Article Cybersecurity Weekly: Puerto Rico loses millions, Paypal phishing scam, new Emotet Wi-Fi spreading function The Puerto Rico government was hit by a $2.6 million phishing scam. An active PayPal phishing scam targets SSNs and passport photos. The Emotet…
Article What is NoSQL injection? Injection attacks are considered some of the most dangerous types of vulnerabilities in existence. According to the OWASP Top Ten List of web…
Article Web server security: Web server hardening A web server is not just any other device that you employ in your network environment. Unlike other devices sitting behind layers of defenses and…
Article Driver Security in Windows 10 Drivers are an essential group of files that allow a hardware component(s) to communicate with the computer’s operating system (OS). If an attacker…
Article How to use Microsoft passport in Windows 10 Passwords, the long-relied-upon information security measure that helps secure billions of user accounts daily, have become a little long in the…
Article Online training should be engaging and hands-on, says Infosec Skills instructor Ross Casanova “I want students to feel like I’m talking directly to them and engaging them in the conversation,” says Infosec Skills instructor Ross Casanova.
Article NIST CSF: Implementing NIST CSF Introduction The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide…
Article Network traffic analysis for IR: Analyzing IoT attacks Introduction The Internet of Things (IoT) incorporates everything from tiny sensors and devices to huge structures like cloud computing. IoT…
Article How to use Windows Backup and Restore Utility Introduction Since its first appearance in the Windows OS family in Windows 7, the Backup and Restore utility has been the go-to for managing the…
Article Phishing techniques: Asking for sensitive information via email Introduction Email has been a critical part of our everyday communications since the 1990s. Thanks to its affordability and ease of use, email…
Article Hack the Box (HTB) machines walkthrough series — Heist Today we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine…
Article How to use Windows Recovery Environment Introduction It’s frustrating when a Windows operating system fails to boot or restarts unexpectedly. Maybe the problem is a corrupted disk or…
Article Types of user accounts in Windows 10 (local, domain, Microsoft) Years ago, I was just starting out in tech. I was located at a remote facility compared to the rest of the company, and we had someone that was…
Article Phishing attachment hides malicious macros from security tools A clever new wave of phishing attacks prove malicious, macro-enabled attachments can still bypass security tools and pack a serious punch under the…
Article Secure your APIs — don’t give hackers a chance! Introduction The use of APIs is now ubiquitous, and the “API economy” is well and truly established. From cloud-based services, back-end services…
Article Hack the Box (HTB) machines walkthrough series — Aragog Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Cybersecurity Weekly: Amazon implements Ring 2FA, WordPress trojan-infected themes, AdSense email extortion Amazon enables mandatory 2-factor authentication following recent Ring hacks. 20,000 WordPress websites were infected through trojan-infected…
Article Network Traffic Analysis for IR — Discovering RATs Introduction A Remote Access Trojan (RAT) is part of the malware family. It enables covert surveillance, a backdoor channel and unfettered and…
Article Pros & cons of using an LMS for security awareness & training Can you use your learning management system to deliver employee security awareness and training? In this post, we’ll cover the pros and cons of…
Article Admin vs non-admin accounts in Windows 10 Coke versus Pepsi. Mac versus PC. Red versus Blue. There are some arguments that have been around for so long that the idea of one side or the other…
Article MAC filtering in Windows 10 There are many options available to a Windows 10 user when it comes to managing computer networks, both wired and wireless. Some of them are…
Article Certifications compared: GCFE vs. CFCE vs. CCE What role does forensic science play in cybercrime investigations? As cybercrimes grow in terms of number of attacks and cost to organizations and…
Article Introduction to the OWASP API Top Ten The OWASP Project The Open Web Application Security Project (OWASP) is best known for its list of the top ten web application vulnerabilities. This…
Article North America's top IT security conferences in 2020 Introduction: Why attend conferences? This year will bring plenty of opportunities for professionals to attend conferences, getting them exposed to…