Article DHS Cyber Hunt and Incident Response Teams (HIRT) Act: What you need to know Introduction Not a month goes by without the new media reporting that another city or municipality has fallen victim to a cyberattack, and…
Article How to exploit improper error handling In the previous article, we discussed what Improper Error Handling vulnerabilities are and what causes them. This article provides an overview of…
Article Fake Image Detection Introduction This is a frying pan. [pkadzone zone="main_top"] This is a frying pan with a badly drawn pair of eggs in it. Any questions?
Article Hack the Box (HTB) machines walkthrough series — Remote Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article BEC attacks: A business risk your insurance company is unlikely to cover The growing threat of BEC attacks Business email compromise (BEC) attacks can cost an organization millions of dollars, and the threat is growing as…
Article Overview of phishing techniques: Brand impersonation Introduction Phishing emails are well known for using different flavors of trickery to cause users to bite on the proverbial lure. Perhaps the…
Article Hack the Box (HTB) machines walkthrough series — Magic Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Apache Guacamole Remote Desktop Protocol (RDP) vulnerabilities: What you need to know In June of 2020, security researchers at Check Point Research discovered multiple critical RDP (Remote Desktop Protocol) flaws in Apache Guacamole.…
Article Cybersecurity Weekly: Wordpress patches, NAT bypasses, Windows zero-day WordPress patches a three-year-old high-severity RCE bug. A new NAT bypass attack lets hackers access any TCP/UDP service. A Windows zero-day bug is…
Article MalLocker Android ransomware: What it is, how it works and how to prevent it | Malware spotlight Introduction Malware is persistent presence in our life. In the past few months, several pieces of different malware families were identified as…
Article Djinn 1: VulnHub CTF walkthrough, part 2 In the previous part of this article, we completed the web application exploitation part of this capture-the-flag exercise and got limited shell…
Article Data breach vs. data misuse: Reducing business risk with good data tracking Introduction Imagine this, and let’s face it, this isn't too hard: your personal data, including financial information, has been stolen in a major…
Article Photographer 1: CTF walkthrough, part 1 In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named “v1n1v131r4”. As per the…
Article The Ultimate Guide to the MITRE ATT&CK® Framework What is the MITRE ATT&CK framework? The MITRE ATT&CK® framework is a knowledge base containing information about the various ways in which a cyberat
Article Malicious Docker images: How to detect vulnerabilities and mitigate risk Introduction Shortcuts are popular because they are more convenient and take less time. Developers have started using Docker because it allows you…
Article 55 federal and state regulations that require employee security awareness and training Introduction Humans are repeatedly described as the weakest link in the cybersecurity chain. We are highly susceptible to falling for phishing…
Article MITRE ATT&CK® Framework Matrices: An Overview Introduction to MITRE ATT&CK framework matrices The MITRE ATT&CK® framework is a tool designed to educate about cybersecurity threats and attack vec
Article MITRE ATT&CK® Framework Tactics: An Overview Introduction to MITRE ATT&CK framework tactics The MITRE ATT&CK® framework is designed to provide information about cybersecurity and the methods by
Article How to use the MITRE ATT&CK® framework and diamond model of intrusion analysis together What is the diamond model of intrusion analysis? The Diamond Model of Intrusion Analysis is based upon the premise that every cyberattack consists…
Article Cybersecurity Weekly: Apple patches, job offer phishing, Cisco zero-day Apple patched three actively exploited iOS zero-days. Hackers used Torisma spyware in job offer phishing attacks. A Cisco zero-day in AnyConnect…
Article Nworm malware: What it is, how it works and how to prevent it | Malware spotlight Introduction In April 2020, the creators of the TrickBot malware released a module for TrickBot called Nworm. TrickBot is a banking Trojan that…
Article How to make cybersecurity budget cuts without sacrificing security Introduction 2020 has been an incredibly challenging year. Physical and mental health has taken a heavy toll; economies are under threat; and…
Article How to Use the MITRE ATT&CK® Framework and the Lockheed Martin Cyber Kill Chain Together What is the Lockheed Martin Cyber Kill Chain? The Lockheed Martin Cyber Kill Chain is the first attempt to describe the structure and lifecycle of a…
Article Use cases for implementing the MITRE ATT&CK® framework The MITRE ATT&CK ® framework is a vast repository of cybersecurity knowledge. Each of the MITRE ATT&CK framework outlines a number of goals that an
