Article Cybersecurity Weekly: Apple patches, job offer phishing, Cisco zero-day Apple patched three actively exploited iOS zero-days. Hackers used Torisma spyware in job offer phishing attacks. A Cisco zero-day in AnyConnect…
Article Nworm malware: What it is, how it works and how to prevent it | Malware spotlight Introduction In April 2020, the creators of the TrickBot malware released a module for TrickBot called Nworm. TrickBot is a banking Trojan that…
Article How to make cybersecurity budget cuts without sacrificing security Introduction 2020 has been an incredibly challenging year. Physical and mental health has taken a heavy toll; economies are under threat; and…
Article How to Use the MITRE ATT&CK® Framework and the Lockheed Martin Cyber Kill Chain Together What is the Lockheed Martin Cyber Kill Chain? The Lockheed Martin Cyber Kill Chain is the first attempt to describe the structure and lifecycle of a…
Article Use cases for implementing the MITRE ATT&CK® framework The MITRE ATT&CK ® framework is a vast repository of cybersecurity knowledge. Each of the MITRE ATT&CK framework outlines a number of goals that an
Article Using MITRE ATT&CK®-based analytics for threat detection: 5 principles MITRE ATT&CK-based threat detection vs. conventional methods A number of traditional methods for threat detection exist; however, cyber threat…
Article How to Use MITRE ATT&CK® to Map Defenses and Understand Gaps Developing detection and prevention controls for techniques in the enterprise matrix The MITRE ATT&CK® framework is a useful way to standardize…
Article 7 Steps of the MITRE ATT&CK®-based Analytics Development Method What is the MITRE ATT&CK®-based analytics development method? The MITRE ATT&CK-based analytics development method is a process of using red and blue
Article First Safe Harbor, then Privacy Shield: What EU-US data-sharing agreement is next? What is data sharing? The EU has become known internationally as an organization that takes data privacy very seriously. The EU’s stand-out data…
Article CyberSploit 1: VulnHub CTF walkthrough In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub website by the author “CyberSploit”. As per the…
Article CyberSploit 2 VulnHub CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge published on VulnHub by the author “CyberSploit”. As per the information given by…
Article SQL Injection Vulnerabilities Exploitation Case Study Introduction In the earlier articles about SQL Injection, we discussed how SQL Injection vulnerabilities can be identified and exploited. We also…
Article What is is integer overflow and underflow? This article provides an overview of Integer Overflow and Overflow vulnerabilities and how they can be exploited. Integer Overflows and Underflows…
Article XSS Vulnerabilities Exploitation Case Study Introduction In the earlier articles about SQL Injection, we discussed how SQL Injection vulnerabilities can be identified and exploited. We also…
Article Phishing attack timeline: 21 hours from target to detection Introduction Phishing seems to be ever-present in the modern cyber-threat landscape. During the COVID-19 pandemic, there has even been an increase…
Article How To Exploit Least Privilege Vulnerabilities Introduction In the previous article, we discussed the importance of access controls and understood that the principle of least privilege is an…
Article How Are Credentials Used In Applications? Introduction Use of credentials is one of the most common aspects of applications. Be it a web application or a mobile client application,…
Article Browser Forensics: Safari Introduction Browsers have become an inherent part of our virtual life and we all make use of browsers for surfing the internet in some or the other…
Article Cybersecurity Weekly: Hackers for hire, DNS cache poisoning, The North Face attacked APT hackers for hire target financial and entertainment firms. DNS cache poisoning attacks return due to Linux weakness. The North Face website…
Article Microsoft Azure job outlook Introduction The business world is relocating to the cloud and the trend is strong. It has been predicted that by the end of 2020, 83% of all…
Article My CMSMS 1: VulnHub CTF walkthrough In this article, we will solve a capture the flag (CTF) challenge posted on the VulnHub website by an author named Pankaj Verma. As per the…
Article Fundamentals of symmetric and asymmetric cryptography Cryptography uses symmetric and asymmetric encryption for encryption and decryption of data. If the sender and the recipient of the data use the…
Article 2020: The year's biggest hacks and cyberattacks Just when you thought Halloween was over, it turns out there is something out there far scarier to security professionals around the world: the…
Article Scalability & elasticity: Technical considerations when selecting a cyber range Introduction Cyber ranges are excellent training tools. You can simulate advanced cloud infrastructure and create various test scenarios, or you can…
