Article New Wave of Cyber-attacks on Banks 1. Introduction In the past two years, the financial world has been stunned by three major cyber-attacks on banks, namely, (1) the attack on…
Article Why GIAC? A Suitable Choice that Meets Professional Needs The protection of information assets is a top priority for any business or organization; this explains the growing need for experts in a number of…
Article Ethical hacking vs. penetration testing History of ethical hacking It all began in the 1960s at MIT when the notion "hacker" was coined to mean someone dedicated to solving technical…
Article Building Serialized Phishing Simulation and Security Awareness Campaigns The Science of Forming Habits As we discussed earlier, the main goal of an organizational security awareness education program is to modify the…
Article The Breach of Anthem Health - the Largest Healthcare Breach in History It was February 4, 2015, and an announcement that would shake the medical and insurance industries to their core was about to be made. Anthem, Inc.,…
Article Common malware persistence mechanisms As we know, malware becomes stealthier by somehow achieving persistence on the exploited machine. This helps malware authors to inject/exploit once,…
Article Process: Pre-Engagement Penetration Testing involves actions that can go beyond scope to a large extent thereby presenting the need to invest more time in understanding the…
Article On the Road to Pen Testing - Why Infosec Training and Certification? Are you already a penetration tester or preparing to become one? If so, then you might already know how important it is to acquire the right…
Article Penetration Testing - Jobs, Certifications, Tools, and More As technologies have increasingly advanced over the past few years, more complex cyber attacks have also emerged. Thus, data security has become the…
Article How to Ensure HIPAA HITECH Compliance By now, most people have at least some passing familiarity with HIPAA – the federal rules and regulations that apply to the security and handling of…
Article Penetration Testing: Intelligence Gathering Introduction: Intelligence Gathering & Its Relationship to the Penetration Testing Process Penetration testing simulates real cyber-attacks, either…
Article Ransomware Case Studies: Hollywood Presbyterian & The Ottawa Hospital Ransomware, the holding hostage of computers or data in exchange for money, continues to be a major threat to hospitals and other medical…
Article Is Penetration Testing a Degree? Penetration testing has become a mandatory aspect of keeping IT systems secure around the world today. With hacking now an ever-present threat to…
Article Understanding Critical Windows Artifacts and Their Relevance During Investigation: NTFS Timestamps In this article, we will learn about critical Windows artifacts, what they mean, where they are located in the system, what can be inferred from…
Article Metasploit Certification Study Plan The ever changing recruitment process of the organizations always challenges candidates; recognized education is not enough in this competitive…
Article How to Educate Healthcare Employees to Stop Ransomware Ransomware, the holding hostage of computers or data in exchange for money, is dramatically on the rise all across the world. Any business in any…
Article The 5 Most Visible Cyber Attacks on Hospitals Security concerns are growing exponentially in healthcare, as hospitals become the most financially lucrative targets for cyber-attackers. In 2015,…
Article Understanding Critical Windows Artifacts and Their Relevance During An Investigation: Artifacts We discussed NTFS timestamps in Part 1 of this series. In this article, we will look at some of the artifacts which can point out a program…
Article BYOD Security Training for Physicians: The Whys, Whats, Hows and Whens Introduction Despite concerns over the use of personal devices in the healthcare industry, “bring your own device” (BYOD) is becoming “business as…
Article Ransomware and Its Impact On Small Businesses Ransomware is a kind of malware that limits or totally prevents users from gaining access to their computer system either by locking some files or…
Article The Threatening Evolution of Exploit Kits Exploit Kits, even more sophisticated and profitable Exploit kits are rapidly evolving, threat actors improve them on a daily basis by adding the…
Article App Transport Security One of the most common misconfiguration issues that I find during testing iOS apps is the bypass of the App Transport Security feature introduced by…
Article Lab: GPG In this lab, we will get an introduction to the GnuPG, the GNU Privacy Guard, an open source implementation of PGP. One problem with public key…
Article Evolution in the world of cyber crime It is not surprising to consider the fact that whenever a person holds some valuable information, there are always some criminals looking to steal…
