Article SUNBURST backdoor malware: What it is, how it works, and how to prevent it | Malware spotlight SUNBURST is a backdoor associated with a SolarWinds digitally-signed component of the Orion software framework.
Article Cybersecurity Weekly: Phishing attacks using redirects, intermittent file encryption, Ragnarok shuts doors Widespread phishing attacks are using open redirects. LockFile ransomware bypasses protection using intermittent file encryption. Ragnarok…
Article Incident responder careers: What’s it like to work in incident response? Take a look at what it is like to work in the field of cybersecurity incident response.
Article ISC2 CSSLP domain 8: Secure software supply chain Learn more about secure software supply chain, the domain 8 topic of the CSSLP certification.
Article VULNCMS: 1 VulnHub CTF walkthrough part 2 In the last part of this Capture the Flag (CTF), we found four HTTP ports open on the target machine. We tried enumerating the HTTP ports available…
Article Cyber risks of digitizing legacy systems in healthcare environments The benefits of healthcare digitization might benefit a single asset, a process or the hospital as a whole — but it comes with obligations.
Article Tutorial: How to exfiltrate or execute files in compromised machines with DNS Go through this tutorial on exfiltrating and executing files between machines using the well-known DNS protocol.
Article Python for active defense: Decoys Python can be a valuable resource when using decoys and pursuing active defense against cyberthreats.
Article iOS forensics Day by day, smartphones and tablets are becoming ever more popular, and as a result, the technology used in development to add new features or…
Article Cybersecurity Weekly: Fake NFT scam, Atlassian flaw, security analyst interview questions An NFT collector was tricked into buying fake Banksy. An Atlassian Confluence flaw is being actively exploited to install cryptominers. 8 must-ask…
Article ISC2 CSSLP exam details and process CSSLP (Certified Secure Software Lifecycle Professionals) is one of the most popular application-security-related certifications available.
Article Taidoor malware: what it is, how it works and how to prevent it | malware spotlight Taidoor is one of the malware criminals have developed to keep their nefarious activity undetectable.
Article Python for active defense: Network Python can be used for traffic collection, protocol decoding, and burning in a decoy when it comes to network defense.
Article Red teaming: Is it the career for you? Red teamers go beyond the basics of penetration testing to help test an organization's security against both in-person and online attackers.
Article HACKSUDO: PROXIMACENTAURI VulnHub CTF Walkthrough, Part 1 Follow along as we solve this Capture the Flag (CTF) from Vulnhub.
Article ISC2 CSSLP job titles and career outlook The CSSLP (Certified Secure Software Lifecycle Professionals) from ISC2 is a valuable certification for IT professionals, developers and…
Article Python for active defense: Monitoring Data is essential to effective active defense, and using Python is a good way to monitor your data sources to identify anomalies.
Article How cross-site scripting attacks work: Examples and video walkthrough What are cross-site scripting attacks and how do they work? Find out in this walkthrough from Infosec Skills author John Wagnon.
Article How criminals leverage a Firefox fake extension to target Gmail accounts We walk through a specific Firefox extension called FriarFox that targets Gmail accounts of global Tibetan organizations.
Article The real dangers of vulnerable IoT devices Internet of Things devices pose a very real threat to cybersecurity. And today, they are prevalent in every household.
Article Cybersecurity Weekly: Cobalt Strike beacon, REvil is back, IT training pitfalls Linux Cobalt Strike beacon is being used in ongoing attacks. REvil ransomware is back in full attack mode and leaking data. 7 signs your IT training…
Article ISACA CDPSE domain 1: Privacy governance Domain 1 of the ISACA CDPSE certification covers important privacy aspects and requirements needed within modern organizations.
Article Cybersecurity Weekly: REvil decryptor, AT&T loses millions, OMIGOD flaw A free decryptor for past REvil ransomware victims was released. AT&T lost $200 million to an illegal phone unlocking scheme. Mirai Botnet started…
Article How to carry out a watering hole attack: Examples and video walkthrough What is a watering hole attack, how do they work and what can you do to defend against them? Find out in this walkthrough from Infosec's Keatron…
