Article Alleged Hack of iCloud Exposed Nude Photos of Celebrities Online The case The gossip news of this week is the alleged hack of Apple's iCloud of many celebrities. Hundreds of naked photos purportedly belonging to…
Article Data Backups with Bacula: Notifications Introduction When the backup solution is already working, we can also take a look at notifications more closely. We can send a notification email…
Article Preparing for a successful IAM integration project (Part 2 of 2) Iteration-Based Delivery[pkadzone zone="main_top"] As mentioned before, an identity management implementation project will often extend 18-36 months…
Article Phishing WhatsApp Images via USB, From Python With Love Introduction How many times did your work colleague or a friend of yours find a USB cable from your PC/Laptop and attach his Android phone to…
Article Data Backups with Bacula: Mobile Devices Introduction Bacula was specifically designed for backup jobs in a server environment, where servers have IP addresses that don't change regularly…
Article Three Security Practices That IoT Will Disrupt I made it back from DEFCON with both my phone and tablet intact, but I'm happy I didn't bring a light bulb. You see, if had brought a light bulb,…
Article Tracking Attackers with a Honeypot - Part 2 (Kippo) Introduction Unauthorized access to servers occurs on a daily basis. Attackers are constantly searching the Internet for servers that they can use…
Article How a DNS Sinkhole Can Protect Against Malware The Domain Name Service (DNS) is an integral part of Internet access. It translates human-recognized domain names into computer-readable IP…
Article Clickjacking, Strokejacking or UI Redress Introduction Clickjacking was first publicized by Jeremiah Grossman and Robert "Rsnake" Hansen in 2008. Clickjacking is an attack that is possible…
Article Want to Limit PCI DSS Scope? Use Tokenization Every organization should follow a proactive rather than a reactive approach to protect against threats, risks and vulnerabilities, to which if…
Article Privacy Risks of Sleep-Tracking Devices 1. Introduction According to the technology market intelligence company "ABI Research", there are currently more than 10 billion wirelessly…
Article The Evolutionary Approach to Defense By: Philip Nowak The evolutionary approach to IT security seems to be the most natural and efficient way to resist cyber-attacks. The Red Queen…
Article Risks and Cyber Threats to the Healthcare Industry Introduction Every day, our digital identity is menaced by several cyber threats that are becoming even more sophisticated. Every year, data…
Article Defense-in-Depth: Layered Protection and Data Security Application vulnerability is caused when a developer fails to sanitize the input from user and blindly uses it as an input for further data…
Article Parameterized SQL query over dynamic SQL query What is a parameterized SQL query? It is used for better performance, high efficiency and prevention of SQL injection vulnerability. Before going…
Article Dockerizing a Sample GUI Application: Case Study The goal for this article is a sprint from never using Docker to using it to deploy a GUI application that only has a console deployment pattern for…
Article The essentials of an acceptable use policy What is an acceptable use policy? An Acceptable Use Policy (henceforward mentioned as "AUP") is agreement between two or more parties to a computer…
Article To Reduce Risk, De-emphasize “C” and Focus on “G” By their nature, business endeavors involve various elements of risk. These elements may include technological, commercial, legal, financial, and…
Article Exploiting and verifying shellshock: CVE-2014-6271 The Bash Bug vulnerability (CVE-2014-6271) A new critical vulnerability, remotely exploitable, dubbed "Bash Bug", is threatening billions of…
Article Steganalysis: your X-Ray vision through hidden data Steganography is often mistaken with cryptography, but they are very different in their operations. The major similarity between them is they were…
Article Troll Challenge Just found an interesting vulnerable machine named Troll. It sounds like the machine will troll the attacker. We booted up the machine in Virtual…
Article SAML, OAuth, OpenID Introduction In this article, we are going to see what are federation, single sign-on, and three federated identity standards, namely Security…
Article The importance of an effective VPN remote access policy With the number of employees telecommuting, traveling often or working remotely on the rise, the conventional corporate security model is undergoing…
Article Why email puts your business data at risk, and what to do about it In spite of the abundant availability of enterprise software designed to help businesses be more productive, cost-effective, and security conscious,…
