Article Popular evasion techniques in the malware landscape This article compiles some of the evasion strategies used by malware users in the wild.
Article Nerbian RAT Using COVID-19 templates Nerbian RAT has been spreading by taking advantage of Covid19 email templates containing a Microsoft Word attachment with malicious macros inside.
Article How learning to be "Always Flexible" helped a Marine in earning the Security+ certification Semper Gumby. Almost as synonymous with the Marine Corps as its official motto of Semper Fidelis, the mantra of staying “Always Flexible,” as the…
Article Capture: Improve IoT firmware security with new firmware architecture In this article, we shall discuss what Capture is and discuss how its application can benefit both IoT device owners and IoT device vendors.
Article Today’s IT job market: Beyond fear, uncertainty and doubt You may have heard some buzz about layoffs in the cybersecurity sector. Let's look at what's really going on in the job market.
Article Infosec Skills August Challenge Join the quest for new skills, bragging rights and over $1,000 in prizes. Each month, we’ll release a brand new challenge. Can you complete it?
Article Cybersecurity Weekly: Data breach cost passes $4MM, Uber data breach coverup, Chrome extension vulnerability Average cost of a data breach surpasses $4MM, Uber admits to massive data breach coverup from 2016, and Google Chrome extension steals emails…
Article Fileless malware uses event logger to hide malware Learn about a fileless malware that is “taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild.”
Article How to hack mobile communications via Unisoc baseband vulnerability This vulnerability allows attackers can neutralize communications in a specific location.
Article How training employees about ransomware can mitigate cyber risk Training your employees to detect ransomware can save your business money and time. Here's what they should know.
Article What’s next in cybersecurity: Predictions from Andrew Howard Learn what to expect and how to navigate the world as an emerging cyber pro with predictions from Andrew Howard, the CEO of Kudelski Security.
Article Cybersecurity Weekly: Emergency alert system, semiconductor ransomware, Slack password hashing bug fixed Emergency alert system vulnerable to hacking, semiconductor producer suffers ransomware hack, and Slack exposed salted password hashes. All these…
Article SOC analyst resume tips [updated 2022] Whether you’re looking to score your first entry-level job in a security operations center or advance to a senior role on an incident response team,…
Article Spring4Shell vulnerability details and mitigations Spring4Shell is a remote code execution vulnerability (CVSS 9.8) published at the end of March 2022 that impacts Spring Framework.
Article Follina — Microsoft Office code execution vulnerability Microsoft tracked as CVE-2022-30190 a new vulnerability, also called “Follina,” that leverages Microsoft Office to lure victims and execute code…
Article What Is zero-trust security, and should your business adopt it? While zero-trust may seem cumbersome, it is an effective way to keep your data and business safe from growing cyber threats.
Article I failed IAPP’s CIPP/C certification. Here’s how I recovered Find out what privacy expert Chris Stevens did after initially failing his CIPP/C Canadian Privacy certification, and how he returned to succeed!
Article Cybersecurity Weekly: Cisco breach, Starlink hacked, Microsoft phishing attack targets crypto Cisco confirms VPN data breach, ransomware attack survey results, and Starlink hacked using $25 modchip. All these and more in this week's edition…
Article The ultimate guide to ISACA certifications: Overview & career paths [updated 2022] Learn everything you need to know to get you on your way to pursuing an ISACA certification to improve your cybersecurity job qualifications.
Article Security operations center: 5 key functions your SOC should perform The key functions of an enterprise security operations center (SOC) and how an organization can lay the foundation for a successful SOC…
Article Data architect: The ultimate career guide Data architect is an in-demand role. Learn what a data architect does, the steps to become a data architect, data architect salaries and more.
Article The most dangerous vulnerabilities exploited in 2022 This article will spotlight some of the most dangerous vulnerabilities that threat actors exploited in the first half of 2022.
Article How does encryption work? Examples and video walkthrough Infosec Skills author Mike Meyers provides an easy-to-understand walkthrough of cryptography.
Article Top 5 cybersecurity questions for small businesses answered What can small and medium-sized businesses do to protect their business and data from cybercrime? Here are five tips from Jack Koziol.
