Article CEWLKID: 1 VulnHub CTF walkthrough, part 1 Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article Secure network protocols For a very long time, having devices just work on a network was a feat in itself. This meant that the protocols involved didn't necessarily need to…
Article ICS cyber ranges: Hands-on training for industrial control system security teams Incident response has been a pillar of cybersecurity for decades. But plans to account for the unique risks surrounding the specialized command and…
Article Cellular Networks and Mobile Security Despite their seemingly endless coverage (your mileage will definitely vary), cellular network security has proven to be surprisingly robust over…
Article ICS/SCADA threats and threat actors Industrial control systems (ICS) and Supervisory Control And Data Acquisition (SCADA) systems play a critical role in critical infrastructure and…
Article Machine learning for social engineering Social engineering is a form of communication that aims at gaining people’s trust at first and then prompting them to share sensitive information or…
Article Cybersecurity weekly: Acer hacked, Exchange targeted, Zoom bugs The REvil ransomware gang hacked Acer and is demanding a $50 million ransom. Microsoft Exchange servers are now targeted by BlackKingdom ransomware.…
Article CGEIT certification: Overview and career path [updated 2021] A cert that targets enterprise leadership The importance of IT governance for a company is impossible to ignore. Its goal is to ensure that the IT…
Article MRBMiner malware: What it is, how it works and how to prevent it | Malware spotlight MrbMiner is a recent malware discovered and documented by the Tencent Team last September. It targets MSSQL databases and implants cryptomining…
Article Python for pentesting: Programming, exploits and attacks Why use Python for pentesting? Python is one of the most popular programming languages in existence for several reasons. It’s easy to use, has a…
Article Python language basics: understanding exception handling Introduction to exceptions Ideally, an application will always work exactly as expected. In reality, things can go wrong for several reasons. A…
Article Python for exploit development: All about buffer overflows What is a buffer overflow? Any application that takes users’ input needs somewhere to store that user input. This requires the application to…
Article Certifications compared: CISSP vs. GSEC [updated 2021] CISSP and GSEC are both popular cybersecurity certifications, but they serve different purposes. Find out which one is right for you.
Article Python for exploit development: Common vulnerabilities and exploits Python is one of the most famous and popular programming languages for a variety of reasons. It is a very easy language to learn and use, yet is…
Article CEWLKID: 1 VulnHub CTF walkthrough, part 2 Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article Python for network penetration testing: An overview Python is an extremely powerful and versatile scripting language. It is designed to be easy to write, and its large number of libraries provide a…
Article CGEIT certification exam Domain 1: Governance of Enterprise IT [updated 2021] Introduction Those working in enterprise IT responsible for managing, directing and supporting governance of IT have the option of gaining…
Article Tomato 1: VulnHub CTF walkthrough Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article 5 cybersecurity talent initiatives working to close the skills gap As data breaches and cyberattacks get more and more sophisticated and frequent, organizations are feeling the impact of a cyber skills gap even more…
Article CGEIT certification exam study resources [updated 2021] So, you want to be Certified in the Governance of Enterprise IT (CGEIT). To make this happen, you’ll need to be mindful of the best books, study…
Article Volodya/BuggiCorp Windows exploit developer: What you need to know Check Point researchers unveiled the identity of two authors responsible for zero-day attacks on Windows using a novel technique that allows them to…
Article Cybersecurity Weekly: California phished, ransomware tied to Hafnium, MobiKwik breach A phishing attack leads to a breach at California State Controller. Microsoft Exchange servers are now targeted by BlackKingdom ransomware. A Zoom…
Article Malicious Excel attachments bypass security controls using .NET library A recent threat group called Epic Manchego is using a new technique to create Excel files to bypass antivirus (AV) and and get low detection rates.…
Article Y0usef 1 VulnHub CTF walkthrough This is an easy CTF tasking you with gaining root access to the machine. To complete this task, two flags will need to be read.
