Article Physical access control How many managers think that it makes no sense to spend money protecting information that can be reconstructed? What can really happen?…
Article What are black box, grey box, and white box penetration testing? [Updated 2020] Pentesters are apparently huge fans of colors. Different roles within pentesting assignments are designated as Red Team, Blue Team, Purple Team and…
Article How to detect and prevent web shells: New guidance from the NSA and the Australian government Introduction It’s not every day that governments of different countries draft guidance rules about any subject together. It is even rarer that they…
Article Cybersecurity Weekly: Capital One fined, Qualcomm bugs, HaveIBeenPwned open sourced Capital One fined for 2019 data breach affecting 106 million users. Nearly 50% of all smartphones affected by Qualcomm Snapdragon bugs. Have I Been…
Article National Counterintelligence and Security Center: 5 priorities for 2020 Introduction: NCSC’s role For years, the United States has faced increasingly aggressive and complex threats from foreign intelligence entities…
Article Zeus Sphinx: What it is, how it works and how to prevent it | Malware spotlight Introduction When something is described as “rising from the ashes,” the mythological creature known as the phoenix normally comes to mind. For…
Article Hacking the Tor network: Follow up [updated 2020] In a previous post, I presented the main techniques used to hack Tor networks and de-anonymize Tor users. Law enforcement and intelligence agencies…
Article Email attack trend predictions for 2020 Email continues to be a major method of communication in both personal and professional contexts. The sheer proliferation of information transmitted…
Article Top 6 cybersecurity books for IT auditors Introduction Like many other information security professionals, you probably have a library of books on the topic of your career choice. Not only…
Article SIM swapping security risks: What they are and how to protect yourself The joke that someone needs to have a mobile phone “surgically removed” is not too far from the mark. Mobile phones have become ubiquitous and…
Article bossplayersctf 1: VulnHub CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge which was posted on VulnHub. As you may know from previous articles, VulnHub is a…
Article Introduction to cryptography The field of cryptology Cryptology — literally “the study of secrets” — is composed of cryptography (making codes) and cryptanalysis (breaking…
Article How your home network can be hacked and how to prevent it Thanks to technology, jobs that used to require us to physically commute to work can now be done at home in a pair of comfy pajamas. A 2018 report…
Article Cybersecurity Weekly: VoLTE encryption attack, Alexa bugs, Android flaws A new attack lets hackers decrypt VoLTE encryption to spy on phone calls. Amazon Alexa bugs allowed hackers to install malicious apps. Flaws in…
Article After the breach: Change your password, quickly Introduction When you hear the news that a company of which you’re a customer has suffered a data breach, your first thought is likely to be whether…
Article My tomcat host 1: CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge published on VulnHub by Akanksha Sachin Verma. As per the information given by the…
Article New Cybersecurity Maturity Model Certification requirements create surge in demand for auditor training “We’re not just auditors anymore. We’ve become spokespeople for the organization in terms of where the organization has risk, and that's vitally…
Article “There’s never been a better time to learn cybersecurity,” says Infosec Skills instructor Keatron Evans “Cybersecurity knowledge is much more freely available now, and resources like Infosec Skills provide opportunities for professionals of all levels…
Article Improper error handling Every application has the potential for an error to occur. Even if an application is completely standalone, there is the potential that a fault will…
Article Symmetric Cryptography Introduction to symmetric cryptography Symmetric cryptography gets its name from the fact that the same secret key is used for encryption and…
Article Online certification opportunities: 4 more vendors offer online certification exams Introduction: Get certified from home during the COVID-19 pandemic Enabling employees to work from home during the COVID-19 outbreak has not only…
Article DevOps, SecOps, DevSecOps, PrivacyOps & AIOps: What's the difference? Introduction Many people often wonder about what DevOps is and what a DevOps engineer actually does. DevOps tools range from scripts to applications…
Article Hack the Box (HTB) machines walkthrough series — Sauna Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Fundamentals of Cryptography Introduction Cryptography can seem complex, but a lot of cryptography boils down to some very simple mathematical operators and structures. In this…
