Article Lessons learned from the Fresenius ransomware cyberattack Introduction to the Snake ransomware Fresenius is a German company that provides various health care services, including services for dialysis of…
Article Threat modeling has huge benefits, says Infosec Skills author Geoffrey Hill Threat modeling is especially exciting, Geoffrey said, because it has a “triple whammy” benefit for security professionals. “It's easy to teach.…
Article Key findings from Infosec’s 2020 IT & security talent pipeline study Fewer challenges facing our industry are more pervasive than the cybersecurity talent shortage. It’s an advanced persistent threat of the human…
Article How to identify and prevent firmware vulnerabilities Introduction As creators of computer software begin to take security vulnerabilities more seriously, hackers are increasingly targeting the lower…
Article DMV 1: VulnHub Capture the Flag (CTF) walkthrough In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub by the author Jonathan. As per the information…
Article 14 best open-source web application vulnerability scanners [updated for 2020] In the past, many popular websites have been hacked. Hackers are active and always trying to hack websites and leak data. This is why security…
Article Cybersecurity Weekly: Zoom-themed phish, Joker malware resurgence, Citrix flaws A new Office 365 phishing scam uses fake Zoom suspension alerts. Joker malware apps bypass Google's security to spread via Play Store again. Citrix…
Article Critical security concerns for the education industry Balancing cybersecurity & compliance requirements in a resource-limited industry Executive summary The education industry has become a top hacker…
Article Spamdexing (SEO spam malware) About SEO spam — is my website a target? You’ve spent time and energy in positioning your website high in search engine rankings through good SEO…
Article Top 8 cybersecurity books for incident responders in 2020 Are you passionate about incident response? Do you want to build upon your knowledge of how to mitigate cyberthreats? If yes, then you’d love the…
Article SCADA & security of critical infrastructures [updated 2020] Current Scenario Industrial control systems (ICS) and Supervisory Control And Data Acquisition (SCADA) systems are critical components for the…
Article What Is Secure Coding? A Lack Of Security Training Contributes To Growing Vulnerability Numbers The number of vulnerabilities that exist in production software is growing…
Article PonyFinal malware: What it is, how it works and how to prevent it | Malware spotlight Introduction to PonyFinal PonyFinal ransomware appeared for the first time in 2020. It is malware that relies on human-operated attacks, i.e.,…
Article Me and My Girlfriend 1: CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge which was posted on VulnHub. As you may know from previous articles, VulnHub is a…
Article Stop cyber threats dead in their tracks with new training from Marc Quibell It’s a busy time for cyber threat hunters, says Marc Quibell, who just released a new Cyber Threat Hunting Learning Path in Infosec Skills.
Article Key elements of an information security policy An information security policy is a set of rules enacted by an organization to ensure that all users of networks or the IT structure within the…
Article AWS Essentials & Solution Architect Associate certification: The ultimate guide Introduction With the rapidly evolving cloud market and the COVID-19 pandemic, many organizations are looking for ways to adapt to the new normal.…
Article Windows 10 security features Alexander Benoit, senior consultant and head of Competence Center Microsoft, said something during a Microsoft event in Orlando in September 2017:…
Article How to configure Windows 10 firewall What is a firewall? A firewall is a device which monitors and filters all the incoming and outgoing network traffic and prevents unauthorized access…
Article Analysis of ransomware used in recent cyberattacks on health care institutions Introduction In recent years, there has been a steady increase in the number of ransomware attacks on healthcare institutions. The pressure such…
Article Cybersecurity Weekly: Cloud service phish, Zoom URL flaw, Tetrade banking malware A new phishing campaign abuses a trio of enterprise cloud services. A flaw in Zoom’s Vanity URL feature could have been exploited in phishing…
Article Format String Vulnerabilities C++ and strings The C++ programming language has a couple of different variable types designed to manage text data. These include C strings, which…
Article Command Injection Vulnerabilities What is a command injection vulnerability? Many applications are not designed to be wholly self-contained. They often access external systems as…
Article Credential Management Vulnerabilities The importance of strong credential management Passwords are the most commonly-used method by which users authenticate to online accounts, computers…
