Article Average SSCP Salary [Updated 2021] The ISC2 Systems Security Certified Practitioner (SSCP) is an entry-level data security certification. It focuses on these primary domains of…
Article Securing the home office: Printer security risks (and mitigations) The drastic increase in working from home due to the COVID-19 pandemic has brought a traditional weak point within organizational networks to light…
Article HA: Narak CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named “Hacking Articles”. As…
Article Phishing: Reputational damages Introduction When phishing and damages are thought of in the same sentence, the typical thoughts of many are the loss of data due to theft, identity…
Article How to hack a phone charger Introduction We live in an era where malware is targeting smartphones and other devices from the Internet of the Things (IoT) world. This is not a…
Article Python for network penetration testing: Hacking Windows domain controllers with impacket Python tools Impacket is one of the most popular tools available for Network Penetration testing. This toolset is a great example of the power of python in…
Article 5 changes the CPRA makes to the CCPA that you need to know On election day 2020, Californians did more than vote for a president. They also passed the California Privacy Rights Act (CPRA), which clarified…
Article Python for Network Penetration Testing: Best Practices and Evasion Techniques Being stealthy is one of the most important aspects of a network penetration test. There will often be intermediary devices like IDS and IPS which…
Article Attacking Web Applications With Python: Web Scraper Python Web scrapers are useful in extracting information from websites. This article provides an overview of what web scrapers are and how they are related…
Article Hashcat tutorial for beginners [updated 2021] Hashcat is a popular password cracker and designed to break even the most complex passwords representation. To do this, it enables the cracking of a…
Article Role and purpose of threat modeling in software development Threat modeling and software development Threat modeling is an exercise designed to identify the potential cybersecurity threats and attack surface…
Article Security tool investments: Complexity vs. practicality Introduction As cyber threats rise, there has been a rush of security vendors offering tools to prevent data breaches. Today, security professionals…
Article Attacking Web Applications With Python: Exploiting Web Forms and Requests This article is to introduce web application penetration testers with python and explain how python can be used for making customized HTTP requests…
Article Attacking Web Applications With Python: Recommended Tools Python is a powerful scripting language and it is used in developing several real world tools that are heavily used by security professionals. This…
Article Email-based attacks with Python: Phishing, email bombing and more The ability to send emails using an automated software tool such a python script can be useful in performing mass email based phishing attacks. This…
Article Cybersecurity Weekly: New SolarWinds backdoor found, affects Microsoft and VMWare A new SUPERNOVA backdoor found in SolarWinds cyberattack analysis. Microsoft says its systems were also breached in the SolarWinds hack. VMware is…
Article Top 6 JavaScript plugin security risks Introduction If you're on the web for more than about two hours, there's a good chance that you'll hear someone use the word “analytics.” This does…
Article Comparing endpoint security: EPP vs. EDR vs. XDR What are EDR, EPP and XDR? What is EDR? Endpoint detection and response is a type of security solution that provides real-time visibility into…
Article SO SIMPLE 1: CTF walkthrough In this article, we will solve a capture the flag (CTF) challenge that was posted on the VulnHub website by an author named Roel. As per the…
Article MITRE Shield: An active defense and adversary engagement knowledge base Introduction When it comes to collecting tips, tricks and workarounds, it is easy to see quickly that certain concepts and methods are strong…
Article What is a vulnerability disclosure policy (VDP)? Introduction The vulnerability disclosure policy, or VDP, may be a term that you have heard thrown around at work, in an elevator, at an event and…
Article Phishing domain lawsuits and the Computer Fraud and Abuse Act Introduction The worlds of trademark law and marketing seem to be constantly at odds with each other, occasionally collapsing into a court of law…
Article Cybersecurity Predictions For 2021 Here we are again for the annual predictions of the trends and events that will impact the cybersecurity landscape in 2021. Let’s try to predict…
Article What is the difference between the NICE framework and DoDD 8140/8570? For those looking into government work, or for those just plain interested in the different cybersecurity frameworks out there, have probably…
