Article Introduction to printing and format strings This article provides an overview of how printing functions work and how format strings are used to format the data being printed. Developers often…
Article How to exploit format string vulnerabilities In the previous articles, we discussed printing functions, format strings and format string vulnerabilities. This article provides an overview of…
Article 21 free training resources for Cybersecurity Awareness Month (NCSAM 2020) October is Cybersecurity Awareness Month — your best opportunity to jumpstart security awareness at your organization and highlight the importance…
Article Format String Vulnerabilities Exploitation Case Study Introduction: In the previous article of this series, we discussed how format string vulnerabilities can be exploited. This article provides a case…
Article Security theatrics or strategy? Optimizing security budget efficiency and effectiveness Introduction I am a staunch advocate of the consideration of human behavior in cybersecurity threat mitigation. The discipline of behavioral ecology…
Article Top 5 ways ransomware is delivered and deployed If your computer has not yet been affected by ransomware, odds are it could soon be. With ransom payments averaging more than $80,000 in Q4 2019,…
Article How to mitigate Format String Vulnerabilities Introduction: This article provides an overview of various techniques that can be used to mitigate Format String vulnerabilities. In addition to the…
Article IoT Security Fundamentals: Intercepting and Manipulating Wireless Communications Introduction: IoT Manufacturers Favor Convenience over Security Because IoT security is still an afterthought, cybercriminals in general consider…
Article Linux vulnerabilities: How unpatched servers lead to persistent backdoors Vulnerability management is a challenge Humans make mistakes, software has bugs and some of these bugs are exploitable vulnerabilities. The…
Article 8 of the world's biggest insider threat security incidents Introduction If you work in security or are just interested in the general area of cybersecurity you will no doubt have heard of the dreaded insider…
Article Cybersecurity Weekly: Ransomware casualty, Google App Engine phish, SecOps struggling A patient dies after ransomware attack paralyzes German hospital systems. Google’s App Engine feature was abused to create phishing pages. SecOps…
Article DoD 8570 IAT certification and requirements [updated 2020] The US Department of Defense (DoD) hosts a number of directives that set out the requirements of their workforce. DoD 8570, titled “Information…
Article Endpoint hardening (best practices) Endpoint hardening: If you were to tell the average person that you were going to be performing this task for your organization, they'd probably ask…
Article Encryption vs Encoding Encryption and decryption Encryption is the process of converting plaintext to encrypted text. Since encrypted text cannot be read by anyone,…
Article The OSI model and TCP/IP model What is the OSI model? The OSI model was the primary standard model for network communications, adopted by all major telecommunication companies and…
Article 8 best WordPress security plugins Over a third of websites (37%) are hosted on WordPress, making it the world’s most popular content management system (CMS). This includes everything…
Article IoT security fundamentals: IoT vs OT (Operational Technology) Introduction: Knowing the Notions Industrial Internet of Things (IIoT) incorporates technologies such as machine learning, machine-to-machine (M2M)…
Article Zero-day Sophos XG firewall vulnerability: an exploit guide for pentesters The Sophos XG firewall vulnerability The Sophos XG Firewall recently had a publicly-reported zero-day vulnerability. The vulnerability in question…
Article How to verify and respond to vulnerability reports from security researchers Introduction Part of doing business in today’s increasingly cyber-world is dealing with security vulnerabilities and bugs that come up along the…
Article AWS user management Introduction In order to keep your AWS environment secure while allowing your users to properly utilize resources, you must ensure that users are…
Article IPv4 and IPv6 overview IP stands for internet protocol. The internet protocol is the protocol which allows internetworking at the internet layer of the internet protocol…
Article Understanding DoS attacks and the best free DoS attacking tools [updated in 2020] A Denial of Service (DoS) attack is designed to cause service outages. These attacks can easily cost an organization a significant amount in damages…
Article PDF file format: Basic structure [updated 2020] We all know that there are a number of attacks where an attacker includes some shellcode in a PDF document. This shellcode uses some kind of…
Article Important SQLMap commands The SQLMap tool can be found in every penetration tester's toolbox. It is one of the most popular and powerful tools when it comes to exploiting SQL…
