Article NIST CSF: The seven-step cybersecurity framework process One would have to be living under a rock to think that cybersecurity isn’t one of the most important considerations in today’s world. In response to…
Article Malware Spotlight: What are Emotets? Introduction When some first hear the name Emotet, they may think they’re are hearing the name of the villain from the latest bad mummy movie. But…
Article MITRE ATT&CK vulnerability spotlight: Exploitation for credential access Introduction MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As an FFRDC, MITRE performs a variety of…
Article MITRE ATT&CK vulnerability spotlight: Forced authentication Introduction The ATT&CK framework is a product of MITRE, one of the federally funded research and development centers (FFRDCs) designed to support…
Article Malware spotlight: What is click fraud? Introduction Click fraud is a well-known method for fraudsters to make money by taking advantage of online affiliates. It typically involves an ad…
Article Cyber Work with Infosec: How to become an incident responder Introduction In this episode of Cyber Work with Infosec, Chris Sienko interviewed Keatron Evans, Infosec instructor, managing consultant at KM Cyber…
Article How to become a security architect The guest of this episode of Cyber Work is Leighton Johnson, CTO and founder of ISFMT (Information Security Forensics Management Team). Chris…
Article Top Cybersecurity Predictions for 2020 The 2020 Cybersecurity Landscape Here we are again for the annual prediction of the events that I believe will impact the cybersecurity landscape in…
Article Malware spotlight: Fileless malware Introduction Fileless malware is a malicious technique that uses existing software, legitimate applications, operating system files and the…
Article Cybersecurity Weekly: Wyze data leak, PayPal phishing scam, prison footage leak IoT company Wyze suffers a data leak affecting millions of customers. An ambitious phishing campaign aims for more than just usernames and…
Article NIST CSF core functions: Identify The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide guidance for…
Article NIST CSF core functions: Protect Introduction The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide…
Article How to build security awareness & training to NIST standards Review NIST’s cybersecurity training resources and guidelines and explore how you can use Infosec IQ to not only follow NIST recommendations, but…
Article Your 2020 tax scam training guide Get your W-2s and returns ready because tax season is on the way! As if deductions, exemptions and return distribution wasn’t enough, tax season…
Article How big is the skills gap, really? Introduction No doubt you will have noticed, in the past few years, that voices are being raised about something called the “skills gap.” The…
Article 3 steps to close your organization's cybersecurity skills gap The report, 3 steps employers can take to close the skills gap, details the results of a survey of 785 information security professionals.
Article Cybersecurity Weekly: Colorado BEC scam, CyrusOne ransomware, new California privacy law A town in Colorado loses over $1 million to BEC scammers. Data center provider CyrusOne suffers a ransomware attack. California adopts the strictest…
Article NIST CSF self-assessments The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) provides guidance for organizations regarding how to better…
Article Ethical hacking: Top 6 techniques for attacking two-factor authentication Two-factor authentication (2FA) has been renowned for some time now for the security it can bring to organizations. The combination of something you…
Article ICMP protocol with Wireshark Unlike the Transport Control Protocol (TCP) and User Datagram Protocol (UDP), the Internet Control Message Protocol (ICMP) is not designed for…
Article Malware spotlight: Hybrid malware Introduction Hybrid malware, also known as combo malware, is a combination of two or more different types of attacks — usually a Trojan horse or…
Article MITRE ATT&CK: Port knocking Introduction Ports are like the doors into or out of a network, where information must pass through them to enter or exit an organization’s network.…
Article Network Traffic Analysis for Incident Response: Internet Protocol with Wireshark Introduction to the Internet Protocol The Internet Protocol (IP) is the most widely-used network-level protocol. Common transport-level protocols,…
Article The importance of knowing the OWASP Top Ten An average company uses 765 different web applications, and every one of them may face a potential attack.
