Article Configuring DNS in AWS Introduction The Domain Name System (DNS) is necessary for routing traffic across the internet. It accomplishes this task by converting easily…
Article Windows Supported wireless encryption types Introduction We all want to keep our wireless network secure, to keep our personal data and information safe, don't we? Fortunately, Windows…
Article How to use Radare2 for reverse engineering This article defines reverse-engineering as it is used in the analysis of software. We will explain in detail how to use radare2 for reverse…
Article App isolation in Windows 10 What is app isolation in Windows 10? Suppose you want to install and run a new program on Windows but you think it may be risky and may harm your…
Article Data Loss Protection (DLP) for ICS/SCADA Introduction Data loss prevention (DLP) is a strategy that seeks to avoid the deletion, corruption or leakage of confidential or proprietary data…
Article Bypassing security products via DNS data exfiltration Criminals are using different strategies to compromise computer networks, infrastructures and organizations. Cyber incidents have increased in…
Article RTS threshold configuration for improved wireless network performance [updated 2020] In a scenario where a lot of users connect to a wireless network and where they occasionally lose their connections, an individual or a company can…
Article Hack the Box (HTB) machines walkthrough series — Nest, part 2 Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Work-from-home network traffic spikes: Are your employees vulnerable? A shift to work-from-home culture Social distancing during the COVID-19 pandemic has forced employees to work from home, and many businesses were…
Article Network design: Firewall, IDS/IPS There are many different types of devices and mechanisms within the security environment to provide a layered approach of defense. This is so that…
Article Cybersecurity Weekly: Industrial VPN flaws, Zoom bug, New side-channel attacks Industrial VPN flaws let attackers target critical infrastructures. A new Zoom bug allowed snoopers to crack private meeting passwords in minutes. A…
Article Lab: Hacking an android device with MSFvenom [updated 2020] In this lab, we are going to learn how you can hack an android mobile device using MSFvenom and the Metasploit framework. We will use MSFvenom for…
Article Tesla Model 3 vulnerability: What you need to know about the web browser bug Introduction In 2020, Jacob Archuleta, a researcher nicknamed Nullze, discovered an important information security vulnerability on the web browser…
Article Cyber Work Podcast recap: What does a military forensics and incident responder do? Introduction Cybersecurity meets CSI in the exciting field of digital forensics and incident response. In this role, tech-savvy investigators sift…
Article The most common social engineering attacks [updated 2020] What's the easiest way into a locked system? Ask someone for the key. Here are the most common social engineering attacks targeting employees.
Article Capture the flag: A walkthrough of SunCSR’s Sumo Introduction Welcome to my write-up for the Sumo machine from VulnHub. This is a beginner-level, intentionally vulnerable virtual machine created…
Article Securing cookies with httponly and secure flags [updated 2020] Securing cookies is an important subject. Think about an authentication cookie. When the attacker is able to grab this cookie, he can impersonate…
Article Hack the Box (HTB) machines walkthrough series — ServMon Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Top 10 highest-paying jobs in information security It's a good time to be in the security field. The shortage of talent to fill those jobs motivates employers to offer top salaries to candidates.
Article Physical access control How many managers think that it makes no sense to spend money protecting information that can be reconstructed? What can really happen?…
Article What are black box, grey box, and white box penetration testing? [Updated 2020] Pentesters are apparently huge fans of colors. Different roles within pentesting assignments are designated as Red Team, Blue Team, Purple Team and…
Article How to detect and prevent web shells: New guidance from the NSA and the Australian government Introduction It’s not every day that governments of different countries draft guidance rules about any subject together. It is even rarer that they…
Article Cybersecurity Weekly: Capital One fined, Qualcomm bugs, HaveIBeenPwned open sourced Capital One fined for 2019 data breach affecting 106 million users. Nearly 50% of all smartphones affected by Qualcomm Snapdragon bugs. Have I Been…
Article National Counterintelligence and Security Center: 5 priorities for 2020 Introduction: NCSC’s role For years, the United States has faced increasingly aggressive and complex threats from foreign intelligence entities…
