Article MITRE ATT&CK: External remote service Introduction If you would have told the average person fifty years ago that in the future people would be able to view what you are doing on a…
Article Network traffic analysis for IR: UDP with Wireshark The User Datagram Protocol (UDP) is one of the two main protocols that sits between the Internet Protocol (IP) layer and higher-level, specialized…
Article MITRE ATT&CK: Shortcut modification Introduction Most people love shortcuts — they make things faster and easier. This common passion is behind a lot of the conveniences we experience…
Article Cyber Work: How to become a Chief Information Security Officer Introduction In this episode of Infosec’s cybersecurity podcast series Cyber Work, host Chris Sienko talks with Joshua Knight, cybersecurity…
Article PayPal credential phishing with an even bigger hook With the increased adoption of multi-factor authentication, login credentials alone may not be enough for scammers to gain the access or information…
Article MITRE ATT&CK: Supply chain compromise Introduction Attackers are well known to install malicious software, or malware, onto compromised systems during a cyberattack. But what many may…
Article NIST CSF core functions: Detect The National Institute of Standards and Technology’s Cybersecurity Framework, or NIST CSF, was first published in 2014 to provide guidance for…
Article Cybersecurity Weekly: Citrix backdoor, Amazon data leak, Equifax to spend on data security Hackers patch Citrix servers to deploy their own backdoor. Amazon fires employees for leaking customer data. Equifax commits to spending $1 billion…
Article Malware spotlight: Wabbit Introduction Beginnings are often steeped in myth, legend and a good helping of storytelling, with malware being no exception to this rule. Way back…
Article MITRE ATT&CK: Disk structure wipe Introduction Denying the availability of systems and resources of an attack target is a main objective of many real-world attack campaigns. If you…
Article The user experience of security Introduction Back in the 1990s, when you mentioned cybersecurity to anyone, a glazed look would come over their face. And fair enough. Security, as…
Article MITRE ATT&CK: Disk content wipe Introduction Classic moves, no matter what the subject matter is, are timeless. Be it the hook shot in basketball, the uppercut in boxing or the…
Article Cybersecurity Weekly: Jeff Bezos hacked, DDoS mitigation firm admits to DDoS, TrickBot steals AD credentials Saudi prince allegedly hacked Jeff Bezos using WhatsApp. The founder of a DDoS mitigation firm admits to launching DDoS attacks. TrickBot now steals…
Article Wireshark for incident response 101 Wireshark is a freely available tool for network traffic analysis. It can be used to either analyze saved packet capture files or perform live…
Article Malware spotlight: EvilGnome Introduction The name EvilGnome may conjure images of a malicious creature of folklore. Instead, this name actually refers to an emerging type of…
Article Cybercrime investigator resume tips Get valuable tips for crafting an effective cybercrime investigator resume and increase your chances of landing your desired job in the field.
Article Network traffic analysis for IR: Analyzing DDoS attacks Introduction Distributed Denial-of-Service (DDoS) attacks are one of the powerful cyber weapons threat actors use today. We often hear about a…
Article Network traffic analysis for IR: SSH protocol with Wireshark SSH protocol The Secure Shell (SSH) is designed to allow confidential and authenticated remote access to a computer. Like the Telnet protocol, it…
Article Malware spotlight: Droppers There’s a cloud of confusion around droppers. Often seen as a sort of helper program in a cyberattack, droppers are actually a type of malware that…
Article Ongoing training is crucial for your career, says Infosec Skills author Manuel Leos Rivas Cybersecurity professionals need to refresh their skill sets every two or three years at most, Manuel said. Otherwise you risk falling behind.
Article Ethical hacking: Wireless hacking with Kismet To continue our ethical hacking series, we are now going to dive deeper into the process of wardriving, wireless hacking and the roles that the…
Article Top cybersecurity lessons for e-commerce website administrators Introduction In 2018, card-skimming malware targeting Magento-based online stores resulted in the infection of 7,339 e-commerce sites. Any customer…
Article Cybersecurity Weekly: Card details listed for sale, new phishing attack spotted, Sprint support conversations exposed Hackers list 30 million stolen payment card details for sale from the recent Wawa attack. Microsoft detects a new phishing attack that uses HTML…
Article Reverse engineering and malware analysis tools Reverse-engineering and malware analysis tools have an important role to play in terms of cybersecurity. For example, app developers and security…
