Article Explore Python for MITRE ATT&CK account and directory discovery Python can use account and directory discovery to find user data such as accounts, which is valuable to attackers.
Article How to become a Chief Information Security Officer (CISO) Learn the steps necessary to become a Chief Information Security Officer (CISO) and succeed in the role.
Article ISC2 CSSLP domain 4: Secure software implementation Domain 4 of the CSSLP ensures that applicants have the knowledge and experience to avoid security blunders while writing code.
Article VULNCMS: 1 VulnHub CTF Walkthrough, Part 1 In this article, we will solve a Capture the Flag (CTF) challenge posted on the VulnHub website called VULNCMS.
Article Explore Python for MITRE ATT&CK lateral movement and remote services You can explore through Python how exploitation of admin shares and web session cookie hijacking can be used to achieve remote hijacking.
Article Explore Python for MITRE ATT&CK email collection and clipboard data It is possible to collect data from a number of different sources, including the system clipboard and local repositories of emails, by using Python.
Article Explore Python for MITRE ATT&CK command-and-control Python can be used to implement command and control in a variety of different ways when it comes to using encrypted channels and protocol tunneling.
Article 7 steps to building a successful career in information security Learn how to break in and build your cybersecurity career with these popular tips.
Article Explore Python for MITRE ATT&CK exfiltration and non-application layer protocol Detecting data exfiltration is important when protecting an organization against a cyberattack.
Article Using Python for MITRE ATT&CK and data encrypted for impact The impact tactic in the MITRE ATT&CK framework focuses on how an attacker can cause harm to a target organization.
Article Death rays, Death Stars and deathware? The impact of fatal attacks against cyber-physical systems will reach over $50 billion by 2023. Learn more about this new killware or deathware.
Article How to write a port scanner in Python in 5 minutes: Example and walkthrough What is a port scanner and how does it work? Learn by writing your own basic Python port scanner script in this walkthrough from Keatron Evans.
Article ISC2 CSSLP domain 5: Secure software testing Learn all about the Certified Secure Software Lifecycle Professional certification’s domain 5 topic of secure software testing.
Article ISC2 CSSLP domain 6: Secure software lifecycle management Learn all about the Certified Secure Software Lifecycle Professional domain 6 topics.
Article CertNexus certification and career path overview Everything you need to know about the wide range of available technology, data science, and security CertNexus certification and training programs.
Article ISC2 CSSLP domain 7: Secure software deployment, operations, maintenance Learn all about domain 7 of the Certified Secure Software Lifecycle Professional and why it is important.
Article SUNBURST backdoor malware: What it is, how it works, and how to prevent it | Malware spotlight SUNBURST is a backdoor associated with a SolarWinds digitally-signed component of the Orion software framework.
Article Cybersecurity Weekly: Phishing attacks using redirects, intermittent file encryption, Ragnarok shuts doors Widespread phishing attacks are using open redirects. LockFile ransomware bypasses protection using intermittent file encryption. Ragnarok…
Article Incident responder careers: What’s it like to work in incident response? Take a look at what it is like to work in the field of cybersecurity incident response.
Article ISC2 CSSLP domain 8: Secure software supply chain Learn more about secure software supply chain, the domain 8 topic of the CSSLP certification.
Article VULNCMS: 1 VulnHub CTF walkthrough part 2 In the last part of this Capture the Flag (CTF), we found four HTTP ports open on the target machine. We tried enumerating the HTTP ports available…
Article Cyber risks of digitizing legacy systems in healthcare environments The benefits of healthcare digitization might benefit a single asset, a process or the hospital as a whole — but it comes with obligations.
Article Tutorial: How to exfiltrate or execute files in compromised machines with DNS Go through this tutorial on exfiltrating and executing files between machines using the well-known DNS protocol.
Article Python for active defense: Decoys Python can be a valuable resource when using decoys and pursuing active defense against cyberthreats.
