Article Degree vs. certification: Mid-level cybersecurity architect Introduction Those looking to combine top-flight cybersecurity skills and knowledge with information security design and building principles should…
Article Best open-source tools for Red Teaming Best open-source Red Team tools One of the best features of the cybersecurity community is the vast number of free and open-source tools that are…
Article Inside the Ryuk ransomware What is Ryuk? Ryuk is a ransomware sample that has been making the rounds recently. It is designed to be used in targeted attacks and has no ability…
Article Lessons learned: The Capital One breach The Capital One breach was accomplished by a former AWS employee who took advantage of a misconfigured firewall used by Capital One to protect their…
Article Best commercial tools for Red Teaming Introduction A variety of different free tools exist for Red Team operations, and, in many cases, a Red Team can get by just fine taking advantage…
Article Network traffic analysis for incident response Introduction Sophisticated cybercriminals understand the techniques and tools that they need to employ to move undetected throughout a victim…
Article Using certificates in Windows 10 Trust is one of the most important things that can be established between two parties. It is a process where both parties suspend their disbelief of…
Article Cybersecurity Weekly: Hacker reveals black market credit cards, Linux Sudo flaw discovered, RDP honeypot experiment An anonymous hacker reveals 30% of the stolen credit cards on the black market. A Sudo flaw has been discovered that allows all Linux users run…
Article Network traffic analysis for IR: Threat intelligence collection and analysis Introduction While any security professional can call themselves an analyst, the full scale and scope of the cyber-threat intelligence analyst is…
Article Red Team Operations: Presenting your findings The importance of the Red Team presentation At the end of the Red Team assessment, there are usually two main deliverables. The Red Team report…
Article Ethical hacking: Social engineering basics What is social engineering? In a nutshell, social engineering is the art of manipulation and misdirection. A social engineer’s goal is to do…
Article Mitigating security risk with continuous employee training and development Earlier this month, Infosec surveyed 180 IT and security pros about the challenges they face in developing and retaining their organization’s…
Article Traffic analysis for incident response (IR): How to use Wireshark for traffic analysis Traffic analysis is the process of monitoring network protocols and the data that streams through them within a network. In this article, we’ll…
Article Certifications compared: GSLC vs. CISM Management is an important part of many organizations and their composite departments, including information security/technology and cybersecurity.…
Article Cybersecurity training becoming more specialized, hands-on, says Jason Dion Cybersecurity training is getting even more hands-on and lab based, said Infosec Skills author Jason Dion. “It’s about ‘what can you do?’ as opposed…
Article Network traffic analysis for IR: Content deobfuscation Introduction to obfuscation Encoding and encryption techniques are used for a variety of purposes. Some of these are legitimate, like the use of…
Article Network traffic analysis for IR: Credential capture Introduction to leaked credentials The concept of leaked or breached credentials is nothing new, with data breaches occurring on a daily basis. Most…
Article Red Team Operations: Report structure and content What to report The first stage in building a Red Team report is knowing what to put in the report. Three of the most important things to discuss in…
Article Network traffic analysis for IR: Analyzing fileless malware Introduction to fileless malware Fileless malware is malware authors’ response to traditional malware identification and analysis techniques. Many…
Article Cybersecurity Weekly: Equifax default password discovered, NordVPN data breach, Army retires floppy disks A default admin password was used to "secure" sensitive data at Equifax. NordVPN suffered a data breach, exposing private encryption keys of some of…
Article Malware spotlight: Malvertising Introduction: The impact of malicious ads One of the most deceptive ways cybercriminals use to distribute malicious software (malware) is…
Article Red Team Operations: Reporting for compliance The growing compliance landscape In recent years, the number of standards and regulations that organizations have to demonstrate compliance with has…
Article Network traffic analysis for IR: Network mapping for incident response Introduction to network mapping The concept of network mapping is not a new one. Creating network maps in the design phase of a network and updating…
Article Malware spotlight: Crypto-jacking Introduction In this article, we will explore crypto-jacking, a growing malware-based epidemic in the cryptocurrency realm. Before understanding…
