Article Reporting of Cybersecurity Incidents This article is about the reporting of cybersecurity incidents in the USA. While it covers three main types of reporting—corporate, institutional…
Article The Most Popular Social Network Phishing Schemes 1. Introduction Social networks have become a trusted communication medium for both personal and professional communication. However, hackers…
Article Security Awareness – Judge the Impact to Justify the Effort [download]Download the BEST PRACTICES FOR DEVELOPING AN ENGAGING SECURITY AWARENESS PROGRAM whitepaper[/download] Learn the best practices for…
Article Pentesting SAP applications : An introduction SAP (Systems-Applications-Products) is a software suite that offers standard business solutions; it is used by thousands of customers across the…
Article Database Security Database security is one of the most important topics that have been discussed among security personnel. The growing number of incidents proves that…
Article CISA is law: Now what? The CISA cybersecurity bill passed U.S. Senate despite the fact that privacy advocates, private companies and civil liberties groups have expressed…
Article ISIL, Terrorism and Technology: A Dangerous Mix Introduction I was watching the Homeland series on TV when I received the news of the dramatic events in Paris. The introduction to this latest…
Article Analyzing a DDoS Trojan MD5: 67877403db7f8ce451b72924188443f8 Installer: In the main function of the malware, two subroutines are used for checking whether the malware is…
Article Nishang: A Post-Exploitation Framework I was recently doing an external penetration test for one of our clients, where I got shell access to Windows Server 2012(Internal WebServer sitting…
Article The Cybersecurity Information Sharing Act of 2015 (CISA): Is It the Right Answer? In attempt to further cybersecurity efforts for the nation, a brand new cybersecurity bill, the S. 754, has just been discussed: the Cybersecurity…
Article Reversing the Pony Trojan Part I Pony is a stealer Trojan and has been active for quite a while now. It was responsible for stealing over $200,000 in bitcoins (…
Article What Is SIEM? A SIEM (security information and event management) is a software solution that normalizes, filters, correlates, assembles, and centrally manages…
Article When Your CEO Won’t Take Security Awareness Training CEOs are often the busiest people in any organization. As security professionals, we should respect that: but what can we do when our CEO won't take…
Article Malware researcher’s handbook (demystifying PE file) (For the Introduction, click here) PE file Portable executable file format is a type of format that is used in Windows (both x86 and x64). As per…
Article Will IoT Security Awareness Protect Me From My Toaster? Introduction The paradigm of the Internet of Things devices is rapidly transforming our relationship with technology. The diffusion of smart objects…
Article Security Challenges in the Internet of Things (IoT) The Global State of Information Security® Survey 2015 issued by PricewaterhouseCoopers comes to the conclusion that about 70% of connected IoT…
Article Introduction to SAP I decided to start a new series of articles, "SAP Security for beginners". Everyone who is already into security, but wants to know more about SAP…
Article A Case Study of Information Stealers: Part I Introduction: A stealer is a type of malware that looks for passwords stored on the machine and sends them remotely (e.g. mail, HTTP) to an…
Article XML Secure Coding ABSTRACT The XML (Extensible markup language) is a buzzword over the internet, rapidly maturing technology with powerful real world application,…
Article Security vulnerabilities of voice recognition technologies An increasing number of devices nowadays use voice recognition technologies for performing commands, allowing access to stored information, and…
Article Reversing the Pony Trojan part II Pony is a stealer Trojan and has been active for quite a while now. It was responsible for stealing over $200,000 in bitcoins (…
Article Securing Your WordPress Admin Panel Today, anyone can create their own website with tools such as WordPress, Joomla or Drupal. However, many people suffer when they do not take…
Article Budgeting for Security Awareness: Who - What - When - Where - Why - How much 1. Introduction The actions and/or inactions by members of an organization who lack security awareness can lead to various security incidents, such…
Article Is Safe Harbor 2.0 Another Tug of War between Privacy and Security? What led to the Safe Harbor's Demise? In Schrems v. Data Protection Commissioner, the Court of Justice of the European Union (also known as CJEU or…
