Article Nine Major Phishing Attacks of 2018 (and How to Spot Them) Phishing attacks are the most common type of cyberattack for good reason: because they work. If an attacker can convince you to click on a link in a…
Article Spam Filtering Cheat Sheet: 14 Ways to Reduce Spam What Is Spam? Spam is usually defined as irrelevant or unsolicited messages sent over the Internet, typically to a large number of users, for the…
Article What Is Protected Health Information (PHI)? Healthcare is a data-rich industry. These data are created across the entire healthcare ecosystem; they represent a wealth of information that can…
Article Spam or Phish? How to tell the difference between a marketing email and a malicious spam email Virtual crime is a side effect of the convenience of technology. With greater strides in technology making everything from banking to communication…
Article How a Data Protection Officer Will Benefit Your Organization In May of 2018, the European Union’s General Data Protection Regulation (GDPR) came into force. This wide-reaching law touches any company, no…
Article [FREE Training Resources] Posters, Infographics and more! Here at InfoSec Institute, we get pretty excited about events like National Cyber Security Awareness Month (NCSAM) and European Cyber Security Month…
Article What Should a Security Manager Know About US and UK Privacy Laws? George Bernard Shaw once said that the U.K. and U.S. were “two nations divided by a common language.” You can say a similar thing about security…
Article What Your Data Protection Officer Should Know About Privacy Requirements Data privacy suddenly got hot a few years ago when Edward Snowden made his revelations about the NSA snooping on U.S. citizens’ data. Since then,…
Article Do Security Managers Need an IAPP Certificate? You are probably looking into expanding your career in IT security, perhaps even aspiring to become a security manager, but you’re not sure about…
Article Why DevOps Need Penetration Testing When your goal is to innovate and deliver products and services at higher speed, security can be a bit of an afterthought. This is especially true…
Article Missed GDPR Deadline? 6 Steps You Need to Take Right Now Despite the recent mad dash to comply with European Union’s General Data Protection Regulation (GDPR), many organizations missed the May 25…
Article The IoT Security Skills Gap The Internet of Things (IoT) is changing the cybersecurity landscape. This shift in skills along with the already shortfall of IT workers is…
Article 15 Ways to Secure Your Business Wi-Fi Top 15 Business Wi-Fi Tips 1. Change the SSID This one might not sound like a big deal, but it can make it a lot harder for a would-be attacker to…
Article Security Awareness & Training for Small Business While it’s the attacks on well-known companies that make the headlines, the threat is just as worrying for small businesses. And the problem is made…
Article How to Use Biometrics in Logical Access Entry Introduction Biometrics is another security technology which is used to confirm the identity of an individual. The tools utilized can do this either…
Article CVE-2018-11776 RCE Flaw in Apache Struts Could Be Root Cause of Clamorous Hacks CVE-2018-11776 RCE in Apache Struts At the end of August, maintainers of Apache Struts released security updates for the Apache Struts 2 open-source…
Article Wakanda1 CTF walkthrough In this article, we will learn to solve a Capture the Flag (CTF) challenge which was posted on VulnHub by xMagass. According to the information…
Article GoldenEye 1: CTF walkthrough, part 1 In this article we will attempt a capture-the-flag (CTF) challenge called “GoldenEye 1.” This CTF was posted on VulnHub by the author Creosote. Per…
Article Security Awareness: A Core Competency for K-12 Students Today’s youth spend more time than ever before online. Like learning to lock the front door behind you, security awareness training at an early age…
Article Top 5 Web Application Security Scanners of 2018 Intro to Web Application Security Scanners Web application plays an important role in an organization and possesses a great impact and gateway to…
Article Penetration testing: maintaining access Once a pentester manages to gain access to the target system, he should work hard to keep his boat afloat, metaphorically speaking. He can choose…
Article What Your Compliance Officer Should Know About Privacy As the prevalence of digital technologies grows, compliance becomes a more vital part of how organizations do business. Compliance has become a…
Article What a security auditor needs to know about privacy compliance Constant changes in the regulatory environment are putting more pressure on organizations to get data security and privacy right. Some regulations…
Article The Changing Landscape of Endpoint Security: What You Need to Know for 2018 Endpoint security doesn't always get the same attention as or share the high profile of network and Internet security, but that doesn't diminish its…
