Article Who Is Targeting Industrial Facilities and ICS Equipment, and How? Industrial Control Systems (ICS) Equipment Under Attack Industrial Control Systems (ICS) are expected to be installed and left isolated for a long…
Article What Is Malware? Malware is a common term in information security, but what exactly is it? In this article, we’ll explore where it comes from, what it is intended to…
Article VulnHub machines walkthrough series: Brainpan – Part 1 Continuing with our series on testing vulnerable virtual machines, in this article we will see a walkthrough of an interesting VulnHub machine…
Article How to become an information security (IS) auditor Introduction Being a security auditor means working with companies while conducting audits of security systems relating to the IT infrastructure.…
Article Red team assessment phases: Overview Computer systems and networks contain valuable information, and hackers are out there trying to steal that data. This has led to the development of…
Article Red Team Assessment Phases: Reconnaissance The second phase of a red team assessment is reconnaissance. In this phase, the red team attempts to collect information relevant to the assessment…
Article VulnHub Machines Walkthrough Series: Brainpan – Part 2 In this article, we’ll be carrying on with our walkthrough of an interesting VulnHub machine called Brainpan. In Part 1 of this article, we looked…
Article Red Team Assessment Phases: Target Identification The third phase of a red team assessment is target identification. In this phase, the red team moves from general information collected about the…
Article Red Team Assessment Phases: Gaining Access This phase is the first of several where the red team actively interacts with the target’s environment. Some of these phases tend to blend together,…
Article Red Team Assessment Phases: Establishing Foothold and Maintaining Presence In the previous phase, the goal was to gain initial access to the target network. The focus of this phase is to expand this access to the level…
Article Lampião 1: CTF walkthrough In this article, we will learn to solve a Capture the Flag (CTF) challenge which was posted on VulnHub by Tiago Tavares. According to the…
Article How to Measure the Success of Your Security Awareness Program Depending on the size and needs of your organization, a security awareness program usually equals a significant investment of time and funds.…
Article Red Team Assessment Phases: Completing Objectives The purpose of this phase of the assessment is fairly self-explanatory. In previous phases, the red team performed the operations necessary to set…
Article Red Team Assessment Phases: Reporting Reporting is the final and potentially most important phase of a red team assessment. The goal of a red team assessment is to provide the client…
Article Top 30 Web Developer Interview Questions and Answers for 2019 "Do what we say, or we shall replace you with a very small shell script." It's a bit of a dated threat now, but in the age of extreme optimization…
Article A Post-Compliant World? – Part 1 Over the next three articles, we will consider the past, present and future state of infosec compliance. Please note that these are personal views,…
Article Hack the Box (HTB) machines walkthrough series — Lazy So far, we have seen numerous Vulnhub machine walkthroughs which illustrate how to enumerate a machine and other possible entry points. We will…
Article A Post-Compliant World? – Part 2 Introduction Do we still have infosec compliance? Is the concept of upholding data and computer security outmoded? I showed in my previous piece how…
Article Top 30 supervisory control and data acquisition (SCADA) technician interview questions and answers for 2019 As control system architecture plays an increasingly important role in critical infrastructure, the importance of the role of Supervisory Control…
Article Hack the Box (HTB) machines walkthrough series — Bank Continuing with our series on the Hack the Box (HTB) machines, this article contains the walkthrough of another HTB machine. This one is named…
Article Red Team Assessment Phases – Everything You Need to Know! The antagonistic approach of a Red Team makes things challenging to an organization’s system, policies, anticipations and adaptations. These days,…
Article A Post-Compliant World? Part 3 The second piece of this series considered current difficulties of ongoing infosec assurance efforts. Now let’s now turn to how things could look in…
Article 5 Steps to Mitigate Endpoint Security Incidents Endpoint security may be the best investment you have ever made. According to a Ponemon survey (The 2017 State of Endpoint Security Risk), an…
Article Hack the Box (HTB) machines walkthrough series — “Haircut” Continuing once again with our series on Hack the Box (HTB) machines, this article contains the walkthrough of another HTB machine named “Haircut.”…
