Article Forensics investigation of document exfiltration involving spear phishing: The M57 Jean case Humans are often the weakest link in the security chain. In his book The Art of Deception, renowned hacker Kevin Mitnick explains how innate human…
Article Acceptable Use Policy Template For University IT Systems Universities, colleges and other higher education institutions store PII (Personally Identifiable Information) such as credit card numbers, email…
Article Cyber-Terrorism: Complexity and Strategy The Internet has fundamentally altered the world we live in and interact. As former Secretary of Defense Leon Panetta (2012) remarked in a speech…
Article HTTPS and mixed content vulnerability HTTPS is used to make communication between the server and the browser secure. However, a problem occurs when an HTTPS page loads HTTP content: this…
Article PowerShell toolkit: PowerSploit PowerSploit is a collection of PowerShell scripts which can prove to be very useful during some exploitation and mostly post-exploitation phases of…
Article Website hacking, Part VI: Input validation and filtering in PHP In this part of the series, we are going to examine the different ways to escape HTML characters in PHP in order to add security to your web…
Article ITIL Interview Questions Information Technology Infrastructure Library or ITIL is a set of procedures that companies use to implement, architect, and manage IT software and…
Article Post-Exploitation Using Veil-Pillage Veil-Pillage is a part of the Veil-Framework which comes handy when performing post-exploitation. It consists of a number of modules which can be…
Article Breaking Software Protection: ElGamal Signature Scheme Introduction In today's article, we will see a more advanced cryptosystem than the previous one: the ElGamal Signature scheme (not to be confused…
Article Information Security Vulnerabilities of Automobiles 1. Introduction In the past, cars and computers did not have many touching points. Nowadays, modern cars contain numerous computers. As Bruce Emaus,…
Article Cyber Terrorism: Complexities and Consequences While a terrorist using the Internet to bring down the critical infrastructures the United States relies on makes an outstanding Hollywood plot,…
Article SIEM use cases for PCI DSS 3.0 - Part 1 After I got an outstanding response to my previous article on SIEM use cases, I have now prepared a series of articles for some SIEM use cases. In…
Article How to Keep Your Webcam Safe from Hackers The recent revelations about a Russian website offering links to various live streaming web cameras and baby monitors have made people truly…
Article Cyber Warfare and Cyber Weapons, a Real and Growing Threat Numerous malicious attacks on computers and mobile devices as well as networks of important entities have recently made the news and have brought…
Article SIEM Use Cases for PCI DSS 3.0 – Part 2 So as promised, I have come up with some more use cases for PCI DSS 3.0 requirements. I will try to cover as many requirements and use cases as…
Article Employee Threat Assessment Template for Large Organizations Despite the popular image of the hacker cracking distant servers from his basement, studies show that people with legitimate access to your…
Article Tyupkin ATM Malware Analysis Introduction Some time ago, Kaspersky discovered and reported a new type of malicious program called Tyupkin, which targets ATM machines by moving…
Article Session hijacking cheat sheet 'Session Hijacking' is an old and routine topic in the field of application security. To make it more interesting, in this article, we are going to…
Article SIEM Use Cases for PCI DSS 3.0 – Part 3 Welcome to the Part 3 of the series "SIEM Use Cases for PCI DSS 3.0". We have covered some very good use cases in Part 1 and Part 2. Let's look at…
Article POODLE: Not your typical walk in the park Google, among several security organizations, recently announced a vulnerability in the SSL protocol, particularly SSL version 3. SSL is used to…
Article Antenna theory for wardriving and penetration testing Wardriving is an activity in which a person seeks wireless access points in moving vehicles with high gain antennas mounted on the top. Usually,…
Article The Likelihood of Cyber-Terrorism Today Introduction The virtual space has over time become something of real importance for business, politics, work, communities and…
Article Internet of Things: How Much are We Exposed to Cyber Threats? Introduction The Internet of Things (IoT) is one of the paradigms that will influence our society most of all in the next few years, and it is…
Article Breaking Software Protection – DSA/DSS 1. Introduction In this third part of the series, we will see something similar to the second article but a little bit more advanced. This article…
