Article RansomExx: The malware that attacks Linux OS RansomExx is the new malware used by criminals to attack both Windows and Linux environments. With companies using a mixed environment of Windows…
Article Ask us anything about security awareness, behavior & culture (session #2) It is vital that cybersecurity programs find a balance between securing the operations that their businesses rely on and enabling them to work…
Article Top five open source intelligence (OSINT) tools [updated 2021] In this article, we will look at the top five open-source intelligence tools. Before we jump directly into the tools, it is essential to understand…
Article Ask us anything about developing security talent and teams (session #2) Organizations of all sizes continually struggle to address modern-day cybersecurity talent supply and demand disparities. Thankfully, there are…
Article BAHAMUT: Uncovering a massive hack-for-hire cyberespionage group Introduction In October 2020, the BlackBerry Research Operations team released a comprehensive report highlighting the reach, tradecraft and…
Article Infosec Skills author Matthew Campagnola is forging a new path in ICS security "I coalesce broad themes that I've had to embody over the past couple of years. The course crosses a lot of different areas, and they're very broad,…
Article Infosec Skills author Vladimir de Turckheim explains the importance of hands-on Node.js security experience There is a hands-on experience gap in traditional security education. Hands-on experience not only helps in developing transferable skills but also…
Article What is enumeration? [updated 2021] Enumeration is defined as a process which establishes an active connection to the target hosts to discover potential attack vectors in the system,…
Article Wireless networking fundamentals for forensics With the evolution of Internet of Things (IoT) devices, there are countless wireless devices around us these days. Many people carry small-sized…
Article Investigating wireless attacks In an earlier article, we discussed the fundamentals of wireless networks: the common types of wireless devices, terminology used, WLAN security…
Article Software maturity models for AppSec initiatives Introduction Software is on the front lines of security: a 2019 report from GitLab found that almost half of respondents deploy software on-demand…
Article Email analysis In this article, we will explore the fundamentals concepts associated with email that will help us to perform email analysis. We will begin by…
Article Email forensics: Web-based clients This article discusses how to perform forensic investigations of Web-based email clients. While many organizations use Desktop based email clients…
Article Open source IDS: Snort or Suricata? [updated 2021] Although early types of Network Intrusion Detection Systems go back all the way to the early 1980s, the concept of IDS took off when Martin Roesch…
Article Proper use and training are the keys to mastering secure C++, says Infosec Skills author Martin Dubois “When we started, we simply didn’t think about security. We were alone in the world, and no one could connect to what we were doing,”
Article PenTest+: DoDD 8570 overview In November 2020, the US Department of Defense (DoD) has selected CompTIA PenTest+ as an approved certification for military personnel and defense…
Article Hacking clients with WPAD (web proxy auto-discovery) protocol [updated 2021] In this tutorial, we’ll take a look at how we can hack clients in the local network by using WPAD (Web Proxy Auto-Discovery). The WPAD protocol…
Article What is a Honey Pot? [updated 2021] Introduction: What is a Honeypot? Honeypots are special programs that are written for one purpose: to be exploited. Honeypots emulate the appearance…
Article Email forensics: desktop-based clients Emails are the most commonly used technology for exchanging messages between people/businesses using electronic media. With every technology, there…
Article Security vs. usability: Pros and cons of risk-based authentication Introduction Risk-based authentication (RBA) has to become part of the enterprise lexicon for a good reason. The authentication measures used to…
Article 8 reasons you may not want to use VPNs You probably have heard about VPNs before. It’s even possible that you might have used one. In this post, we will be learning about VPN, some of its…
Article Hack the Box (HTB) machines walkthrough series — Buff Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Upskilling to deepen employee engagement & retention Having a highly-skilled, engaged and motivated workforce is in everyone’s best interest, and it takes a combination of factors to support employees…
Article Average IT manager salary in 2021 IT management is a competitive career opportunity. Some companies hire from within, but you can still find job opportunities from IT firms looking…
