Article Log analysis for web attacks: A beginner's guide It is often the case that web applications face suspicious activities due to various reasons, such as a kid scanning a website using an automated…
Article Null byte injection in PHP The null character is a control character with the value zero. It is presented in many character sets such as ASCII (American Standard Code of for…
Article Android Penetration Tools Walkthrough Series: Androguard Today, much of our personal and financial information is tied to mobile and web apps. Penetration testing is an ever-growing enterprise in the tech…
Article CGEIT Domain 2: Strategic Management [DECOMMISSIONED ARTICLE] NOTE: This article reflects an older version of the CGEIT Exam -- please see the current CGEIT Certification page for the most up-to-date information.
Article Cooperation between Humans and Artificial Intelligence in the Name of Security Artificial Intelligence (AI) - Machine Learning (ML) - Deep Learning (DL) Artificial intelligence as a term dates back to the 1950s, but only…
Article 4 Ways to Integrate BEC Prevention Strategies into Your Organization Business email compromise (BEC), an international fraud scheme, is seemingly forever on the rise and no company is safe from attack. It’s therefore…
Article How to Prevent BEC With Email Security Features Business email compromise (BEC) has bilked unsuspecting institutions around the world for more than $9 billion dollars. A whopping two-thirds of…
Article How Criminals Can Exploit AI Introduction Because tools for developing artificial intelligence (AI) sources and tutorials for its use are widely available in the public domain,…
Article Shodan and IoT: The Problem is here! Introduction Shodan a search engine which collects the information about all IPv4 and IPv6 devices connected to the internet and gives us the…
Article What is the DoD CSSP (cyber security service provider)? The DoD Cyber Security Service Provider (CSSP) is a certification issued by the United States Department of Defense (DoD) that indicates a…
Article Threat Hunting – Chthonic Banking Trojan This is a lab that is conducted in a test bed. The resources were downloaded from malware.trafficanalysis.net. The samples provided came from a case…
Article The Art of Fileless Malware Introduction Malware has become a critical trend for companies around the world. We are looking at ransomware and other threats already lurking…
Article Android penetration tools walkthrough series: Frida Frida is a powerful and extensible instrumentation toolkit – among its many strengths, it is ideally suited to testing and evaluating native Android…
Article Top Five SecurityIQ Phishing Templates: April Edition With over 1,000 phishing templates in SecurityIQ, it can be difficult to pick the best templates for your team. We took a look back at April’s…
Article The importance of physical security in the workplace Physical security in detail Protecting important data, confidential information, networks, software, equipment, facilities, company's assets, and…
Article How to Recover from A Business Email Compromise (BEC) Attack Business email compromise (BEC) is one of the most devastating, and costly, cyber attacks of all time — it's estimated organizations lose over…
Article BEC Attacks: How Email Account Compromise Works Business email compromise (BEC) is a form of phishing attack in which a cyber attacker impersonates a high-level executive (often the CEO). From…
Article BEC Attacks: How Fake Invoice Schemes Work According to Agari's Business Email Compromise (BEC) Attack Trends Report, 96% of companies experienced BEC attacks in the second half of 2017,…
Article 5 reasons why you should report — Not reply to — Suspicious emails Phishing emails are much harder to identify than most people realize. While you may laugh off the obvious ones, like your great grandmother's…
Article BEC Attacks: How Attorney Impersonation Works Cases of attorney impersonation are on the rise and often, they are accompanied by fraudulent requests for money or sensitive information.…
Article Layer Seven DDoS Attacks What is Layer 7? The process of sending and receiving data from one host to another, data encapsulation, is possible due to the existence of a seven…
Article The basics of IDA pro IDA Pro is the best disassembler in the business. Although it costs a lot, there's still a free version available. I downloaded IDA Pro 6.2 limited…
Article Crooks Exploit Facebook to Spread Crypto-miner Malware Social networks are a privileged attack vector that could be used by cybercriminals to spread malware to a wide audience. In the last month's…
Article Top 10 solutions to protect against DDoS attacks and increase security According to statistics, 33% of businesses fall victim to DDoS attacks. It is almost impossible to predict such attacks. Some of them can be…
