Article What is a side-channel attack? Introduction The origin of the side-channel attack is closely related to the existence of physically observable phenomena caused by the execution of…
Article Hack the Box (HTB) machines walkthrough series — Cache Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article How Is Cryptography Used In Applications? Introduction Cryptography is used in software to protect the data from adversaries. The key principles of cryptography is to provide…
Article Android vulnerability allows attackers to spoof any phone number Introduction Because many employees use mobile devices for work, the widespread use of mobile devices has come to put company networks at risk for…
Article What is threat modeling? Introduction Everything that touches the internet or enterprise systems faces constant cyber threat from internal and external sources, malicious or…
Article Poor Credential Management Introduction As discussed in the previous article, use of credentials is one of the most common approaches used in applications and this is the de…
Article How To Exploit Credential Management Vulnerabilities Introduction In the previous article, we discussed some examples of poor credential management. Hardcoded credentials, improper error handling and…
Article WastedLocker malware: What it is, how it works and how to prevent it | Malware spotlight Introduction WastedLocker is the name of a data encryption malware, also called ransomware, which will be analyzed in this article. Systems infected…
Article 6 benefits of cyber threat modeling Continuing Infosec’s series on threat modeling, we are going to explore some of the biggest benefits organizations can realize from performing this…
Article How to mitigate Credential Management Vulnerabilities Introduction In the previous articles about credential management, we discussed how credentials can be used in applications and what can go wrong…
Article How to exploit integer overflow and underflow Integer overflows and underflows Integer overflow and underflow vulnerabilities can exist because of how memory and variables are handled in…
Article How to Mitigate Integer Overflow and Underflow Vulnerabilities Introduction to Integer Overflows and Underflows Integer overflow and underflow vulnerabilities are simple but extremely powerful vulnerabilities.…
Article CGEIT certification exam details and process [updated 2021] Introduction For those seeking certification in enterprise IT governance, the Certified in Governance of Enterprise IT (CGEIT) is a certification…
Article Hack the Box (HTB) machines walkthrough series — Blunder Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Introduction to HTTP (What Makes HTTP Vulnerabilities Possible) Understanding HTTP protocol and risks associated with the improper use of it in applications is an important step towards understanding application…
Article How to Exploit Poor HTTP Usage In the previous article, we discussed some fundamental concepts associated with the HTTP protocol and risks associated with it if it is used…
Article How to Mitigate Poor HTTP Usage Vulnerabilities In the last few articles, we discussed how HTTP is used and how various types of attacks can be introduced due to the poor use of HTTP. We have also…
Article Cybersecurity Weekly: Software skimmer, Android app flaws, Google ad phish Hackers hide software skimmer in social media sharing icons. Unpatched Android apps put millions of users at risk. MetaMask phishing steals…
Article Octopus Scanner malware: What it is, how it works and how to prevent it | Malware spotlight Introduction Octopus Scanner appeared somewhere in 2018. Although its creators are still unknown, the operation of Octopus Scanner has been…
Article Common security threats discovered through vulnerability assessments A vulnerability assessment can efficiently highlight a huge number of diverse security issues. Here are our top 10 security threats that companies…
Article Common vulnerability assessment types A vulnerability assessment is a process so complicated that it often requires a comprehensive approach. This would mean that a multiple…
Article Top 6 ransomware strains to watch out for in 2020 Ransomware remains the number one security risk to businesses and users, even though attacks have slowed down — or have they? Key findings from the…
Article Hack the Box (HTB) machines walkthrough series — Admirer Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article LazyAdmin: CTF walkthrough Today’s Capture the Flag (CTF) walkthrough will be performed via TryHackMe, a platform in which you can set up CTF machine over the cloud and access…
