Article Cybersecurity Weekly: Exchange malware, Trickbot surges, new Nim malware Hackers are targeting Microsoft Exchange servers with ransomware. TrickBot takes over after cops kneecap Emotet. Researchers spotted malware written…
Article Pros and cons of public vs internal container image repositories Docker registry is a key component in IT environments that use containers. Small businesses and individuals can rely on publicly available registry…
Article ATP group MontysThree uses MT3 toolset in industrial cyberespionage The age of cyber spying Targeted malware is often an issue for officials such as diplomats and telecom operators. In rare cases, industries become a…
Article Increasing security by hardening the CI/CD build infrastructure CI/CD pipelines are made up of various different components such as application code, source code repositories, image repositories, build servers,…
Article Fileless Windows Error Reporting (WER) malware attack: Technical overview and walkthrough In October 2020, a newly uncovered malware named Kraken was observed in the wild. This malicious piece of malware is abusing the Windows Error…
Article Network security (101) When we're building a network, the first time it comes online can always be a rush — seeing systems be detected, being able to make their way to…
Article CEWLKID: 1 VulnHub CTF walkthrough, part 1 Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article Secure network protocols For a very long time, having devices just work on a network was a feat in itself. This meant that the protocols involved didn't necessarily need to…
Article ICS cyber ranges: Hands-on training for industrial control system security teams Incident response has been a pillar of cybersecurity for decades. But plans to account for the unique risks surrounding the specialized command and…
Article Cellular Networks and Mobile Security Despite their seemingly endless coverage (your mileage will definitely vary), cellular network security has proven to be surprisingly robust over…
Article ICS/SCADA threats and threat actors Industrial control systems (ICS) and Supervisory Control And Data Acquisition (SCADA) systems play a critical role in critical infrastructure and…
Article Machine learning for social engineering Social engineering is a form of communication that aims at gaining people’s trust at first and then prompting them to share sensitive information or…
Article Cybersecurity weekly: Acer hacked, Exchange targeted, Zoom bugs The REvil ransomware gang hacked Acer and is demanding a $50 million ransom. Microsoft Exchange servers are now targeted by BlackKingdom ransomware.…
Article CGEIT certification: Overview and career path [updated 2021] A cert that targets enterprise leadership The importance of IT governance for a company is impossible to ignore. Its goal is to ensure that the IT…
Article MRBMiner malware: What it is, how it works and how to prevent it | Malware spotlight MrbMiner is a recent malware discovered and documented by the Tencent Team last September. It targets MSSQL databases and implants cryptomining…
Article Python for pentesting: Programming, exploits and attacks Why use Python for pentesting? Python is one of the most popular programming languages in existence for several reasons. It’s easy to use, has a…
Article Python language basics: understanding exception handling Introduction to exceptions Ideally, an application will always work exactly as expected. In reality, things can go wrong for several reasons. A…
Article Python for exploit development: All about buffer overflows What is a buffer overflow? Any application that takes users’ input needs somewhere to store that user input. This requires the application to…
Article Certifications compared: CISSP vs. GSEC [updated 2021] CISSP and GSEC are both popular cybersecurity certifications, but they serve different purposes. Find out which one is right for you.
Article Python for exploit development: Common vulnerabilities and exploits Python is one of the most famous and popular programming languages for a variety of reasons. It is a very easy language to learn and use, yet is…
Article CEWLKID: 1 VulnHub CTF walkthrough, part 2 Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article Python for network penetration testing: An overview Python is an extremely powerful and versatile scripting language. It is designed to be easy to write, and its large number of libraries provide a…
Article CGEIT certification exam Domain 1: Governance of Enterprise IT [updated 2021] Introduction Those working in enterprise IT responsible for managing, directing and supporting governance of IT have the option of gaining…
Article Tomato 1: VulnHub CTF walkthrough Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
