Article Configuring Kali Linux on AWS for FREE to get the Public IP Kali Linux is the most favorite pentesting distribution. There are thousands of tutorials for Kali Linux are available on the Internet. However,…
Article How Security Awareness Training Can Prevent a Ransomware Situation I. What is Ransomware? Ransomware is a type of malware that locks users out of their computer systems or/and files and demand ransom to restore the…
Article Past and Present Iran-linked Cyber-Espionage Operations Iranian hackers intensify their cyber operations Security experts and intelligence agencies are observing a significant intensification of the cyber…
Article SAP Risks - Fraud Welcome to the latest part of SAP Risks. After we finished with Espionage and Sabotage, let's eat the last piece of this "sweet cake" dubbed Fraud.…
Article Patching by Reversing Binary Abstract Software often distributed with vulnerabilities in production milieu either due to poor programming practice (often inadvertently) or may…
Article Insurance Against Ransomware Threats Section 1. Introduction Although there is a vast amount of information on the risks of cyber-attacks, not all businesses engage in preparation and…
Article An Insight into Virtual Private Networks and IP Tunneling Introduction In the world of Cybersecurity today, staying ahead of the hacker is the name of the game. It seems like that for one every one step…
Article Creating Effective Phishing Landing Pages When using the PhishSIM to test employees (referred to as learners), just as important as creating the phishing email is creating an associated…
Article How to Conduct a Cost-Benefit Analysis and Implement a Virtual Private Network Overview of the Last Article For any business or corporation, securing the lines of communications between the sending and receiving parties is a…
Article Top Firewall for Differently Populated Enterprises In today's technologically sophisticated world, everyone feels deficient without the internet and computers. In every field and every company…
Article Exclusive – A Close Look at the Largest Credential Harvesting Campaign Via an IoT Botnet Exclusive: MalwareMustDie discovered a criminal gang that is using SSH TCP direct forward attack technique in a large-scale operation. The popular…
Article SAP ABAP Platform Security From the previous articles of SAP Security for CISO series (especially SAP Risks), you reviewed many examples of potential attacks on these systems.…
Article Echo Mirage: Walkthrough In this article, we will learn about Echo Mirage, a freeware tool that hooks into an application's process and enables us to monitor the network…
Article The Security Policy and Network Requirements of a Virtual Private Network Overview of the Last Article In the past couple of articles we have written, we have started to examine the use of what is known as a "Virtual…
Article SoapUI: Security Testing SoapUI is an SOAP (Simple Object Access Protocol) and REST (Representational state transfer) API (Application Programing Interface) testing tool. It…
Article Avatar Rootkit: Dropper Analysis Avatar was first detected by ESET circulating in the wild in early 2013 [1]. However, no samples were collected for analysis until May of the same…
Article WikiLeaks Vault 7 Data Leak: Another Earthquake in the Intelligence Community The WikiLeaks organization obtained thousands of files allegedly originating from a high-security network of the U.S. Central Intelligence Agency…
Article Ursnif Malware These days, along with the unforeseen climatic conditions, several unpredictable malware campaigns are also occurring across the connected world.…
Article PowerShell remoting artifacts: An introduction Since PowerShell usage by malware is on the rise, in this article series, we will learn about the various artifacts related to PowerShell remoting…
Article Code Review of Node.Js Applications: Uncommon Flaws This article covers the left-over vulnerabilities from Part-1. In this article, we will have an in-depth look at some uncommon flaws and how to find…
Article Maltego: Making sense of data Information gathering has always been a crucial part of any penetration testing. The more information we have, the more likely we will be able to…
Article RIPS – Finding vulnerabilities in PHP application The biggest fear of any developer has always been that their site may get hacked and occasionally it does end up being hacked. For a very long time,…
Article RanRan and PetrWrap Threats: Political and Criminal Abuses in the Ransomware Landscape Ransomware continues to be one of the most profitable cyber threats, for this reason, every week we see strains of malware in the wild with new…
Article Advanced Technical Review of VPN Infrastructure Impacts Introduction As it was reviewed in the last article, the procurement and deployment of a Virtual Private Network Infrastructure can be a complex…
