Article How to Protect User Data with the Privacy by Design Framework The Privacy by Design framework (PbD) was first introduced by Dr Ann Cavoukian, Information and Privacy Commissioner of Ontario, in the 1990s. PbD…
Article What Employers Need to Know About Workplace Monitoring and Employee Privacy Introduction Businesses are heavily reliant on technology to complete their day-to-day operations, and employees need to use computers, laptops,…
Article How to Comply with GDPR Privacy Regulation in 6 Steps Introduction In recent years, data breaches involving personally-identifiable information (PII) scaled to unprecedented numbers. The Equifax case…
Article When is Wireless Penetration Testing Appropriate? Introduction Wireless communications are an invisible, ubiquitous service that allows data to flow in and out of businesses and homes via mobile…
Article How to make your own penetration testing lab If you want to go into penetration testing, a home lab is a must. In this article, we’ll discuss why a home lab can be useful, the pros and cons of…
Article How to get started as a mobile penetration tester If you’re reading this, you’re probably interested in learning how to get started with penetration-testing mobile devices but aren’t sure how to…
Article What Is It Like to Be a Penetration Tester for an In-House Team? Being a penetration tester is an exciting and lucrative career, but is it the right one for you? You may be reading this article because you: Are…
Article How to Advance In Your Career as a Penetration Tester Penetration testing is essential for maintaining security in modern enterprises, with some organizations hiring staff specifically for this purpose…
Article JIS-CTF: VulnUpload Walkthrough In this article, we will solve another Capture the Flag (CTF) challenge. This time, we'll be using an exercise which was posted on the VulnHub…
Article Leaders’ Meetings: A Privileged Target for Hackers Leaders' meetings are privileged targets for nation-state attackers that launch massive offensives to gather intelligence from the ongoing events.…
Article Threat Hunting for Anomalies in Privileged Account Activity Introduction A tell-tale sign of your network being hacked is that a privileged account, such as a system administrator account, has been…
Article Threat Hunting for Unusual DNS Requests Searching for Unusual DNS Requests is a standard method for threat hunting. The presence of Unusual DNS Requests can often tip off Information…
Article Threat Hunting for Swells in Database Read Volume Introduction When attackers have breached your network, one of the most common things they will be doing is looking into your systems that have…
Article Threat Hunting for Unusual Logon Activity What is one of the first things that you think of when thinking of potential threat activity on your network? Most would probably say that there has…
Article Threat Hunting and HTML Response Size Introduction Imagine that you are sitting at your workstation at work and you notice that your environment is experiencing a higher than usual HTML…
Article Threat Hunting for Domains as an IOC Introduction When threats are detected on a network, domains can serve as good indicators that the network is compromised. In many cases, this…
Article Threat Hunting for URLs as an IoC Introduction Unfortunately, cyber-attacks are just a fact of life in today’s world. Anyone with a laptop or smartphone can quickly write malicious…
Article Threat Hunting for File Names as an IoC Introduction Just like any good treasure hunt, you need a map or clues to be successful. Threat hunting is no different – Indicators of Compromise…
Article Threat Hunting for File Hashes as an IOC Threat Hunting is "the process of proactively and iteratively searching through networks to detect and isolate advanced threats that evade existing…
Article How to implement a data privacy strategy - 10 steps Ensuring data privacy is one of the biggest challenges organizations face. A quick look at the statistics related to personal data leaks in 2017 is…
Article Penetration Testing for a Company Vs. Being Freelance Introduction The Cybersecurity job market has become a hot field, seeking new, highly qualified candidates. It is a diverse field with various job…
Article What is the Difference Between Penetration Testing and Vulnerability Assessment? There is a substantial amount of confusion in the IT industry with regard to the difference between Penetration Testing and Vulnerability…
Article QA, Certification, & Accreditation in Computer Forensics Introduction The purpose of digital forensics is to answer one or more investigative or legal questions, with the purpose of using the evidence to…
Article How to comply with COPPA — 7 steps Protecting children online should be of paramount importance to all, especially in today's world. In response to this pressing issue, in 1998…
