Article iOS forensics Day by day, smartphones and tablets are becoming ever more popular, and as a result, the technology used in development to add new features or…
Article Cybersecurity Weekly: Fake NFT scam, Atlassian flaw, security analyst interview questions An NFT collector was tricked into buying fake Banksy. An Atlassian Confluence flaw is being actively exploited to install cryptominers. 8 must-ask…
Article ISC2 CSSLP exam details and process CSSLP (Certified Secure Software Lifecycle Professionals) is one of the most popular application-security-related certifications available.
Article Taidoor malware: what it is, how it works and how to prevent it | malware spotlight Taidoor is one of the malware criminals have developed to keep their nefarious activity undetectable.
Article Python for active defense: Network Python can be used for traffic collection, protocol decoding, and burning in a decoy when it comes to network defense.
Article Red teaming: Is it the career for you? Red teamers go beyond the basics of penetration testing to help test an organization's security against both in-person and online attackers.
Article HACKSUDO: PROXIMACENTAURI VulnHub CTF Walkthrough, Part 1 Follow along as we solve this Capture the Flag (CTF) from Vulnhub.
Article ISC2 CSSLP job titles and career outlook The CSSLP (Certified Secure Software Lifecycle Professionals) from ISC2 is a valuable certification for IT professionals, developers and…
Article Python for active defense: Monitoring Data is essential to effective active defense, and using Python is a good way to monitor your data sources to identify anomalies.
Article How cross-site scripting attacks work: Examples and video walkthrough What are cross-site scripting attacks and how do they work? Find out in this walkthrough from Infosec Skills author John Wagnon.
Article How criminals leverage a Firefox fake extension to target Gmail accounts We walk through a specific Firefox extension called FriarFox that targets Gmail accounts of global Tibetan organizations.
Article The real dangers of vulnerable IoT devices Internet of Things devices pose a very real threat to cybersecurity. And today, they are prevalent in every household.
Article Cybersecurity Weekly: Cobalt Strike beacon, REvil is back, IT training pitfalls Linux Cobalt Strike beacon is being used in ongoing attacks. REvil ransomware is back in full attack mode and leaking data. 7 signs your IT training…
Article ISACA CDPSE domain 1: Privacy governance Domain 1 of the ISACA CDPSE certification covers important privacy aspects and requirements needed within modern organizations.
Article Cybersecurity Weekly: REvil decryptor, AT&T loses millions, OMIGOD flaw A free decryptor for past REvil ransomware victims was released. AT&T lost $200 million to an illegal phone unlocking scheme. Mirai Botnet started…
Article How to carry out a watering hole attack: Examples and video walkthrough What is a watering hole attack, how do they work and what can you do to defend against them? Find out in this walkthrough from Infosec's Keatron…
Article ISACA CDPSE domain 3: Data lifecycle Domain 3 of the ISACA CDPSE certification covers important aspects of the data lifecycle, including how data is collected, stored and disposed.
Article Malware analysis: Ragnarok ransomware Learn what Ragnarok ransomware is, how it works and how you can defend against it in this malware breakdown.
Article How to map MITRE ATT&CK against security controls The MITRE ATT&CK® framework provides and easy-to-navigate playbook of how attackers work, from high-level tactics to specific procedures.
Article Stolen company credentials used within hours, study says An Agari study shows you have hours to deal with the theft of company credentials.
Article Data governance: Is it the career for you? Data governance is vital for a variety of IT and cybersecurity careers — with an average salary of $200,120 for certain data governance roles.
Article The state of BEC in 2021 (and beyond) What are the trends in business email compromise (BEC) in the next 12 months likely to be? Will deep fakes or crypto be the next big thing in BEC?
Article Android malware worm auto-spreads via WhatsApp messages Malware found hidden in the Google Play store leverages WhatsApp messages to spread to other devices. Learn how it works.
Article Pingback malware: How it works and how to prevent it Pingback malware is a new malware that uses ICMP to perform all the communications with the C2 server.
