Article MinU 1: Capture-The-Flag (CTF) walkthrough In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author using the name 8bitsec. As per…
Article Keeping your cybersecurity skills relevant in 2019 Keeping your cybersecurity skills relevant in 2019 is a challenge, but in a world where threats are constantly evolving and changing, cybersecurity…
Article ICS/SCADA security overview Introduction The advent of Supervisory Control and Data Acquisition (SCADA), and Industrial Control Systems (ICS) generally can be described as a…
Article Introduction to SCADA security Introduction Supervisory Control and Data Acquisition, or SCADA, is a system used in many industries, including in the nation’s critical…
Article MITRE ATT&CK vulnerability spotlight: Valid accounts Introduction The MITRE Corporation is a non-profit, federally-funded research and development center (FFRDC) that, among other things, performs…
Article Physical security for ICS/SCADA environments Introduction Physical security for Industrial Control Systems/Supervisory Control and Data Acquisition systems (ICS/SCADA) is paramount for a…
Article How to create a more diverse cybersecurity workforce Introduction Some people reading this will probably think, oh no, not another article about diversity in the workplace. But what is diversity?…
Article MITRE ATT&CK vulnerability spotlight: Pass-the-hash Introduction Since the first appearance of pass-the-hash (PtH) in the nineties, this lateral movement tactic has been helping attackers leverage…
Article Lessons learned: the Marriott breach Overview of the breach Marriott International has been in the news throughout 2019 due to a major data breach discovered and investigated in late…
Article Types of ICS Introduction Industrial control systems (ICS) are mainstays in the worlds of manufacturing, automation, utilities facilities and more. They make…
Article Malware Analysis and Reverse Engineering Introduction This article provides a high-level overview of malware analysis and reverse engineering. If you are planning to get started with…
Article 16 business email/mobile phishing tricks to be aware of in 2019 Introduction It’s hard enough running a business without a cybercriminal trying to ruin it. According to PWC, in 2018, 49% of organizations across…
Article Disassembly 101 Introduction This article briefly explores topics connected to assembly basics, registers, operands, instructions, arithmetic instructions, logical…
Article Threat hunting with Kolide and osquery Introduction In this article, we’ll discuss how we can use Kolide Fleet for threat-hunting purposes. This article is not intended to be an…
Article MITRE ATT&CK vulnerability series: Trusted relationship Introduction What many who are not information security-savvy may think is that the attack surface of an organization is confined to simply the…
Article Security Concerns of Flying Motorcycles [Updated 2019] Section 1. Introduction Flying motorcycles resembling the flying machines from Star Wars are about to be placed on the market. A number of…
Article Debugging for malware analysis This article provides an overview of debugging and how to use some of the most commonly used debuggers. We will begin by discussing OllyDbg; using…
Article 16 phishing scams that consumers need to be aware of in 2019 Introduction Scams are as old as human society. There has, and likely always will be, an element of humanity that will try to take advantage of us…
Article Vigilante Malware: Do We Need a Cyber Vigilante? [Updated 2019] The Mystery Behind the Linux.Wifatch Malware Thousands of IoT devices across the world have been infected with a new strain of malware, but this…
Article Assembly Basics Introduction This article gives details about assembly programming for the Intel 8086 microprocessor. It also presents very clear details by…
Article Book Excerpt: Web Application Security, A Beginner's Guide [Updated 2019] Web Application Security: A Beginner’s Guide provides IT professionals with an actionable, rock-solid foundation in Web application security--from a…
Article SAP Security for CISO part 14: SOD [Updated 2019] Numerous articles covering different aspects of SAP Security mostly regarding vulnerabilities and risks paved the way for today's discussion on how…
Article ICS/SCADA Access Controls Industrial controls systems (ICS) and supervisory control and data acquisition (SCADA) systems (a subset of ICS) manage our critical national…
Article Saving lives with ICS and critical infrastructure security Introduction Digital transformation has revolutionized critical infrastructure industries like manufacturing, enabling them to harness new…
