Article SO SIMPLE 1: CTF walkthrough In this article, we will solve a capture the flag (CTF) challenge that was posted on the VulnHub website by an author named Roel. As per the…
Article MITRE Shield: An active defense and adversary engagement knowledge base Introduction When it comes to collecting tips, tricks and workarounds, it is easy to see quickly that certain concepts and methods are strong…
Article What is a vulnerability disclosure policy (VDP)? Introduction The vulnerability disclosure policy, or VDP, may be a term that you have heard thrown around at work, in an elevator, at an event and…
Article Phishing domain lawsuits and the Computer Fraud and Abuse Act Introduction The worlds of trademark law and marketing seem to be constantly at odds with each other, occasionally collapsing into a court of law…
Article Cybersecurity Predictions For 2021 Here we are again for the annual predictions of the trends and events that will impact the cybersecurity landscape in 2021. Let’s try to predict…
Article What is the difference between the NICE framework and DoDD 8140/8570? For those looking into government work, or for those just plain interested in the different cybersecurity frameworks out there, have probably…
Article Drovorub malware: What it is, how it works and how to prevent it | Malware spotlight Introduction Malware is a threat that has increased exponentially in the last few years, with many sophisticated threads impacting citizens,…
Article Cybersecurity Weekly: Ledger account leak, SUPERNOVA malware, Citrix NetScaler attacks Physical addresses of 270,000 Ledger owners were leaked on a hacker forum. A new SolarWinds flaw likely let hackers install SUPERNOVA malware.…
Article What senior citizens need to know about security awareness Introduction As a result of the coronavirus pandemic, many older adults sought out new technologies. Whether as a means to connect with friends or…
Article Arrays, Structs and Linked Lists Reverse engineering is the practice of analyzing a software system, either in whole or in part, to extract design and implementation information 1.…
Article Software vulnerability patching best practices: Patch everything, even if vendors downplay risks Software vulnerability continues to be a challenging cybersecurity risk. Cybercriminals are able to seize on these vulnerabilities and breach…
Article Hack the Box (HTB) machines walkthrough series — Node Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Storytelling in cybersecurity: The impact of a great story (with Sarah Moffatt) “It's not people, armies, gold or flags that unites people; it's stories. There's nothing more powerful in the world than a good story.” The power…
Article How to exploit race conditions Race conditions vulnerabilities can exist in applications that contain parallel processing. These vulnerabilities exist if multiple threads of…
Article Average chief security officer salary [updated 2021] The role of a chief security officer is one that combines management with a deep understanding of information technology and data protection. A…
Article Cybersecurity Weekly: Paypal phishing texts, Facebook ad phishing, T-Mobile data breach PayPal phishing texts state users accounts are limited. Facebook ads are being used to steal 615,000+ credentials in a phishing campaign. T-Mobile…
Article Improving web application security with purple teams What is the purple team in cyber security? The cybersecurity industry - and especially the area of security assessments - is very fond of…
Article NSA report: Indicators of compromise on personal networks Introduction The advent of the novel coronavirus pandemic has brought with it a sharp rise in the number of government workers that work telework,…
Article Rethinking the human factor in security awareness Moving employees from a “have-to” to a “want-to” mindset As organizations begin to understand that security is everyone’s understanding,…
Article How to exploit Cryptography errors in applications In the previous articles of this series on Cryptography errors, we discussed how Cryptography is used in applications and how the use of…
Article Cryptography errors Exploitation Case Study In the previous articles of this series on Cryptography errors, we discussed how Cryptography is used in applications and how the use of…
Article How to avoid Cryptography errors In the previous articles of the series on Cryptography errors in applications, we discussed how the use of Crypto in applications can go wrong and…
Article Cryptography Errors Many organizations make use of cryptography for securing their applications. A large portion of banking applications rely on some sort of…
Article How to mitigate Race Conditions vulnerabilities Race condition vulnerabilities can exist when an application has multiple threads of execution that are running in parallel. This can occur either…
