Article Phishing Attacks Using Public Data [Updated 2019] 1. Introduction According to John McAfee, the developer of the first commercial anti-virus program, hacking a large corporation is "so easy even a…
Article Reverse engineering packed malware In this article, you’ll get a better understanding of what a packed executable is and how to analyze and unpack malware. Finally, you’ll get to know…
Article Analyzing packed malware Malware is created with deception in mind. Malware authors want to go undetected in order to steal, alter or delete as much information as possible.…
Article Why diversity of thought matters in cybersecurity Introduction The cybersecurity industry has long struggled with gender disparity. And while the number of women in cybersecurity is growing, the gap…
Article Does it make sense to make a career move from law to data privacy? Introduction What exactly is data privacy? According to the Free Dictionary, the word “privacy” is defined as “The state of being free from public…
Article Gentoo Hardening: Part 4: PaX, RBAC and ClamAV [Updated 2019] Grsecurity and Xorg If we enable the "Disable privileged I/O" feature in the hardened kernel and reboot, we can't start X server. That's because…
Article ICS protocols ICS stands for Industrial Control Systems. ICS is a generic term used to describe various control systems and their instrumentation, used for…
Article Anonymization and pseudonymization of personal data Introduction Cybercriminals are waging a war on our personal data. The latest research from IBM and Ponemon on the cost of cybercrime shows that…
Article SAP Mobile Infrastructure Security [Updated 2019] SAP, like any other large vendor, is evolving towards greater mobility and providing access to its applications from different devices located…
Article Mobile Phone Tracking [Updated 2019] GSM or Global System for Mobile Communication is a technology that's widely used in mobile communications, especially mobile phones. This technology…
Article Security in Public API’s – How [Updated 2019] Far too often we will download an API (Application Programming Interface) from Programmable Web, or download an SDK like the Facebook SDK and not…
Article Duqu 2.0: The most sophisticated malware ever seen [Updated 2019] Disconcerting news is shocking the IT security industry. The virus protection giant Kaspersky has been compromised by a sophisticated cyber-threat.…
Article Hacking PDF: util.prinf() Buffer Overflow: Part 2 [Updated 2019] For part 1 of this series, click here. 1. Introduction In the previous part we've seen the structure of the PDF document and extracted the…
Article OWASP top 10 A7: Insufficient attack protection “Security is always seen as too much until the day it’s not enough.” This quote by William H. Webster, an American attorney, jurist and current…
Article Rootkits 101 Introduction Rootkits are a species of malicious software with incredible damage potential. Due to their sophistication and complexity, they also…
Article "Cost of a Data Breach Report" - our analysis Introduction Each year, an important study is performed by the Ponemon Institute that is sponsored by IBM Security. The report generated from the…
Article Types of rootkits A rootkit is simply a set of tools that can maintain root privileged access to an operating system. A malware rootkit will usually carry a malicious…
Article Mailsploit: The Undetectable Spoofing Attack [Updated 2019] Pentester Sabri Haddouche just uncovered a major new email spoofing tactic. Named Mailsploit, the technique leverages bugs in email clients and…
Article Process control network (PCN) evolution A Process Control Network (PCN) is a network composed of real-time industrial control systems which manage, monitor and control industrial…
Article Starting a cybersecurity career with a degree versus certifications Introduction Do you need a degree to get a job in cybersecurity? To say this is a hotly debated issue would be an understatement. A quick Google…
Article Modern Physical Security Awareness Is More Than Dumpster Diving [Updated 2019] What is Physical Security The term "physical security" refers to the security measures that are put in place in order to deny unauthorized access to…
Article OWASP Top 10 #10: Unprotected APIs [Updated 2019] Modern applications are becoming more complex, more critical and more connected. The difficulty of achieving application security has increased…
Article OllyDbg Introduction OllyDbg is a 32-bit debugging tool used to analyze binary code. Its popularity is tied to the fact that people can do so despite not…
Article US Regions Most Vulnerable to a Cyber Attack [Updated 2019] Introduction to US Regions Most Vulnerable to a Cyber Attack In December 2016, the Identity Theft Resource Center published a report indicating the…
