Article Top 7 must-have cybersecurity books Are you in cybersecurity and are looking to expand your knowledge horizons? Are you getting your start in cybersecurity and looking for a way to…
Article Cybersecurity Weekly: Wells Fargo phish, Oxford server hack, Cisco Webex flaw A new Wells Fargo phishing campaign baits customers with calendar invites. A hijacked Oxford server was used by hackers for Office 365 phishing. A…
Article New CCNA is “simplified and streamlined,” says Infosec Skills author Ben Jacobson The update makes the CCNA more approachable, simplified and streamlined, Ben said, although it does cover a broader range of material.
Article Aqua 1: VulnHub capture the flag (CTF) walkthrough In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub by the author yunaranyancat. As per the…
Article Ragnar locker malware: what it is, how it works and how to prevent it | Malware spotlight The popularity of ransomware threats does not appear to be decreasing. Instead, more and sophisticated ransomware threats are being deployed. Ragnar…
Article Active Directory series: SILVER TICKET Introduction In this article series, we will look into the most famous ways that can be used to attack Active Directory and achieve persistence.…
Article Blockchain security overview Introduction Despite being over a decade old, blockchain has only really taken off within the last few years. During this time, it has moved from a…
Article Fundamentals of blockchain security Introduction The goal of blockchain is to create a fully decentralized, trustless digital ledger. This is an ambitious goal since most ledger…
Article Active directory series: Unconstrained delegation In this article series, we will look into the most famous ways that can be used to attack Active Directory and achieve persistence. Note: Attacks…
Article Dark web fraud: How-to guides make cybercrime too easy Introduction to dark web fraud Dark web fraud constitutes a global information security problem. The widespread availability of how-to guides…
Article Cybersecurity Weekly: O365 phish, Google Analytics exploit, LG Electronics ransomware Office 365 users are being targeted by a Coronavirus employee training phish. Hackers are using Google Analytics to bypass web security and steal…
Article Preventing cybersecurity employee burnout and churn: 6 tips for managers Introduction “Burnout” and “churn” are two words that probably send shivers down the spines of most cybersecurity managers. After all, employees who…
Article How to get promoted in a cybersecurity career Introduction: What the cybersecurity talent market looks like at the moment Are you considering a career in cybersecurity? If so, this is actually a…
Article Vishing spikes as workforces go remote: 6 vishing prevention tips anyone can follow Introduction With thousands of teams worldwide being asked to work remotely to help contain the spread of COVID-19, scammers have a fertile ground…
Article All My Stripes: The New Business Imperative of LGBTQ+ Inclusion “Don’t talk, just act. Don’t say, just show. Don’t promise, just prove.” -Hiroko Tsuchimoto As another LGBTQ+ Pride month comes to a close and I…
Article Top soft skills and the Federal Cybersecurity Reskilling Academy In this episode of Infosec’s Cyber Work podcast, host Chris Sienko spoke with Chris Triolo, VP of customer success for Respond Software. They…
Article Agent Tesla: What it is, how it works and why it’s targeting energy companies Introduction to Agent Tesla Agent Tesla appeared for the first time in 2014, but it has been just recently used for attacks on energy companies…
Article Djinn 1: CTF walkthrough, part 1 In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named “0xmzfr.” As per the…
Article 4 tips for phishing field employees [Updated 2020] Phishing is easy. Let’s just get that out of the way. It’s easy for an attacker, and, if you have the right tools (such as InfoSec Institute’s…
Article Cookies: An overview of associated privacy and security risks Anyone who regularly browses the internet must have seen some sort of pop-up or other form of alert about the use of cookies. Some sites even give…
Article Security risks of outdated encryption: Is your data really secure? Introduction They say that those who fail to learn history are doomed to repeat it. A salient factor in the defeat of Austria by Prussia in the 1866…
Article Cybersecurity Weekly: Healthcare fends off attacks, Apache flaws, out-of-band Windows patches Healthcare organizations are successfully fending off attacks throughout the pandemic. Critical Apache Guacamole flaws put remote desktops at risk…
Article Top 9 free security training tools Cybersecurity training is one of the best defenses against cyber attacks targeting organizations and individuals alike. Although security training…
Article Best tools to perform steganography [updated 2020] In the past few years, the term “steganography” has attracted the attention of law enforcement agencies. This technique has been used by hackers to…
