Article Cryptography careers and IoT vulnerabilities with Ted Shorter In this episode of Infosec’s Cyber Work podcast series, host Chris Sienko speaks with Ted Shorter. Ted is co-founder and CTO of Keyfactor, a…
Article The state of threats to electric entities: 4 key findings from the 2020 Dragos report Introduction In January 2020, industrial cybersecurity firm Dragos released the North American Electric Cyber Threat Perspective, referred to as the…
Article Hack the Box (HTB) machines walkthrough series — JSON Today we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine…
Article AI for intrusion detection: Conquering the unknown unknowns An anomaly detection component, which allows detection of previously unknown behavior, is an essential and forward-looking solution to intrusion…
Article Web server security: Command line-fu for web server protection Introduction Adequate web server security requires proper understanding, implementation and use of a variety of different tools. In this article, we…
Article Hack the Box (HTB) machines walkthrough series — Postman Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Cybersecurity Weekly: LokiBot spearphish, Marriott breach, Zoom vulnerability A spearphishing campaign exploits COVID-19 to spread Lokibot infostealer. Marriott suffers a second breach, exposing data of 5.2 million hotel…
Article Network traffic analysis for IR: Data exfiltration Introduction Understanding network behavior is a prerequisite for developing effective incident detection and response capabilities. ESG research…
Article Web server protection: Web application firewalls for web server protection Introduction Firewalls are an integral part of the tools necessary in securing web servers. In this article, we will discuss all relevant aspects of…
Article Cybersecurity reporting and closing the skills gap with Dark Reading's Kelly Sheridan The need for talented cybersecurity professionals is on the rise, but a huge amount of job postings go unfilled. Why is that? Cybersecurity is in…
Article Web server security: Infrastructure components Introduction Cybercriminals understand that your website is not only the face of your organization, but often also its weakest link. With just one…
Article How to work with HR or recruiters to improve your cybersecurity hiring strategy Is there a talent gap in your organization? With the IT security industry’s skills shortage and the high demand for advanced cybersecurity pros,…
Article Malware spotlight: Sodinokibi Introduction Ransomware is not new at this point in time and will be with us for the foreseeable future, as new types of ransomware are constantly…
Article Information security auditor certifications Introduction For those with a passion for information security and a mind for auditing, the role of information security auditor is tailor-made. Not…
Article CTF walkthrough - Five86: 2 In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub. As you may know from previous articles,…
Article Network forensics overview Most attacks move through the network before hitting the target and they leave some trace. According to Locard’s exchange principle, “every contact…
Article Overview of phishing techniques: Order/delivery notifications Introduction One thing no one can deny is that online shopping is a common practice these days. With this, of course, comes order notifications and…
Article Ethical hacking: TCP/IP for hackers In this article, we’ll discuss TCP/IP: the importance of mastering it and how this mastery can be beneficial to hackers. We will then look at how…
Article Cybersecurity Weekly: Travelex pays ransom, Maze hacks HMR, Microsoft buys corp.com Travelex paid $2.3 million ransom to restore operations after a ransomware attack. The Maze ransomware gang discloses data from drug testing firm…
Article Overview of Phishing Techniques: Fake Websites Introduction It’s an average Tuesday afternoon when you get an email from your bank. The fraud team is reaching out because they detected some…
Article Lampion malware: what it is, how it works and how to prevent it | Malware spotlight Introduction The Lampion malware is spread through emails containing a link that downloads a .zip file with malicious files in it. It’s a banking…
Article Phishing techniques: Expired password/account Nowadays, a fair number of phishing attacks have been linked to expired password scams. This is a tactic used to steal identifying information and…
Article Hack the Box (HTB) machines walkthrough series — Forest Today we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Keeping Alexa out of the boardroom (and the bedroom office): IoT security tips for remote employees Introduction I can’t help myself. I find myself liking Alexa. She/he/it isn’t exactly a friend, but I can play music and find out the weather and do…
