Article The Gaming Industry: A Privileged Target for Crooks — The Fortnite Case Introduction In the past, we've reported many cases of cyberattacks against companies operating in the gaming industry. We observed many attacks,…
Article Women in Cybersecurity: More Credentials, Less Pay & Even Fewer Opportunities It’s Time for Change Roughly 70 years ago, the U.S. civilian labor force was just 29% female. Huge strides have been made in education and workforce…
Article Top 5 (deliberately) vulnerable web applications to practice your skills on The OWASP Top 10 includes the top 10 vulnerabilities which are followed worldwide by security researchers and developers. You must have heard or…
Article The Ultimate Guide to Threat Hunting Introduction At its essence, cyberthreat hunting can be quite similar to real-world hunting. It requires a uniquely skilled professional possessed…
Article Threat-Hunting Process Introduction Consider this: No system is absolutely protected from cyberthreats. Even in the case where the best, most recent and effective security…
Article How to Become a Threat Hunter Introduction A cyberthreat can be defined as any adversary with three basic characteristics: the intent, capability and opportunity to do harm.…
Article Threat hunting: IOCs and artifacts Unusual behavior of information technology assets within an organization may be a hint that the organization is undergoing a cyberattack.…
Article Threat Hunting Methodologies Introduction Threat hunting is a proactive and iterative approach to detecting threats. It falls under the active defense category of cybersecurity…
Article QRL jacking Quick Response Code Login Jacking (also known as QRL Jacking) is a social engineering attack by which the attacker can hijack the session, affecting…
Article Important SQLMap commands The SQLMap tool can be found in every penetration tester's toolbox. It is one of the most popular and powerful tools when it comes to exploiting SQL…
Article Vulnhub machines walkthrough series — PwnLab-Init Continuing with our series on Vulnhub machines, in this article we will see a walkthrough of another interesting Vulnhub machine called PwnLab-Init.…
Article Interview With an Expert: How Does a CISO Learn to Be a CISO? The role of the chief information security officer (CISO) is quickly becoming more important as cybersecurity in general becomes more intertwined…
Article USV: 2017 Part 2 CTF Walkthrough In this article, we will continue the Capture the Flag (CTF) challenge which was posted on VulnHub by Suceava University. As you may already know…
Article Virtual Machine Introspection in Malware Analysis What is Virtual Machine Introspection? The word "introspection" generally refers to the observation and examination of one's own mental and…
Article Pentester Academy Command Injection ISO: SugarCRM 6.3.1 Exploitation Introduction The Pentester Academy by Vivek Ramachandran had compiled a virtual machine that consists of various vulnerable real-world application.…
Article Tabnabbing What is Tabnabbing? As described by Aza Raskin, tabnabbing goes like this: when a simple JavaScript detects that the user has moved to another…
Article Threat Hunting Techniques Introduction Cyberthreat-hunting is a way of scouring through a network and finding sophisticated threats that could cause harm to systems and data,…
Article 10 Benefits of Threat Hunting Introduction Organizations are constantly being challenged by an increasing number of cybersecurity threats. As the severity and frequency of…
Article Threat Hunting vs. SIEM Introduction To reduce attack surfaces and improve one’s cybersecurity posture, organizations can adopt two stances: a reactive approach and a…
Article AWS Cloud Security for Beginners — Part 1 Introduction to AWS cloud security Cloud computing has gained enormous attention during the past few years, and a lot of companies are shifting…
Article How Much Does a Data Breach Cost? Reading the 2018 Cost of a Data Breach Study How much does a data breach cost? It isn't a simple question, but the answer is the only way to transmit the urgency of the situation to C-level…
Article AWS Cloud Security for Beginners — Part 2 Introduction In the previous part of this series, we set up our free-tier account and then configured AWS CLI. In this article, we will discuss S3…
Article Threat Hunting and SOC Introduction “Threat hunting” refers to the process of proactively and repeatedly searching through networks to detect and isolate advanced threats…
Article How to Build a Threat-Hunting Tool in 10 Steps Introduction If you are planning on building your own threat-hunting tool but don’t know where to start, then this could be just the article for…
