Article 5 reasons why you should report — Not reply to — Suspicious emails Phishing emails are much harder to identify than most people realize. While you may laugh off the obvious ones, like your great grandmother's…
Article BEC Attacks: How Attorney Impersonation Works Cases of attorney impersonation are on the rise and often, they are accompanied by fraudulent requests for money or sensitive information.…
Article Layer Seven DDoS Attacks What is Layer 7? The process of sending and receiving data from one host to another, data encapsulation, is possible due to the existence of a seven…
Article The basics of IDA pro IDA Pro is the best disassembler in the business. Although it costs a lot, there's still a free version available. I downloaded IDA Pro 6.2 limited…
Article Crooks Exploit Facebook to Spread Crypto-miner Malware Social networks are a privileged attack vector that could be used by cybercriminals to spread malware to a wide audience. In the last month's…
Article Top 10 solutions to protect against DDoS attacks and increase security According to statistics, 33% of businesses fall victim to DDoS attacks. It is almost impossible to predict such attacks. Some of them can be…
Article Threat Hunting – Zyklon Trojan This is a lab that is conducted in a test bed. The resources were downloaded from malware.trafficanalysis.net. The samples provided came from a case…
Article Insider Threat: How to Protect Your Business from Your Own Employees It's trite to write that the company's data and customer base are the main assets of any business in the 21st century. However, the attitude to…
Article Top six SIEM use cases With rising trends and forms of attacks, most organizations today deploy a Security Incident and Event Management (SIEM) solution as a proactive…
Article What is an XXE attack? XXE (XML External Entity attack) is now increasingly being found and reported in major web applications such as Facebook, PayPal, etc. For instance,…
Article Learning curve: Security awareness in education In education the goal is twofold, to bestow knowledge and protect the well-being of the student body. Unfortunately, as reports of data compromise…
Article DoD 8570 IAM certification and requirements The U.S. Department of Defense (DoD) directive 8570, which is titled “Information Assurance Workforce Improvement Program,” outlines the…
Article Privilege escalation on linux with live examples One of the most important phase during penetration testing or vulnerability assessment is privilege escalation. During that step, hackers and…
Article The Rowhammer: the Evolution of a Dangerous Attack The Rowhammer Attack Back in 2015, security researchers at Google's Project Zero team demonstrated how to hijack an Intel-compatible PCs running…
Article Top 5 email retention policy best practices Email retention policies are no longer just about conserving space on your Exchange server. Today you must take into account how your email…
Article Memory forensics and analysis using volatility Volatility is one of the best open source software programs for analyzing RAM in 32 bit/64 bit systems. It supports analysis for Linux, Windows,…
Article CGEIT Domain 4: Risk Optimization Introduction Risk optimization falls under the fourth domain of the ISACA’s Certified in the Governance of Enterprise IT (CGEIT) exam and…
Article DoD IASAE Overview What is the DoD IASAE? The U.S. Department of Defense (DoD) IASAE covers the requirements for the Information Assurance architecture and engineering…
Article NIST CyberSecurity Framework Introduction The National Institute for Standards and Technology (NIST) is a U.S.-based organization that was tasked by the U.S. government with…
Article The IAPP CIPP/US certification: The leading U.S. privacy credential Privacy issues have become increasingly important for organizations in recent years. While events such as Edward Snowden’s NSA revelations in 2013…
Article DoD 8570 IAM certification – Level I What is the DoD IAM Level 1? The Department of Defense (DoD) directive 8570 provides guidance on how the DoD workforce manages and executes…
Article CGEIT Domain 5: Resource Optimization [DECOMMISSIONED ARTICLE] NOTE: This article is based on an old version of the CGEIT exam, and should not be consulted for information on the current exam. Please consult the…
Article Closing the Gender Gap: Women in Cybersecurity March 8 was International Women's Day. A lot of folks will say, “why do we need a special day for women? Women have equality now - don’t they?” To…
Article 10 most common phishing attacks Phishing is one of the most common ways for scammers to steal information. Through social engineering or deception, fraudsters attempt to trick…
