Article Infosec Skills author Vladimir de Turckheim explains the importance of hands-on Node.js security experience There is a hands-on experience gap in traditional security education. Hands-on experience not only helps in developing transferable skills but also…
Article What is enumeration? [updated 2021] Enumeration is defined as a process which establishes an active connection to the target hosts to discover potential attack vectors in the system,…
Article Wireless networking fundamentals for forensics With the evolution of Internet of Things (IoT) devices, there are countless wireless devices around us these days. Many people carry small-sized…
Article Investigating wireless attacks In an earlier article, we discussed the fundamentals of wireless networks: the common types of wireless devices, terminology used, WLAN security…
Article Software maturity models for AppSec initiatives Introduction Software is on the front lines of security: a 2019 report from GitLab found that almost half of respondents deploy software on-demand…
Article Email analysis In this article, we will explore the fundamentals concepts associated with email that will help us to perform email analysis. We will begin by…
Article Email forensics: Web-based clients This article discusses how to perform forensic investigations of Web-based email clients. While many organizations use Desktop based email clients…
Article Open source IDS: Snort or Suricata? [updated 2021] Although early types of Network Intrusion Detection Systems go back all the way to the early 1980s, the concept of IDS took off when Martin Roesch…
Article Proper use and training are the keys to mastering secure C++, says Infosec Skills author Martin Dubois “When we started, we simply didn’t think about security. We were alone in the world, and no one could connect to what we were doing,”
Article PenTest+: DoDD 8570 overview In November 2020, the US Department of Defense (DoD) has selected CompTIA PenTest+ as an approved certification for military personnel and defense…
Article Hacking clients with WPAD (web proxy auto-discovery) protocol [updated 2021] In this tutorial, we’ll take a look at how we can hack clients in the local network by using WPAD (Web Proxy Auto-Discovery). The WPAD protocol…
Article What is a Honey Pot? [updated 2021] Introduction: What is a Honeypot? Honeypots are special programs that are written for one purpose: to be exploited. Honeypots emulate the appearance…
Article Email forensics: desktop-based clients Emails are the most commonly used technology for exchanging messages between people/businesses using electronic media. With every technology, there…
Article Security vs. usability: Pros and cons of risk-based authentication Introduction Risk-based authentication (RBA) has to become part of the enterprise lexicon for a good reason. The authentication measures used to…
Article 8 reasons you may not want to use VPNs You probably have heard about VPNs before. It’s even possible that you might have used one. In this post, we will be learning about VPN, some of its…
Article Hack the Box (HTB) machines walkthrough series — Buff Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Upskilling to deepen employee engagement & retention Having a highly-skilled, engaged and motivated workforce is in everyone’s best interest, and it takes a combination of factors to support employees…
Article Average IT manager salary in 2021 IT management is a competitive career opportunity. Some companies hire from within, but you can still find job opportunities from IT firms looking…
Article Introduction to full disk encryption Encryption is the process of converting plaintext to encrypted text. Encrypted text hides the original data from unauthorized users since encrypted…
Article Incident response and recovery best practices for industrial control systems Introduction In collaboration with the North American Electric Reliability Corporation (NERC), the Federal Energy Regulatory Commission (FERC)…
Article Wireless network overview Wireless networks have become an inherent part of our life and we all use wireless networks in some form in our day to day life. Of all the…
Article Zerologon CVE-2020-1472: Technical overview and walkthrough Dive into our technical walkthrough of Zerologon, an elevation of privilege vulnerability exploited by attackers worldwide. Learn prevention measures!
Article Wireless attacks and mitigation Wireless networks have become an inherent part of our life and we all use wireless networks in some form in our day to day life. Of all the…
Article Cybersecurity Weekly: UScellular data breach, Emotet takedown, Washington State breach UScellular suffers a data breach. Europol announces a takedown of the Emotet botnet. A data breach exposes 1.6 million jobless claims filed in…
