Article Cybersecurity Weekly: Social media phish, Polish hackers busted, Fortinet vulnerability Phishing attacks target social network accounts. Polish police shut down a major group of hackers in the country. Fortinet VPN with default settings…
Article Fuzzing introduction: Definition, types and tools for cybersecurity pros Fuzzing is a black-box software testing technique and consists of finding implementation flaws and bugs by using malformed/semi-malformed payloads…
Article Lockphish phishing attack: Capturing android PINs & iPhone passcodes over https Phishing attacks are a common tactic for gaining initial access to a system. If an attacker can convince their target to hand over their login…
Article Copy-paste compromises Copy-paste compromises: Introduction and overview Although the concept of copy-paste compromises is not exactly new, there are now several different…
Article Cybercrime at scale: Dissecting a dark web phishing kit Introduction to dark web phishing kits The internet is like an iceberg: there is a lot more to it than can be seen from the surface. In addition to…
Article Tycoon malware: What it is, how it works and how to prevent it | Malware spotlight Introduction It has been said that a picture is worth a thousand words. In the world of malware, a picture is worth an infection — in other words, a…
Article ZION: 1.2 — VulnHub CTF walkthrough (part 1) Introduction In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by André Henrique. Per the…
Article Firewalls and IDS/IPS Introduction A typical corporate network makes use of a number of networking devices and mechanisms for preventing various attacks and maintaining…
Article Microsoft azure certification: Overview And career path The global COVID-19 pandemic has forced individuals and organizations to adopt new ways of doing daily tasks, from working to learning. It has also…
Article Hack the Box (HTB) machines walkthrough series — Cascade (Part 1) Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is the first half…
Article Cybersecurity Weekly: Medical center cyberattack, Shopify breach, Emotet election phish An Ohio medical center was offline following a security incident. Shopify announces a data breach affecting fewer than 200 merchants. The Emotet…
Article Microsoft Azure Fundamentals (AZ-900) Domains Overview Introduction The Microsoft Azure Fundamentals (AZ-900) certification exam is a great way for someone new to the field of cloud computing to…
Article What is a cyber range? Introduction When it comes to cyberthreats, it is not a matter of if, but when an organization is going to be targeted by cybercriminals. Will you…
Article Are open-source security tools secure? Weighing the pros and cons Introduction There is a myth that good security solutions are necessarily expensive, but the truth is that there are many options, not only at low…
Article Targeting the blockchain node Introduction to blockchain nodes HTTP and other web standards define how computers are supposed to communicate with one another, not the software…
Article Proof of work in consensus algorithms Introduction to blockchain consensus Blockchain systems are a collection of decentralized nodes that maintain a shared digital ledger. Without a…
Article Inside the Lyceum/Hexane malware The Lyceum/Hexane Cybercrime Group Lyceum and Hexane are two industry designations for an APT group that was discovered in August 2019 and was…
Article Monitoring business communication tools like Slack for data infiltration risks Introduction If you’re sending instant messages at work, chances are you’re using Slack, the business-oriented analog of WhatsApp or Discord. Slack…
Article How to pick the best cyber range for your cybersecurity training needs and budget Introduction Whether your organization is tired of being held back by the cybersecurity workforce skills gap or your management team has watched the…
Article What are command injection vulnerabilities? Command injection vulnerabilities are one of the most dangerous web vulnerabilities. Many security testers and bounty hunters aim to find command…
Article Principles of cryptography In layman’s terms, cryptography is the encryption and decryption of a written or text message between two parties. The practice relies on ciphers —…
Article Hack the Box (HTB) machines walkthrough series — Cascade (part 2) We’re continuing from Part 1 of this machine, where we carried out a lot of enumeration and decoding to gain shell access as the user s.smith while…
Article The State of Ransomware 2020: Key findings from Sophos & Malwarebytes Introduction Ransomware has become one of the most common and well-known threats to cybersecurity. 2020 saw a notable increase in ransomware attacks…
Article On-premises vs. cloud-based cyber ranges: Why virtual learning environments are best Introduction Most companies have been struggling with making decisions about infrastructure. Cloud or on-premises? Cyber ranges are not immune to…
