Article Cybersecurity Weekly: SonicWall zero-day, Experian leak, Python vulnerability Hackers exploit a SonicWall zero-day bug in ransomware attacks. An Experian API exposed the credit scores of most Americans. Python was impacted by…
Article VMware vCenter vulnerability: Inside a critical remote code execution flaw We dive into this remote code execution vulnerability, highlighting the most important details of this flaw.
Article Sparrow.ps1: Free Azure/Microsoft 365 incident response tool Sparrow is a powerful tool used for detecting malicious activities in Azure and Microsoft Office 365.
Article Two ways to build a cybersecurity team using the NICE Framework Using the NICE Framework for Cybersecurity will help you structure your team against cyberthreats.
Article Insider threat report: Tesla employee thwarts $1 million bribery attempt Tesla’s near insider threat situation response is a good model to follow if faced with a similar situation.
Article Cybersecurity project manager: Is it the career for you? What experience and skills do you need to become a cybersecurity project manager? Is it the perfect role for you? Find out!
Article The OSCP certification and exam [updated 2021] For a career in information technology that encompasses defensive and offensive roles, you might want to consider becoming an Offensive Security…
Article Cybersecurity Weekly: Ryuk ransomware, U.S. pipeline outage, Chrome privacy update A Ryuk ransomware attack was sprung by a frugal student. The U.S. declares a state of emergency after ransomware hits their largest fuel pipeline.…
Article PMP Domain #1: People [updated 2021] The Project Management Professional (PMP) certification has undergone some changes to its domains of knowledge, including Domain #1 - People
Article TBBT: FUNWITHFLAGS VulnHub CTF walkthrough part 1 Explore this easy-level VulnHub capture the flag (CTF) and see if you can find all seven flags required to gain root access.
Article GANANA: 1 VulnHub CTF walkthrough part one This easy to intermediate VulnHub capture the flag (CTF) requires you to know some Linux commands and be able to run basic pentesting tools.
Article Understanding DNS sinkholes - A weapon against malware [updated 2021] Excerpt: Utilizing DNS sinkholes to prevent malware DNS sinkhole or black hole DNS is used to spoof DNS servers to prevent resolving hostnames of…
Article The ROI of security awareness training Do the benefits of security awareness training outweigh the costs? In this post, we show you how to calculate the ROI of security awareness training…
Article Finding security defects early in the SDLC with STRIDE threat modeling [updated 2021] Threat modeling via the STRIDE model can help reduce the effect of security attacks.
Article Trojan URSA malware: How it works and how to prevent it This articles shares the modus operandi of the URSA trojan as well as some preventative measures to counter potential infections.
Article Quantitative risk analysis [updated 2021] Utilizing a quantitative risk analysis is an integral part of security and ensuring a positive cost and benefit.
Article Cybersecurity Weekly: Favicon backdoor, triple extortion scheme, ransomware for sale Magecart hackers hide a PHP-based backdoor in website favicons. Ransomware attackers are now demanding cash from the customers of victims.…
Article IT auditing and controls – planning the IT audit [updated 2021] Performing an IT audit is important to understand your security strengths and weaknesses.
Article CCPA vs CalOPPA: Which one applies to you and how to ensure data security compliance Follow the California Consumer Privacy Act and the California Online Privacy Protection Act for data security compliance.
Article NYX 1: VulnHub CTF walkthrough Gain some hands-on experience with this capture the flag challenge from Vulnhub.com.
Article VLAN network segmentation and security- chapter five [updated 2021] A deep dive into VLAN security practices.
Article Cybersecurity Weekly: DarkSide quits, STRRAT attacks, Mercari data breach The DarkSide ransomware gang quits after their servers and Bitcoin stash are seized. The STRRAT RAT is masquerading as ransomware. An e-commerce…
Article 7 entry-level cybersecurity career questions, answered! How do you start a career in cybersecurity? You asked the questions; our panel of experts answered. Learn how to launch your career.
