Article All about AGDLP group scope for active directory - account, global, domain local, permissions Lately I've gotten a few questions from prospective clients about AD security group scope. I wanted to take a minute to give an overview of what…
Article Malware Threat Assessment Template for Financial Institutions Financial institutions conducting online brokerage, alternative payments, Internet banking and other similar activities have been facing a growing…
Article Understanding Disk Encryption on Android and iOS Introduction Mobile devices these days handle lots of sensitive information – messages, photos, contacts and more. The question about how this data…
Article The dos and don’ts of sharing sensitive business data All businesses handle sensitive data of one kind or another. Whether this is confidential client information, financial details, or even employee…
Article The Windows Kerberos Vulnerability: What You Need to Know A mythological three-headed dog was supposed to guard the gates of Redmond. But it turns out that Kerberos was very poorly implemented in numerous…
Article Penetration Testing Methodology for Web Applications Establishing a penetration testing methodology is becoming increasingly important when considering data security in web applications. The more we…
Article Foreign Hackers Constantly Target US Critical Infrastructure US critical infrastructure under attack US authorities are warning companies operating in every industry of a significant increase in the number of…
Article Android Application hacking with Insecure Bank Part 1 In this article series, we will learn at the various concepts of Android application security while exploiting a vulnerable app InsecureBankv2. We…
Article Aggressive Chinese IP Highlights Attribution Issues Recently, the Norse DarkWolf Labs noted that the IP address 218.77.79.43 had jumped into the top quadrant for malicious activity. Investigation into…
Article Simple yet Effective Methods to Solve Java Security Issues It is true that Java cannot take credit in being among the safest options to use online, due to the vulnerabilities that emerge within its…
Article Regin: State-Sponsored Malware or Cybercrime? Regin, a highly advanced spying tool A few weeks ago, Symantec security firm published the results of its investigation on the backdoor Regin, a…
Article Examining Android App Specific Data on Non-Rooted Devices In all of our previous articles so far in this series, we discussed all the examples only on rooted devices and emulators. Generally, there are…
Article A physical security policy can save your company thousands of dollars Investments in cybersecurity and physical security are proportionally connected to your organization's improved financial picture for a long-term…
Article WebSocket security issues In this article, we will dive into the concept of WebSocket introduced in HTML 5, security issues around the WebSocket model, and the best practices…
Article Avoiding mod security false positives with white-listing We have already discussed in my previous articles how to configure Mod Security Firewall with OWASP rules and also analysed the different types of…
Article How to Stop DNS Hijacking You have (probably more than once in your life) keyed in a familiar domain name and ended up in an entirely different page that was not even close…
Article Privacy risks of beacons On October 6th 2014, buzzfeed.com published a report stating that Titan, a company controlling a number of New York City's phone booth advertising…
Article Cyber attack on Sony Pictures is much more than a data breach - updated Sony Pictures corporate network compromised by a major cyber attack At the end of November, computer systems at the corporate network of Sony…
Article File inclusion attacks A file inclusion vulnerability allows an attacker to access unauthorized or sensitive files available on the web server or to execute malicious…
Article Website Hacking Part V Introduction In this part of the Website Hacking series we are going to take a look at how to minimize damages from XSS attacks considering our web…
Article The Importance of POS Threat Analysis for the Retail Sector The rising intensity of POS threats has created a precarious environment for retailers looking to protect their customers' financial and personal…
Article Broken cryptography In this article, we will discuss broken cryptography in Android applications. Broken cryptography attacks come into the picture when an app…
Article Legality of Jailbreaking Mobile Phones 1. Introduction The term "jailbreaking" refers to circumventing security measures of a mobile operating system with the aim to install unauthorized…
Article User Behavior Modeling with Mobile Device Sensors Introduction The rapid diffusion of mobile technology and the convergence of numerous services that use the paradigms, including social networking,…
