Article Threat Hunting – Zyklon Trojan This is a lab that is conducted in a test bed. The resources were downloaded from malware.trafficanalysis.net. The samples provided came from a case…
Article Insider Threat: How to Protect Your Business from Your Own Employees It's trite to write that the company's data and customer base are the main assets of any business in the 21st century. However, the attitude to…
Article Top six SIEM use cases With rising trends and forms of attacks, most organizations today deploy a Security Incident and Event Management (SIEM) solution as a proactive…
Article What is an XXE attack? XXE (XML External Entity attack) is now increasingly being found and reported in major web applications such as Facebook, PayPal, etc. For instance,…
Article Learning curve: Security awareness in education In education the goal is twofold, to bestow knowledge and protect the well-being of the student body. Unfortunately, as reports of data compromise…
Article DoD 8570 IAM certification and requirements The U.S. Department of Defense (DoD) directive 8570, which is titled “Information Assurance Workforce Improvement Program,” outlines the…
Article Privilege escalation on linux with live examples One of the most important phase during penetration testing or vulnerability assessment is privilege escalation. During that step, hackers and…
Article The Rowhammer: the Evolution of a Dangerous Attack The Rowhammer Attack Back in 2015, security researchers at Google's Project Zero team demonstrated how to hijack an Intel-compatible PCs running…
Article Top 5 email retention policy best practices Email retention policies are no longer just about conserving space on your Exchange server. Today you must take into account how your email…
Article Memory forensics and analysis using volatility Volatility is one of the best open source software programs for analyzing RAM in 32 bit/64 bit systems. It supports analysis for Linux, Windows,…
Article CGEIT Domain 4: Risk Optimization Introduction Risk optimization falls under the fourth domain of the ISACA’s Certified in the Governance of Enterprise IT (CGEIT) exam and…
Article DoD IASAE Overview What is the DoD IASAE? The U.S. Department of Defense (DoD) IASAE covers the requirements for the Information Assurance architecture and engineering…
Article NIST CyberSecurity Framework Introduction The National Institute for Standards and Technology (NIST) is a U.S.-based organization that was tasked by the U.S. government with…
Article The IAPP CIPP/US certification: The leading U.S. privacy credential Privacy issues have become increasingly important for organizations in recent years. While events such as Edward Snowden’s NSA revelations in 2013…
Article DoD 8570 IAM certification – Level I What is the DoD IAM Level 1? The Department of Defense (DoD) directive 8570 provides guidance on how the DoD workforce manages and executes…
Article CGEIT Domain 5: Resource Optimization [DECOMMISSIONED ARTICLE] NOTE: This article is based on an old version of the CGEIT exam, and should not be consulted for information on the current exam. Please consult the…
Article Closing the Gender Gap: Women in Cybersecurity March 8 was International Women's Day. A lot of folks will say, “why do we need a special day for women? Women have equality now - don’t they?” To…
Article 10 most common phishing attacks Phishing is one of the most common ways for scammers to steal information. Through social engineering or deception, fraudsters attempt to trick…
Article Android penetration tools walkthrough series: QARK In this article, we are going to learn how to use the Quick Android Review Kit. QARK one of the most efficient Android static analysis tool…
Article Importance of IP Fragmentation in Penetration Testing Introduction Penetration testing is an extremely important testing aspect when we consider the optimum level of security for any system pertaining…
Article IoT firmware analysis -- Firmwalker IoT is the next big technology that will change the way we communicate and exchange data. Every day thousands of IoT devices are coming into the…
Article 5 ways to identify a spear phishing email Spear phishing is a targeted form of email attack used to steal sensitive information through enticement, impersonation, or access-control bypassing…
Article Android penetration tools walkthrough series: AndroBugs framework Android apps are arguably the most commonly used features of smartphones on the market today. Our lives are made more organized, faster, and more…
Article 5 Security Awareness Tips for HIPAA Compliance Introduction The Healthcare field generates a lot of information that is very private. To address this issue, Congress passed what was originally…
