…
Article MITRE ATT&CK: Disk content wipe Introduction Classic moves, no matter what the subject matter is, are timeless. Be it the hook shot in basketball, the uppercut in boxing or the…
Article Cybersecurity Weekly: Jeff Bezos hacked, DDoS mitigation firm admits to DDoS, TrickBot steals AD credentials Saudi prince allegedly hacked Jeff Bezos using WhatsApp. The founder of a DDoS mitigation firm admits to launching DDoS attacks. TrickBot now steals…
Article Wireshark for incident response 101 Wireshark is a freely available tool for network traffic analysis. It can be used to either analyze saved packet capture files or perform live…
Article Malware spotlight: EvilGnome Introduction The name EvilGnome may conjure images of a malicious creature of folklore. Instead, this name actually refers to an emerging type of…
Article Cybercrime investigator resume tips Get valuable tips for crafting an effective cybercrime investigator resume and increase your chances of landing your desired job in the field.
Article Network traffic analysis for IR: Analyzing DDoS attacks Introduction Distributed Denial-of-Service (DDoS) attacks are one of the powerful cyber weapons threat actors use today. We often hear about a…
Article Network traffic analysis for IR: SSH protocol with Wireshark SSH protocol The Secure Shell (SSH) is designed to allow confidential and authenticated remote access to a computer. Like the Telnet protocol, it…
Article Malware spotlight: Droppers There’s a cloud of confusion around droppers. Often seen as a sort of helper program in a cyberattack, droppers are actually a type of malware that…
Article Ongoing training is crucial for your career, says Infosec Skills author Manuel Leos Rivas Cybersecurity professionals need to refresh their skill sets every two or three years at most, Manuel said. Otherwise you risk falling behind.
Article Ethical hacking: Wireless hacking with Kismet To continue our ethical hacking series, we are now going to dive deeper into the process of wardriving, wireless hacking and the roles that the…
Article Top cybersecurity lessons for e-commerce website administrators Introduction In 2018, card-skimming malware targeting Magento-based online stores resulted in the infection of 7,339 e-commerce sites. Any customer…
Article Cybersecurity Weekly: Card details listed for sale, new phishing attack spotted, Sprint support conversations exposed Hackers list 30 million stolen payment card details for sale from the recent Wawa attack. Microsoft detects a new phishing attack that uses HTML…
Article Reverse engineering and malware analysis tools Reverse-engineering and malware analysis tools have an important role to play in terms of cybersecurity. For example, app developers and security…
Article You already own the tools needed to thwart attackers Microsoft comes with many tools included with the operating system. They can protect both physical and virtual computers, but they first need to be…
Article Securing windows 10 with local group policy When it comes to quickly making wide-ranging modifications to Windows systems, Group Policy is usually at the top of the list for ease-of use and…
Article Top IT security conferences you should attend in 2020 Introduction: Why attend conferences? Conferences are a great way to gain information and knowledge about advances on cutting-edge technologies but…
Article Application Management in Windows 10 Introduction Since the introduction of applications (apps) into the Windows operating system family, apps have become a sort of nexus between…
Article Debugging Basics Introduction The journey to coding mastery will come with a few bumps in the road. Some can be easily resolved by taking a closer look at the code.…
Article MITRE ATT&CK: Endpoint denial of service Introduction Denial-of-Service (DoS) attacks have been around since the 1970s, and they can be downright paralyzing to an organization. Not only…
