Article Cybersecurity Weekly: LokiBot spearphish, Marriott breach, Zoom vulnerability A spearphishing campaign exploits COVID-19 to spread Lokibot infostealer. Marriott suffers a second breach, exposing data of 5.2 million hotel…
Article Network traffic analysis for IR: Data exfiltration Introduction Understanding network behavior is a prerequisite for developing effective incident detection and response capabilities. ESG research…
Article Web server protection: Web application firewalls for web server protection Introduction Firewalls are an integral part of the tools necessary in securing web servers. In this article, we will discuss all relevant aspects of…
Article Cybersecurity reporting and closing the skills gap with Dark Reading's Kelly Sheridan The need for talented cybersecurity professionals is on the rise, but a huge amount of job postings go unfilled. Why is that? Cybersecurity is in…
Article Web server security: Infrastructure components Introduction Cybercriminals understand that your website is not only the face of your organization, but often also its weakest link. With just one…
Article How to work with HR or recruiters to improve your cybersecurity hiring strategy Is there a talent gap in your organization? With the IT security industry’s skills shortage and the high demand for advanced cybersecurity pros,…
Article Malware spotlight: Sodinokibi Introduction Ransomware is not new at this point in time and will be with us for the foreseeable future, as new types of ransomware are constantly…
Article Information security auditor certifications Introduction For those with a passion for information security and a mind for auditing, the role of information security auditor is tailor-made. Not…
Article CTF walkthrough - Five86: 2 In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub. As you may know from previous articles,…
Article Network forensics overview Most attacks move through the network before hitting the target and they leave some trace. According to Locard’s exchange principle, “every contact…
Article Overview of phishing techniques: Order/delivery notifications Introduction One thing no one can deny is that online shopping is a common practice these days. With this, of course, comes order notifications and…
Article Ethical hacking: TCP/IP for hackers In this article, we’ll discuss TCP/IP: the importance of mastering it and how this mastery can be beneficial to hackers. We will then look at how…
Article Cybersecurity Weekly: Travelex pays ransom, Maze hacks HMR, Microsoft buys corp.com Travelex paid $2.3 million ransom to restore operations after a ransomware attack. The Maze ransomware gang discloses data from drug testing firm…
Article Overview of Phishing Techniques: Fake Websites Introduction It’s an average Tuesday afternoon when you get an email from your bank. The fraud team is reaching out because they detected some…
Article Lampion malware: what it is, how it works and how to prevent it | Malware spotlight Introduction The Lampion malware is spread through emails containing a link that downloads a .zip file with malicious files in it. It’s a banking…
Article Phishing techniques: Expired password/account Nowadays, a fair number of phishing attacks have been linked to expired password scams. This is a tactic used to steal identifying information and…
Article Hack the Box (HTB) machines walkthrough series — Forest Today we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Keeping Alexa out of the boardroom (and the bedroom office): IoT security tips for remote employees Introduction I can’t help myself. I find myself liking Alexa. She/he/it isn’t exactly a friend, but I can play music and find out the weather and do…
Article Symfonos 5.2: CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named ‘Zayotic.’ As per the…
Article Cybersecurity Weekly: New COVID domains, Pulse Secure VPN, Nemty goes private Thousands of newly-registered Coronavirus-themed domains have appeared since early March. Patched Pulse Secure VPNs could still expose organizations…
Article Windows Internals for Malware Analysis Introduction This article defines Windows internals and illustrates tools which can be used to explore Windows internal systems. We’ll be defining…
Article ICS/SCADA Security Technologies and Tools Introduction Industrial Control System (ICS)-embedded architectures differ from standard enterprise systems. ICS are interconnected, like enterprise…
Article Growing the number of women in cybersecurity with Olivia Rose Cybersecurity is a field on the cutting edge, yet when it comes to gender parity, there’s still much progress to be made. For women, breaking into a…
Article Windows 10 Auditing Features Introduction "At 7:04am on July 22nd, our bad actor successfully obtained access to the user's workstation. At 7:06am, they attempted to install…
