Article How to comply with the Red Flags Rule The Red Flags Rule, or RFR, is one of the identity protection rules found in the Federal Credit Reporting Act (FCRA). More specifically, RFR deals…
Article How to comply with the GLBA Act — 10 Steps The Gramm-Leach-Bliley Act is a U.S. federal law created to control how financial institutions deal with a consumer's non-public personal…
Article How to comply with FCRA — 6 steps The Fair Credit Reporting Act, or FCRA, is a piece of legislation passed by Congress in 1970 to promote fairness, accuracy and privacy for…
Article How to Comply with HIPAA Regulations – 10 Steps There is a tremendous amount of data in the world of healthcare. That data includes personal healthcare information (PHI), which is regulated by the…
Article The Main Concerns with Biometric Authentication Part of my job is to coordinate technical specifications for mobile app development projects with the customers. In the process, I often hear the…
Article Technical Skills vs. Soft Skills: Which Are More Important as an InfoSec Professional? "People, Not Technology, Are Key Elements of Cybersecurity," write Ivo Ivanovs and Sintija Deruma in an ISACA Journal issue. In fact, finding…
Article Toppo: 1 capture-the-flag walkthrough In this article, we will learn to solve the "Toppo: 1" Capture-the-Flag (CTF) challenge which was posted on VulnHub by Hadi Mene. According to the…
Article Virtual Machine Introspection in Malware Analysis – LibVMI In the last article in this series, we have seen what Virtual Machine Introspection is and how it works in general. Now, in this article, we'll see…
Article PowerShell for Pentesters Part 3: Functions and Scripting with PowerShell Introduction The more we advance in our articles, the more we notice the power of PowerShell, and that impression will only increase as we move…
Article Blockchain Vulnerabilities: Imperfections of the Perfect System The whole cryptocurrency and blockchain craze has attracted both fans and critics of the new tech, but the flip side is that it has lured…
Article InfoSec Institute Launches Security Awareness Practitioner Certification Boot camp certifies professionals with knowledge and skills to develop and sustain successful security awareness training programs InfoSec…
Article Vulnhub machines walkthrough series - Vulnix Today we'll be continuing with our series on Vulnhub virtual machine exercises. In this article, we will see a walkthrough of an interesting Vulnhub…
Article “Quiet Skies” – A TSA Surveillance Program Targets Ordinary U.S. Citizens Here we are once more to discuss another surveillance program that could threaten the privacy of U.S. citizens. This time, our topic is the…
Article The 10 best practices for identifying and mitigating phishing Phishing (a form of social engineering) is escalating in both frequency and sophistication; consequently, it is even more challenging to defend…
Article Top 10 anti-phishing email templates As phishing attacks evolve, your employees need to stay ahead of the curve. Here are 10 proven anti-phishing email templates to help keep your team…
Article The Trends in Spear Phishing Attacks Introduction As we know it today, Phishing has become one of the most commonly used tactics by the Cyber attacker to garner personal information and…
Article How to add a phishing notification button to outlook "Phishing" is a form of Internet scam that has become much more common in the past few years. A phishing attempt will usually come in the form of an…
Article How to prevent CEO fraud – 10 tips CEO fraud scams are on the rise. They aren't that different than other phishing emails, except most get it and think it's from the boss. The FBI…
Article The 6 Latest Phishing Emails to Avoid in 2018 Despite increased user awareness, phishing remains one of the biggest security threats to the enterprise. Of 1,450 data breach incidents in 2017,…
Article Threat Hunting for Mismatched Port – Application Traffic Indicators of compromise or IOCs are evidence indicating a breach of security. IOC includes virus signature, IP address, Hash value of Malware, Malici
Article Anti-phishing training vs. software: Does security awareness training work? Due to the increasing advances in today's technology, endpoint protection, and security software solutions are becoming even better at protecting…
Article The phishing response playbook As we know, phishing remains one of the most well-known forms of social engineering. Although this form of threat has been in existence for a long…
Article How to Detect and Prevent Direct Deposit Phishing Scams The same digital revolution that's ushered in an era of business innovation has been as much of a boon for the enterprising criminal set. Moreover,…
Article Security awareness, training, and education Learning is a continuum: it starts with awareness, builds to training, and evolves into education. We can use the definitions provided by NIST for…
