Article Vigilante Malware: Do We Need a Cyber Vigilante? [Updated 2019] The Mystery Behind the Linux.Wifatch Malware Thousands of IoT devices across the world have been infected with a new strain of malware, but this…
Article Assembly Basics Introduction This article gives details about assembly programming for the Intel 8086 microprocessor. It also presents very clear details by…
Article Book Excerpt: Web Application Security, A Beginner's Guide [Updated 2019] Web Application Security: A Beginner’s Guide provides IT professionals with an actionable, rock-solid foundation in Web application security--from a…
Article SAP Security for CISO part 14: SOD [Updated 2019] Numerous articles covering different aspects of SAP Security mostly regarding vulnerabilities and risks paved the way for today's discussion on how…
Article ICS/SCADA Access Controls Industrial controls systems (ICS) and supervisory control and data acquisition (SCADA) systems (a subset of ICS) manage our critical national…
Article Saving lives with ICS and critical infrastructure security Introduction Digital transformation has revolutionized critical infrastructure industries like manufacturing, enabling them to harness new…
Article Phishing Attacks Using Public Data [Updated 2019] 1. Introduction According to John McAfee, the developer of the first commercial anti-virus program, hacking a large corporation is "so easy even a…
Article Reverse engineering packed malware In this article, you’ll get a better understanding of what a packed executable is and how to analyze and unpack malware. Finally, you’ll get to know…
Article Analyzing packed malware Malware is created with deception in mind. Malware authors want to go undetected in order to steal, alter or delete as much information as possible.…
Article Why diversity of thought matters in cybersecurity Introduction The cybersecurity industry has long struggled with gender disparity. And while the number of women in cybersecurity is growing, the gap…
Article Does it make sense to make a career move from law to data privacy? Introduction What exactly is data privacy? According to the Free Dictionary, the word “privacy” is defined as “The state of being free from public…
Article Gentoo Hardening: Part 4: PaX, RBAC and ClamAV [Updated 2019] Grsecurity and Xorg If we enable the "Disable privileged I/O" feature in the hardened kernel and reboot, we can't start X server. That's because…
Article ICS protocols ICS stands for Industrial Control Systems. ICS is a generic term used to describe various control systems and their instrumentation, used for…
Article Anonymization and pseudonymization of personal data Introduction Cybercriminals are waging a war on our personal data. The latest research from IBM and Ponemon on the cost of cybercrime shows that…
Article SAP Mobile Infrastructure Security [Updated 2019] SAP, like any other large vendor, is evolving towards greater mobility and providing access to its applications from different devices located…
Article Mobile Phone Tracking [Updated 2019] GSM or Global System for Mobile Communication is a technology that's widely used in mobile communications, especially mobile phones. This technology…
Article Security in Public API’s – How [Updated 2019] Far too often we will download an API (Application Programming Interface) from Programmable Web, or download an SDK like the Facebook SDK and not…
Article Duqu 2.0: The most sophisticated malware ever seen [Updated 2019] Disconcerting news is shocking the IT security industry. The virus protection giant Kaspersky has been compromised by a sophisticated cyber-threat.…
Article Hacking PDF: util.prinf() Buffer Overflow: Part 2 [Updated 2019] For part 1 of this series, click here. 1. Introduction In the previous part we've seen the structure of the PDF document and extracted the…
Article OWASP top 10 A7: Insufficient attack protection “Security is always seen as too much until the day it’s not enough.” This quote by William H. Webster, an American attorney, jurist and current…
Article Rootkits 101 Introduction Rootkits are a species of malicious software with incredible damage potential. Due to their sophistication and complexity, they also…
Article "Cost of a Data Breach Report" - our analysis Introduction Each year, an important study is performed by the Ponemon Institute that is sponsored by IBM Security. The report generated from the…
Article Types of rootkits A rootkit is simply a set of tools that can maintain root privileged access to an operating system. A malware rootkit will usually carry a malicious…
Article Mailsploit: The Undetectable Spoofing Attack [Updated 2019] Pentester Sabri Haddouche just uncovered a major new email spoofing tactic. Named Mailsploit, the technique leverages bugs in email clients and…
