Article How to Create a Security Awareness Program A security awareness program can be an extremely valuable tool. It helps an organization thwart active attacks and reduces the amount of weaknesses…
Article The 10 largest privacy threats in 2018 Looking at statistics, 2017 could be considered a record year for data breaches. For anyone following popular security-related news, this should not…
Article How to Conduct a Data Privacy Impact Assessment in 2018 In May of 2018, after a two-year grace period, the General Data Protection Regulation (GDPR) was finally activated. GDPR exists to ensure that every…
Article 10 call center security tips for protecting customer data and privacy Call centers are particularly vulnerable to privacy breaches, and it is mainly due to what is best described as a security ripple effect. In this…
Article When is Client-Side Penetration Testing Appropriate? Client-side penetration testing, also known as internal testing, is the act of exploiting vulnerabilities in client-side application programs such…
Article Security Issues in Edge Computing and the IoT The Internet of Things (IoT) is widely considered to be the next wave of computing, where distributed devices automate common tasks and make…
Article An Employer’s Guide to Employee Privacy and BYOD Introduction For years, employers have turned to Bring-Your-Own-Device (BYOD) policies with the hope of boosting productivity. BYOD is a concept…
Article Temple of Doom: CTF Walkthrough Part 1 In this article, we will solve a Capture the Flag (CTF) challenge which was posted on VulnHub by "0katz." As you know from the previous articles in…
Article The Benefits of a Company-Run InfoSec Program Built on Training and Awareness Are you planning to implement a company-run information security training program? Then you're not alone. In fact, more and more companies are…
Article Machine Learning in Offensive Security Contrary to popular belief, machine learning is not an invention of the 21st century. Over the last twenty years, however, several productive…
Article An introduction to RFID What's RFID? RFID stands for Radio Frequency Identification. It is a technology allowing devices to automatically identify information stored in a…
Article The Ultimate Security Awareness Infographics Roundup One of the most powerful tools for conveying any sort of message is an infographic. These are like posters, but the difference is the content is…
Article Cybersecurity Awareness Checklist for Educational Institutions Education has become a growing target for cybercriminals, with breaches up 103 percent in 2017, according to Gemalto. These breaches are mostly…
Article Security Awareness Checklist for SCADA Systems Much like information technology systems, industrial control systems (ICS) are vulnerable to attack and malicious interference. The control system…
Article Russian Cyberspies Target 2018 U.S. Midterm Elections APT28 Behind Cyberattacks In July, Microsoft announced that Russia-linked threat actors attempted to hack at least three 2018 U.S. midterm election…
Article 7 Security Awareness Tips for Senior Citizens More and more seniors are getting to grips with the Internet, but for some, the digital world is a dangerous place. Many are being scammed out of…
Article 30+ cybersecurity tips for travelers The biggest cybersecurity threat to travelers is the risk associated with using Wi-Fi hotspots. But public Wi-Fi is not the only threat. The main…
Article Security Awareness Development within Your IT Department Cybercrime is on the rise, creating massive demand for skilled information security staff in organizations the world over. You don't need a security…
Article Internet of Things (IoT) Evolution: Where to From Here? Introduction IoT started as a niche market for hobbyists and has evolved into a huge industry. But with this growth comes security vulnerabilities…
Article The Most Vulnerable and Hackable Medical Devices The Internet of Things (IoT) adds convenience and capabilities in both personal and professional applications. Smart device usage in the medical field
Article The How and Why of Account Takeover Attacks What Is an Account Takeover? Exactly what it says on the label: an account takeover or ATO is when an account that is used to access company or…
Article What Is it Like Being on a Penetration Testing Team? Introduction Working on a pentest as a freelancer can be one of the most flexible opportunities a pentester can take up. As a result, many freelance…
Article What Happens Once a Penetration Test Uncovers Vulnerabilities? Introduction The process followed once a pentest has uncovered vulnerabilities determines how management will address the findings. The issues…
Article How Do pentesters document and remediate vulnerabilities in web apps? Not all aspects of pentesting are exciting, hands-on exercises. In fact, pentesters find themselves spending a lot of time documenting and recording…
