Article RTS threshold configuration for improved wireless network performance [updated 2020] In a scenario where a lot of users connect to a wireless network and where they occasionally lose their connections, an individual or a company can…
Article Hack the Box (HTB) machines walkthrough series — Nest, part 2 Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Work-from-home network traffic spikes: Are your employees vulnerable? A shift to work-from-home culture Social distancing during the COVID-19 pandemic has forced employees to work from home, and many businesses were…
Article Network design: Firewall, IDS/IPS There are many different types of devices and mechanisms within the security environment to provide a layered approach of defense. This is so that…
Article Cybersecurity Weekly: Industrial VPN flaws, Zoom bug, New side-channel attacks Industrial VPN flaws let attackers target critical infrastructures. A new Zoom bug allowed snoopers to crack private meeting passwords in minutes. A…
Article Lab: Hacking an android device with MSFvenom [updated 2020] In this lab, we are going to learn how you can hack an android mobile device using MSFvenom and the Metasploit framework. We will use MSFvenom for…
Article Tesla Model 3 vulnerability: What you need to know about the web browser bug Introduction In 2020, Jacob Archuleta, a researcher nicknamed Nullze, discovered an important information security vulnerability on the web browser…
Article Cyber Work Podcast recap: What does a military forensics and incident responder do? Introduction Cybersecurity meets CSI in the exciting field of digital forensics and incident response. In this role, tech-savvy investigators sift…
Article The most common social engineering attacks [updated 2020] What's the easiest way into a locked system? Ask someone for the key. Here are the most common social engineering attacks targeting employees.
Article Capture the flag: A walkthrough of SunCSR’s Sumo Introduction Welcome to my write-up for the Sumo machine from VulnHub. This is a beginner-level, intentionally vulnerable virtual machine created…
Article Securing cookies with httponly and secure flags [updated 2020] Securing cookies is an important subject. Think about an authentication cookie. When the attacker is able to grab this cookie, he can impersonate…
Article Hack the Box (HTB) machines walkthrough series — ServMon Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Top 10 highest-paying jobs in information security It's a good time to be in the security field. The shortage of talent to fill those jobs motivates employers to offer top salaries to candidates.
Article Physical access control How many managers think that it makes no sense to spend money protecting information that can be reconstructed? What can really happen?…
Article What are black box, grey box, and white box penetration testing? [Updated 2020] Pentesters are apparently huge fans of colors. Different roles within pentesting assignments are designated as Red Team, Blue Team, Purple Team and…
Article How to detect and prevent web shells: New guidance from the NSA and the Australian government Introduction It’s not every day that governments of different countries draft guidance rules about any subject together. It is even rarer that they…
Article Cybersecurity Weekly: Capital One fined, Qualcomm bugs, HaveIBeenPwned open sourced Capital One fined for 2019 data breach affecting 106 million users. Nearly 50% of all smartphones affected by Qualcomm Snapdragon bugs. Have I Been…
Article National Counterintelligence and Security Center: 5 priorities for 2020 Introduction: NCSC’s role For years, the United States has faced increasingly aggressive and complex threats from foreign intelligence entities…
Article Zeus Sphinx: What it is, how it works and how to prevent it | Malware spotlight Introduction When something is described as “rising from the ashes,” the mythological creature known as the phoenix normally comes to mind. For…
Article Hacking the Tor network: Follow up [updated 2020] In a previous post, I presented the main techniques used to hack Tor networks and de-anonymize Tor users. Law enforcement and intelligence agencies…
Article Email attack trend predictions for 2020 Email continues to be a major method of communication in both personal and professional contexts. The sheer proliferation of information transmitted…
Article Top 6 cybersecurity books for IT auditors Introduction Like many other information security professionals, you probably have a library of books on the topic of your career choice. Not only…
Article SIM swapping security risks: What they are and how to protect yourself The joke that someone needs to have a mobile phone “surgically removed” is not too far from the mark. Mobile phones have become ubiquitous and…
Article bossplayersctf 1: VulnHub CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge which was posted on VulnHub. As you may know from previous articles, VulnHub is a…
