Article How to mitigate Format String Vulnerabilities Introduction: This article provides an overview of various techniques that can be used to mitigate Format String vulnerabilities. In addition to the…
Article IoT Security Fundamentals: Intercepting and Manipulating Wireless Communications Introduction: IoT Manufacturers Favor Convenience over Security Because IoT security is still an afterthought, cybercriminals in general consider…
Article Linux vulnerabilities: How unpatched servers lead to persistent backdoors Vulnerability management is a challenge Humans make mistakes, software has bugs and some of these bugs are exploitable vulnerabilities. The…
Article 8 of the world's biggest insider threat security incidents Introduction If you work in security or are just interested in the general area of cybersecurity you will no doubt have heard of the dreaded insider…
Article Cybersecurity Weekly: Ransomware casualty, Google App Engine phish, SecOps struggling A patient dies after ransomware attack paralyzes German hospital systems. Google’s App Engine feature was abused to create phishing pages. SecOps…
Article DoD 8570 IAT certification and requirements [updated 2020] The US Department of Defense (DoD) hosts a number of directives that set out the requirements of their workforce. DoD 8570, titled “Information…
Article Endpoint hardening (best practices) Endpoint hardening: If you were to tell the average person that you were going to be performing this task for your organization, they'd probably ask…
Article Encryption vs Encoding Encryption and decryption Encryption is the process of converting plaintext to encrypted text. Since encrypted text cannot be read by anyone,…
Article The OSI model and TCP/IP model What is the OSI model? The OSI model was the primary standard model for network communications, adopted by all major telecommunication companies and…
Article 8 best WordPress security plugins Over a third of websites (37%) are hosted on WordPress, making it the world’s most popular content management system (CMS). This includes everything…
Article IoT security fundamentals: IoT vs OT (Operational Technology) Introduction: Knowing the Notions Industrial Internet of Things (IIoT) incorporates technologies such as machine learning, machine-to-machine (M2M)…
Article Zero-day Sophos XG firewall vulnerability: an exploit guide for pentesters The Sophos XG firewall vulnerability The Sophos XG Firewall recently had a publicly-reported zero-day vulnerability. The vulnerability in question…
Article How to verify and respond to vulnerability reports from security researchers Introduction Part of doing business in today’s increasingly cyber-world is dealing with security vulnerabilities and bugs that come up along the…
Article AWS user management Introduction In order to keep your AWS environment secure while allowing your users to properly utilize resources, you must ensure that users are…
Article IPv4 and IPv6 overview IP stands for internet protocol. The internet protocol is the protocol which allows internetworking at the internet layer of the internet protocol…
Article Understanding DoS attacks and the best free DoS attacking tools [updated in 2020] A Denial of Service (DoS) attack is designed to cause service outages. These attacks can easily cost an organization a significant amount in damages…
Article PDF file format: Basic structure [updated 2020] We all know that there are a number of attacks where an attacker includes some shellcode in a PDF document. This shellcode uses some kind of…
Article Important SQLMap commands The SQLMap tool can be found in every penetration tester's toolbox. It is one of the most popular and powerful tools when it comes to exploiting SQL…
Article Hacking Microsoft teams vulnerabilities: A step-by-step guide We are living in an era where technology is part of our lives and a primary valuable resource for personal and professional tasks. The use of online…
Article Breached passwords: The most frequently used and compromised passwords of the year Passwords should be secret, so why do so many people wind up using the same popular passwords? The truth is, no one sets out to choose a password…
Article Hack the Box (HTB) machines walkthrough series - Traceback Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Blockchain structure Introduction The blockchain gets its name from its underlying structure. The blockchain is organized as a series of “blocks” that are “chained”…
Article Hash functions in blockchain Hash functions are one of the most extensively-used cryptographic algorithms in blockchain technology. They are cryptographic (but not encryption)…
Article Public-key cryptography in blockchain How public-key cryptography works Public-key or asymmetric cryptography is one of the two main types of encryption algorithms. Its names come from…
