Article Petya Ransomware Initial Analysis The document below is an initial level analysis of the recent Petya Ransomware (2017). We will also discuss an analysis of a dll variant of the…
Article Feature Phone Forensics Introduction A feature phone can be described as a wireless mobile device that has more features than a standard cell phone, but limited…
Article The concept of mobile phone The digital forensic community is striving hard to stay abreast of the current state of the art in the constantly changing technologies which we use…
Article The Case for Annual Security Awareness Training Training Annually vs One-Off Training Anything short of annual IT security awareness training, at a minimum, is difficult to consider a legitimate…
Article Top 20 Security Awareness Tips & Tricks Top 20 Security Awareness Tips & Tricks Keeping your data safe and far away from the clutches of the hacking community is a need of the hour in…
Article Reverse engineering a JavaScript obfuscated dropper Nowadays one of the techniques most used to spread malware on windows systems is using a JavaScript (js) dropper. A js dropper represents, in most…
Article Average Data Recovery (CDRP) Salary in 2018 Do your interest areas lie in computer hardware? Do the words "data recovery" excite you? If you are looking to update your skills in data recovery…
Article PHP Lab: Prevent exposure of configuration/backup files from web root. Introduction and background A developer has created a web application in PHP, and the application makes use of configuration files from the config…
Article Tips for Managing Physical Security What is Physical Security? Source: GAO[pkadzone zone="main_top"] According to the security expert S. Harris, “physical security protects people,…
Article How Security Awareness Training Can Protect the Military Introduction There stills seems to be no true consensus on the need for or importance of security training in the workplace. There are people on…
Article Does History Need to Repeat Itself? Lessons Learned From WannaCry Often, at the end of a project, especially a long and complicated one, there will be a ‘lessons learned’ session held. These sessions usually bring…
Article PHP Lab: Exploiting SQL Injection Identifying SQL Injection vulnerabilities The first step in exploiting a SQL injection is to identify the vulnerability. This first section of this…
Article WannaCry, The Aftermath: How WannaCry Could Have Been WannaSmile I have been working in the field of cyber security and related areas for over 20 years. In that time there have been many cyber incidents. Those…
Article The Importance of C-Level Security Awareness Training As a CEO, it’s important for you to understand a harsh and terrifying reality: Your company is under constant attack from hackers, thieves, and…
Article PHP lab: File inclusion attacks File inclusion is one of the popular yet old vulnerabilities that are often seen in websites. [pkadzone zone="main_top"] PHP websites that make use
Article PHP lab: File upload vulnerabilities: Many websites require file upload functionality for their users. Social networking websites, such as Facebook and Twitter allow their users to…
Article PHP lab: PHP double submit problem. If a user refreshes a page after submitting a form, he may accidentally post the content again resulting in duplicate submission, thus causing…
Article HBO Hacked, Game of Thrones script leaked on the Internet Early August, hackers announced to have breached the systems of the television network HBO that is owned by the giant Time Warner. Crooks claimed to…
Article OWASP 2017 top 10 vs. 2013 top 10 After a long interval of four years, OWASP in April 2017 released a draft of its latest list of “Top 10 Web Application Security Vulnerabilities.”…
Article PHP Lab: Analyze the code and spot the vulnerability Introduction and background: A penetration test has been conducted on the following URL, and a SQL Injection vulnerability was identified.…
Article OWASP Top 10 #3: Cross-Site Scripting (XSS) Cross-Site Scripting Cross-site scripting (XSS) attacks involved the injection of malicious code into trusted websites. One of the traditional uses…
Article PHP Lab: Review the code and spot the vulnerability Introduction and background An application has been developed in PHP, and the source code of the login page is given for source code review to…
Article OWASP Top 10 #4: Broken Access Control Recently, OWASP (the Open Web Application Security Project) announced an update of their "Ten Most Critical Web Application Security Risks.” OWASP…
Article OWASP Top 10 #5: Security Misconfiguration Recently, the Open Web Application Security Project (OWASP) announced an update of their "Ten Most Critical Web Application Security Risks.” OWASP…
