Article What types of attack scenarios can you simulate in a cyber range? Introduction Just as in any other endeavor, practice makes perfect, and the same goes for preparing for cyberattacks. For organizations looking to…
Article Flip the funnel: Fixing the cybersecurity talent pipeline challenge Organizations of all sizes are dealing with a critical challenge: the demand for cybersecurity talent continues to grossly outpace the supply of…
Article Hack the Box (HTB) machine walkthrough series: Vault Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Infosec Skills author Joseph South found "love at first sight" in cybersecurity "I'm not teaching you different theories of how you would penetrate a network based on some book written by someone that hasn't done it in 10…
Article Infosec Skills author teaches people-process-technology approach for "secure software development" "Technology is as good as the processes implemented around it, and processes are as good as the people who execute them, so never stop learning,…
Article Network Security Technologies Knowledge of various network security technologies greatly aid in Network Forensic Investigations. This article outlines some network security…
Article Unpatched address bar spoofing vulnerability impacts major mobile browsers Introduction A number of web browsers have been affected by an address bar spoofing vulnerability that could lead to malware infections and…
Article Linux security and APTs: Identifying threats and reducing risk Introduction Think your Linux system is immune to malware? Well, think again. Advanced attack groups have sophisticated PHP rootkits, web shells,…
Article Sources of network forensic evidence One of the key aspects of any successful forensic investigation is the evidence collection phase. Identifying the sources of evidence while…
Article Developing security talent and teams: A roundtable discussion During the Infosec Inspire Cyber Skills Summit, we had the chance to gain valuable insights on developing talent from a panel of leading…
Article Network security tools (and their role in forensic investigations) The effectiveness of network forensics is closely related to the network security tools used in an organization. We have covered common enterprise…
Article Log analysis Log analysis counts for a lot in an investigation, and this article provides a gentle introduction to log analysis. Log analysis is exactly what it…
Article Gamification — Cybersecurity’s turn to play Games are everywhere, but is there room for gamification in the workplace — especially when it comes to vital business functions like security…
Article How to protect a Windows 10 host against malware Contrary to popular belief, malware is not a Space Cowboy costume — that would be "Mal Wear." Malware is the shortened form of "Malicious Software",…
Article Influencing security mindsets to build a culture of cybersecurity Cybersecurity specialists aren’t the only people who play an indispensable role in protecting businesses from cyberattacks. Every employee who uses…
Article How to use Microsoft DirectAccess When you are physically located at an organization's site, it is relatively straightforward to present users with an experience that is consistent…
Article Wireless analysis In this article, we will discuss how to perform wireless analysis, specifically on Wi-Fi networks. We will perform active packet capturing by using…
Article Protocol analysis using Wireshark Protocol analysis is examination of one or more fields within a protocol’s data structure during a network investigation. Understanding the bits and…
Article RansomExx: The malware that attacks Linux OS RansomExx is the new malware used by criminals to attack both Windows and Linux environments. With companies using a mixed environment of Windows…
Article Ask us anything about security awareness, behavior & culture (session #2) It is vital that cybersecurity programs find a balance between securing the operations that their businesses rely on and enabling them to work…
Article Top five open source intelligence (OSINT) tools [updated 2021] In this article, we will look at the top five open-source intelligence tools. Before we jump directly into the tools, it is essential to understand…
Article Ask us anything about developing security talent and teams (session #2) Organizations of all sizes continually struggle to address modern-day cybersecurity talent supply and demand disparities. Thankfully, there are…
Article BAHAMUT: Uncovering a massive hack-for-hire cyberespionage group Introduction In October 2020, the BlackBerry Research Operations team released a comprehensive report highlighting the reach, tradecraft and…
Article Infosec Skills author Matthew Campagnola is forging a new path in ICS security "I coalesce broad themes that I've had to embody over the past couple of years. The course crosses a lot of different areas, and they're very broad,…
