Article Blockchain security overview Introduction Despite being over a decade old, blockchain has only really taken off within the last few years. During this time, it has moved from a…
Article Fundamentals of blockchain security Introduction The goal of blockchain is to create a fully decentralized, trustless digital ledger. This is an ambitious goal since most ledger…
Article Active directory series: Unconstrained delegation In this article series, we will look into the most famous ways that can be used to attack Active Directory and achieve persistence. Note: Attacks…
Article Dark web fraud: How-to guides make cybercrime too easy Introduction to dark web fraud Dark web fraud constitutes a global information security problem. The widespread availability of how-to guides…
Article Cybersecurity Weekly: O365 phish, Google Analytics exploit, LG Electronics ransomware Office 365 users are being targeted by a Coronavirus employee training phish. Hackers are using Google Analytics to bypass web security and steal…
Article Preventing cybersecurity employee burnout and churn: 6 tips for managers Introduction “Burnout” and “churn” are two words that probably send shivers down the spines of most cybersecurity managers. After all, employees who…
Article How to get promoted in a cybersecurity career Introduction: What the cybersecurity talent market looks like at the moment Are you considering a career in cybersecurity? If so, this is actually a…
Article Vishing spikes as workforces go remote: 6 vishing prevention tips anyone can follow Introduction With thousands of teams worldwide being asked to work remotely to help contain the spread of COVID-19, scammers have a fertile ground…
Article All My Stripes: The New Business Imperative of LGBTQ+ Inclusion “Don’t talk, just act. Don’t say, just show. Don’t promise, just prove.” -Hiroko Tsuchimoto As another LGBTQ+ Pride month comes to a close and I…
Article Top soft skills and the Federal Cybersecurity Reskilling Academy In this episode of Infosec’s Cyber Work podcast, host Chris Sienko spoke with Chris Triolo, VP of customer success for Respond Software. They…
Article Agent Tesla: What it is, how it works and why it’s targeting energy companies Introduction to Agent Tesla Agent Tesla appeared for the first time in 2014, but it has been just recently used for attacks on energy companies…
Article Djinn 1: CTF walkthrough, part 1 In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named “0xmzfr.” As per the…
Article 4 tips for phishing field employees [Updated 2020] Phishing is easy. Let’s just get that out of the way. It’s easy for an attacker, and, if you have the right tools (such as InfoSec Institute’s…
Article Cookies: An overview of associated privacy and security risks Anyone who regularly browses the internet must have seen some sort of pop-up or other form of alert about the use of cookies. Some sites even give…
Article Security risks of outdated encryption: Is your data really secure? Introduction They say that those who fail to learn history are doomed to repeat it. A salient factor in the defeat of Austria by Prussia in the 1866…
Article Cybersecurity Weekly: Healthcare fends off attacks, Apache flaws, out-of-band Windows patches Healthcare organizations are successfully fending off attacks throughout the pandemic. Critical Apache Guacamole flaws put remote desktops at risk…
Article Top 9 free security training tools Cybersecurity training is one of the best defenses against cyber attacks targeting organizations and individuals alike. Although security training…
Article Best tools to perform steganography [updated 2020] In the past few years, the term “steganography” has attracted the attention of law enforcement agencies. This technique has been used by hackers to…
Article Lessons learned from the Fresenius ransomware cyberattack Introduction to the Snake ransomware Fresenius is a German company that provides various health care services, including services for dialysis of…
Article Threat modeling has huge benefits, says Infosec Skills author Geoffrey Hill Threat modeling is especially exciting, Geoffrey said, because it has a “triple whammy” benefit for security professionals. “It's easy to teach.…
Article Key findings from Infosec’s 2020 IT & security talent pipeline study Fewer challenges facing our industry are more pervasive than the cybersecurity talent shortage. It’s an advanced persistent threat of the human…
Article How to identify and prevent firmware vulnerabilities Introduction As creators of computer software begin to take security vulnerabilities more seriously, hackers are increasingly targeting the lower…
Article DMV 1: VulnHub Capture the Flag (CTF) walkthrough In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub by the author Jonathan. As per the information…
Article 14 best open-source web application vulnerability scanners [updated for 2020] In the past, many popular websites have been hacked. Hackers are active and always trying to hack websites and leak data. This is why security…
