Article Cybersecurity Weekly: Record bug bounty payouts, new phishing attacks, smartphone fingerprint hack Bug bounty platform Bugcrowd breaks weekly payout record with over $500,000. Paypal upsets Microsoft as phishers’ favorite brand for the first time…
Article Network traffic analysis for IR: Address resolution protocol (ARP) with Wireshark The Address Resolution Protocol (ARP) was first defined in RFC 826. As the name suggests, it is designed to resolve IP addresses into a form usable…
Article Be aware of these 20 new phishing techniques Most of us have received a malicious email at some point in time, but phishing is no longer restricted to only a few platforms. The evolution of…
Article What does dark web monitoring really do? Introduction The dark web has earned a reputation as the internet’s shadowy underbelly. Hidden from search engines and only reachable with an…
Article Everyone should learn the OWASP Top Ten, says John Wagnon “It's important to know the world you're living in,” Infosec Skills author John Wagnon said. “You need to know what these threats look like and if…
Article GPEN vs. OSCP: Which one is better for a career in ethical hacking and/or pentesting? Cybercrime statistics suggest that unethical attackers have become more innovative in their ways to exploit vulnerabilities on internet-connected…
Article So you want to move from the help desk to the security team Everybody has a start in their chosen field. Sometimes this start is a calculated, deliberate choice and sometimes it is a product of both chance…
Article MITRE ATT&CK vulnerability spotlight: Account manipulation Introduction MITRE functions as a U.S. government-funded research and development center (FFRDC). This role involves performing trusted third-party…
Article Cybersecurity Weekly: Securing open source apps, Facebook iPhone bug, multi-year breach GitHub recruits a team of tech companies to help secure open source software. A new Facebook bug secretly enables the iPhone camera. A tech company…
Article Malware Spotlight: What are wipers? Introduction Imagine showing up to work and sitting down at your computer on an average day. You turn the computer on, take a sip of coffee, and…
Article MITRE ATT&CK vulnerability spotlight: Bash history Introduction MITRE is a federally funded research and development center (FFRDC) for the U.S. government. This means that they perform a variety of…
Article Six things you should be spending your cybersecurity budget on Introduction: Plan to increase your focus on cybersecurity Cybercrime activity is escalating, both in number of incidents and sophistication. It’s…
Article Malware overview – Graboid Introduction In October 2019, security researchers from Unit 42 at Palo Alto Networks discovered a new malware called Graboid. It is a cryptojacking…
Article MITRE ATT&CK: Hardware Additions Introduction In this article, we shall discuss the very real threat of malicious hardware additions, what they are and their different types and…
Article Rules of engagement in pentesting When you create a software product or build a service or create a platform, it’s a good idea to make sure it is secure. The data we generate is…
Article New Cisco Certifications and Changes Coming in 2020 Introduction: Jump start your career with vendor-specific Cisco certifications Cisco Systems, Inc. offers a line of vendor-specific certifications…
Article Malware Spotlight: What is APT? Introduction For some things, the whole is greater than the sum of its parts. When it comes to cybersecurity, this saying is an appropriate…
Article Cybercrime Investigator Degree Requirements Introduction Cybercrime Investigators provide valuable forensics, investigative, and incident response services to cases that involve…
Article MITRE ATT&CK vulnerability spotlight: Brute force Introduction The MITRE ATT&CK matrix is a tool developed by MITRE, a U.S. government federally-funded research and development center (FFRDC). It is…
Article Malware spotlight: What is rogue security software? Remember before you became security-conscious? Or maybe you always have been — either way, you most likely have been faced with this scenario. You…
Article Cybersecurity Weekly: Competing bug bounties, Disney+ password reuse attack Google offers up to $1.5 million for Pixel Titan M exploits in 2020. A hacker offers $100,000 for corporate secrets. Disney+ suffers a password…
Article MITRE ATT&CK vulnerability spotlight: Credentials in files Introduction MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As part of its duties as an FFRDC, it…
Article Election security: Cybersecurity concerns for future elections The election security landscape APTs like Cozy Bear have a history of interfering with major elections in the U.S. and other countries. With the…
Article MITRE ATT&CK vulnerability spotlight: Credentials in registry Introduction MITRE is a U.S. government federally-funded research and development center (FFRDC). Its purpose is to act as a trusted third-party for…
