Article Cyber Work with Infosec: How to become an incident responder Introduction In this episode of Cyber Work with Infosec, Chris Sienko interviewed Keatron Evans, Infosec instructor, managing consultant at KM Cyber…
Article How to become a security architect The guest of this episode of Cyber Work is Leighton Johnson, CTO and founder of ISFMT (Information Security Forensics Management Team). Chris…
Article Top Cybersecurity Predictions for 2020 The 2020 Cybersecurity Landscape Here we are again for the annual prediction of the events that I believe will impact the cybersecurity landscape in…
Article Malware spotlight: Fileless malware Introduction Fileless malware is a malicious technique that uses existing software, legitimate applications, operating system files and the…
Article Cybersecurity Weekly: Wyze data leak, PayPal phishing scam, prison footage leak IoT company Wyze suffers a data leak affecting millions of customers. An ambitious phishing campaign aims for more than just usernames and…
Article NIST CSF core functions: Identify The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide guidance for…
Article NIST CSF core functions: Protect Introduction The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide…
Article How to build security awareness & training to NIST standards Review NIST’s cybersecurity training resources and guidelines and explore how you can use Infosec IQ to not only follow NIST recommendations, but…
Article Your 2020 tax scam training guide Get your W-2s and returns ready because tax season is on the way! As if deductions, exemptions and return distribution wasn’t enough, tax season…
Article How big is the skills gap, really? Introduction No doubt you will have noticed, in the past few years, that voices are being raised about something called the “skills gap.” The…
Article 3 steps to close your organization's cybersecurity skills gap The report, 3 steps employers can take to close the skills gap, details the results of a survey of 785 information security professionals.
Article Cybersecurity Weekly: Colorado BEC scam, CyrusOne ransomware, new California privacy law A town in Colorado loses over $1 million to BEC scammers. Data center provider CyrusOne suffers a ransomware attack. California adopts the strictest…
Article NIST CSF self-assessments The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) provides guidance for organizations regarding how to better…
Article Ethical hacking: Top 6 techniques for attacking two-factor authentication Two-factor authentication (2FA) has been renowned for some time now for the security it can bring to organizations. The combination of something you…
Article ICMP protocol with Wireshark Unlike the Transport Control Protocol (TCP) and User Datagram Protocol (UDP), the Internet Control Message Protocol (ICMP) is not designed for…
Article Malware spotlight: Hybrid malware Introduction Hybrid malware, also known as combo malware, is a combination of two or more different types of attacks — usually a Trojan horse or…
Article MITRE ATT&CK: Port knocking Introduction Ports are like the doors into or out of a network, where information must pass through them to enter or exit an organization’s network.…
Article Network Traffic Analysis for Incident Response: Internet Protocol with Wireshark Introduction to the Internet Protocol The Internet Protocol (IP) is the most widely-used network-level protocol. Common transport-level protocols,…
Article The importance of knowing the OWASP Top Ten An average company uses 765 different web applications, and every one of them may face a potential attack.
Article Cybersecurity Weekly: California school ransomware, Office Sway phishing campaign, SNAKE ransomware A ransomware attack causes a California school district to teach with pen and paper for the week. A new phishing campaign is hosting landing pages…
Article Ethical hacking: How to hack a web server When practicing ethical hacking, a hacker is searching for vulnerabilities. An ethical hacker has several reasons to try gaining unauthorized…
Article Network traffic analysis for IR: TCP protocol with Wireshark The Transmission Control Protocol (TCP) is one of the most commonly-used protocols on the internet. Unlike the User Datagram Protocol (UDP), TCP is…
Article Why microlearning works: A security awareness perspective In this post, we’ll explore microlearning techniques, how you can use it to achieve your training goals and what it means for one of the most…
Article Malware obfuscation, encoding and encryption Malware is complex and meant to confuse. Many computer users think malware is just another word for “virus” when a virus is actually a type of…
