Article How to mitigate XSS Vulnerabilities Introduction: In the previous articles, we discussed what Cross Site Scripting vulnerabilities are, what causes Cross Site Scripting vulnerabilities…
Article How to exploit XSS Vulnerabilities Introduction: In the previous article, we discussed what XSS vulnerabilities are and what causes XSS vulnerabilities. This article provides an…
Article How to mitigate SQL Injection Vulnerabilities Introduction: In the previous articles, we discussed what SQL Injection vulnerabilities are and what causes SQL Injection vulnerabilities. This…
Article How to exploit SQL Injection Vulnerabilities Introduction: In the previous articles, we discussed what SQL Injection vulnerabilities are and what causes SQL Injection vulnerabilities. This…
Article How to mitigate Command Injection Vulnerabilities Introduction: In the previous articles of this series, we discussed various topics around Command Injection vulnerabilities. We began by…
Article Command Injection Vulnerabilities Exploitation Case Study Introduction: This article provides an overview of how command injection vulnerabilities can be identified and exploited. We will discuss two…
Article Command Injection Vulnerabilities Introduction: In the previous articles, we discussed what Command Injection vulnerabilities are and what causes command injection vulnerabilities.…
Article What Causes Command Injection Vulnerabilities? (How are Data and Code Handled in Execution Environments) Introduction: This article provides an overview of how command injection vulnerabilities occur and what are some of the causes for command injection…
Article Implementing a zero-trust model: The key to securing microservices Introduction Organizations are increasingly integrating microservices into their software development processes. As noted by DZone, microservices…
Article Cost of non-compliance: 8 largest data breach fines and penalties Different regulations and laws will slap organizations with fines and penalties for data breaches. This is because the organization did not take the…
Article How to mitigate CSRF Vulnerabilities Introduction: In the previous articles, we discussed what Cross Site Request Forgery vulnerabilities are and how one can detect and exploit them.…
Article Case Studies in Poor Password Management Introduction In essence, a password is a cryptographic secret that needs proper storage and management. Even for individual users this can be a…
Article Deanonymizing Tor using ML Standard Tor Traffic and Machine Learning /ML/ Unlike conventional non-Tor encrypted traffic that comes with openly visible destination attributes…
Article How to exploit CSRF Vulnerabilities Introduction In the previous article, we discussed what CSRF vulnerabilities are and what causes CSRF vulnerabilities. This article provides an…
Article 2020 Verizon data breach investigations report: Summary and key findings for security professionals The Verizon Data Breach Investigations Report, or the Verizon Data Breach Report, is an annual report intended for information security…
Article Brand impersonation attacks targeting SMB organizations Introduction Building and maintaining a brand is an important part of a successful business. Having a recognized brand confers recognition, and if…
Article Reactive vs. proactive security: Three benefits of a proactive cybersecurity strategy I’ve been writing cybersecurity articles for many years, and in that time, I have only seen increasingly complex security threats. Cybercriminals…
Article How to use the NICE Cybersecurity Workforce Framework to plan career progression: A practitioners’ guide Introduction: An overview of the NICE Cybersecurity Workforce Framework In 2017, the National Institute of Standards and Technology (NIST) published…
Article Typo 1: CTF walkthrough, part 2 Introduction In the previous article, Part 1 of this CTF, we were able to complete the following steps on the victim machine: Getting the target…
Article Introduction to the DoD Cyber Workforce Framework (DCWF) In response to the ever-changing world, including the increased focus on cyberspace as a theater of war, the US Department of Defense (DoD) decided…
Article Hack the Box (HTB) machines walkthrough series — AI Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article How to mitigate security risk in international business environments Introduction Gone are the days when international business was a unicorn in the business world. Instead, “going international” is becoming more…
Article Why Improper Error Handling Happens Introduction: Improper Error Handling is one of the commonly seen issues in software. Web Applications are no different and they are susceptible to…
Article Improper Error Handling Exploitation Case Study Introduction: In the earlier articles about Improper error handling, we discussed how these vulnerabilities can occur. and how they can cause…
