Article 5 cybersecurity talent initiatives working to close the skills gap As data breaches and cyberattacks get more and more sophisticated and frequent, organizations are feeling the impact of a cyber skills gap even more…
Article CGEIT certification exam study resources [updated 2021] So, you want to be Certified in the Governance of Enterprise IT (CGEIT). To make this happen, you’ll need to be mindful of the best books, study…
Article Volodya/BuggiCorp Windows exploit developer: What you need to know Check Point researchers unveiled the identity of two authors responsible for zero-day attacks on Windows using a novel technique that allows them to…
Article Cybersecurity Weekly: California phished, ransomware tied to Hafnium, MobiKwik breach A phishing attack leads to a breach at California State Controller. Microsoft Exchange servers are now targeted by BlackKingdom ransomware. A Zoom…
Article Malicious Excel attachments bypass security controls using .NET library A recent threat group called Epic Manchego is using a new technique to create Excel files to bypass antivirus (AV) and and get low detection rates.…
Article Y0usef 1 VulnHub CTF walkthrough This is an easy CTF tasking you with gaining root access to the machine. To complete this task, two flags will need to be read.
Article CGEIT certification exam Domain 2: IT Resources [Updated 2021] Introduction The Certified in Governance of Enterprise IT, or CGEIT, is an IT governance certification offered by ISACA. Comparing the 2020 CGEIT…
Article CGEIT certification exam Domain 3: Benefits Realization [updated 2021] Introduction The Certified in Governance of Enterprise IT, or CGEIT, is an IT governance certification offered by ISACA. In July of 2020, ISACA…
Article CGEIT certification exam Domain 4: Risk optimization [updated 2021] Introduction The Certified in Governance of Enterprise IT, or CGEIT, is an IT governance certification offered by ISACA. The certification exam…
Article Excel 4.0 malicious macro exploits: What you need to know Adversaries are finding new ways to weaponize Excel 4.0 macros for delivering additional, more sophisticated malware.
Article Cybersecurity Weekly: Vaccine phish, firewall evasion, VMware authentication fix Phishing attacks use vaccine surveys to steal personal info. Hackers are using a Windows OS feature to evade firewalls. VMware fixes an…
Article APT Sandworm (NotPetya) technical overview Sandworm, also known as Telebots, is one of the most dangerous Russian threat actors impacting industrial control systems.
Article 3 tips to build a stronger cybersecurity team with Katie Boswell and Jason Jury Learn how to build a stronger cybersecurity team with tips from KPMG Cyber’s Katie Boswell and Booz Allen Hamilton’s Jason Jury.
Article Common job titles and salaries for CGEIT-certified professionals [updated 2021] Introduction ISACA's Certified in the Governance of Enterprise IT (CGEIT) certification gives you the credibility to discuss critical issues around…
Article JavaScript obfuscator: Overview and technical overview JavaScript cyberattacks are on the rise, meaning you need to be extra careful when opening your emails.
Article Uncovering and remediating malicious activity: From discovery to incident handling Need a “cybersecurity playbook” for incident response? A recent CISA alert used threat intel from five counties to create this best practice guide.
Article Blackrota abused Docker remote API to deliver CobalStrike beacon The Blackrota backdoor is a piece of malware analyzed by NetLab and is the most obfuscated Go-developed executable and linkable format (ELF) malware…
Article Cybersecurity Weekly: DNS vulnerabilities, W-2 phishing scam, Google URL malware DNS vulnerabilities affect over 100 million devices. A W-2 phishing scam is targeting the 2021 tax season. Microsoft warns of malware delivery via…
Article Turla Crutch backdoor: analysis and recommendations Crutch is a newly discovered backdoor from Turla advanced persistent threat (APT), a Russian-linked threat actor, used in a recent cyberattack…
Article What is a security champion? Definition, necessity and employee empowerment [Updated 2021] Does your organization need a security champion? Learn how they can help elevate cybersecurity and empower employees through your organization.
Article Rapid threat model prototyping: Introduction and overview Choosing a form of threat modeling can help protect your organization from security threats.
Article Kira 1: VulnHub CTF walkthrough Bassam Assiri is the author of this VulnHub CTF, which challenges users to gain root access and read the flag file.
Article Cybersecurity Weekly: One-click hack, Discord Nitro ransomware, Codecov hacked A one-click hack was found in popular desktop apps. Discord Nitro gift codes are now demanded as ransomware payments. The Codecov code coverage tool…
Article Encryption and etcd: The key to securing Kubernetes Kubernetes is great for container orchestration, but is it secure? Learn about etcd and encryption — and how they relate to cybersecurity.
