Article CGEIT certification exam Domain 2: IT Resources [Updated 2021] Introduction The Certified in Governance of Enterprise IT, or CGEIT, is an IT governance certification offered by ISACA. Comparing the 2020 CGEIT…
Article CGEIT certification exam Domain 3: Benefits Realization [updated 2021] Introduction The Certified in Governance of Enterprise IT, or CGEIT, is an IT governance certification offered by ISACA. In July of 2020, ISACA…
Article CGEIT certification exam Domain 4: Risk optimization [updated 2021] Introduction The Certified in Governance of Enterprise IT, or CGEIT, is an IT governance certification offered by ISACA. The certification exam…
Article Excel 4.0 malicious macro exploits: What you need to know Adversaries are finding new ways to weaponize Excel 4.0 macros for delivering additional, more sophisticated malware.
Article Cybersecurity Weekly: Vaccine phish, firewall evasion, VMware authentication fix Phishing attacks use vaccine surveys to steal personal info. Hackers are using a Windows OS feature to evade firewalls. VMware fixes an…
Article APT Sandworm (NotPetya) technical overview Sandworm, also known as Telebots, is one of the most dangerous Russian threat actors impacting industrial control systems.
Article 3 tips to build a stronger cybersecurity team with Katie Boswell and Jason Jury Learn how to build a stronger cybersecurity team with tips from KPMG Cyber’s Katie Boswell and Booz Allen Hamilton’s Jason Jury.
Article Common job titles and salaries for CGEIT-certified professionals [updated 2021] Introduction ISACA's Certified in the Governance of Enterprise IT (CGEIT) certification gives you the credibility to discuss critical issues around…
Article JavaScript obfuscator: Overview and technical overview JavaScript cyberattacks are on the rise, meaning you need to be extra careful when opening your emails.
Article Uncovering and remediating malicious activity: From discovery to incident handling Need a “cybersecurity playbook” for incident response? A recent CISA alert used threat intel from five counties to create this best practice guide.
Article Blackrota abused Docker remote API to deliver CobalStrike beacon The Blackrota backdoor is a piece of malware analyzed by NetLab and is the most obfuscated Go-developed executable and linkable format (ELF) malware…
Article Cybersecurity Weekly: DNS vulnerabilities, W-2 phishing scam, Google URL malware DNS vulnerabilities affect over 100 million devices. A W-2 phishing scam is targeting the 2021 tax season. Microsoft warns of malware delivery via…
Article Turla Crutch backdoor: analysis and recommendations Crutch is a newly discovered backdoor from Turla advanced persistent threat (APT), a Russian-linked threat actor, used in a recent cyberattack…
Article What is a security champion? Definition, necessity and employee empowerment [Updated 2021] Does your organization need a security champion? Learn how they can help elevate cybersecurity and empower employees through your organization.
Article Rapid threat model prototyping: Introduction and overview Choosing a form of threat modeling can help protect your organization from security threats.
Article Kira 1: VulnHub CTF walkthrough Bassam Assiri is the author of this VulnHub CTF, which challenges users to gain root access and read the flag file.
Article Cybersecurity Weekly: One-click hack, Discord Nitro ransomware, Codecov hacked A one-click hack was found in popular desktop apps. Discord Nitro gift codes are now demanded as ransomware payments. The Codecov code coverage tool…
Article Encryption and etcd: The key to securing Kubernetes Kubernetes is great for container orchestration, but is it secure? Learn about etcd and encryption — and how they relate to cybersecurity.
Article PMP®️ domain information & overview [updated 2021] A Project Management Professional (PMP) certificate from the Project Management Institute can enhance and progress your career.
Article TeamTNT evades detection with new malware using ld_preload technique A new piece of malware from the TeamTNT threat group is using a different Unix technique to evade detection and to install a bot in the compromised…
Article FUNBOX: VulnHub CTF walkthrough Explore this Vulnhub.com capture the flag (CTF) to gain some experience gaining root access and reading the flag file.
Article Maintaining Your CGEIT Certification: Renewal Requirements [updated 2021] Introduction The Certified in Governance of Enterprise IT certification, or CGEIT, is a vendor-neutral IT governance certification hosted by ISACA.…
Article Cryptocurrency Enforcement Framework: Impacts on digital forensic investigations A new Cryptocurrency Enforcement Framework was recently released. Learn how it may impact cryptocurrency, cybersecurity and digital forensics…
Article Odin 1: VulnHub CTF walkthrough This VulnHub capture the flag (CTF) from user y0usef is for entry-level users looking to get experience obtaining root access of a machine and read…
