Article Sunnyday ransomware analysis Get up-to-the-minute facts about Sunnyday ransomware, which has been infecting users since March 2022.
Article Top 7 tools for intelligence-gathering purposes Experts can often collect significant artifacts related to the authors behind the analyzed scenarios during cybersecurity exercises, including…
Article How PCI DSS acts as an (informal) insurance policy The Payment Card Industry Data Security Standard, or PCI DSS, is a set of measures designed to help protect customers’ data and reduce credit card…
Article Four examples of human error in cybersecurity — and how to fix them What kind of human errors cause cybersecurity risks to increase, and how can you stop them?
Article Cybersecurity Weekly: AiTM phishing attack, how to spot social engineering personas, CISA patch order A new AiTM phishing attack can skip MFA, scammers posing as cybersecurity companies to install malware, and how to spot fake personas used for…
Article SOC analyst salary: Entry, mid and senior analysts’ earnings in 2022 A security operations center (SOC) analyst’s job is to monitor an organization’s IT infrastructure for potential threats. These professionals…
Article API Security: How to take a layered approach to protect your data Learn how a layered approach to API security can help organizations balance cost and efficacy.
Article How criminals are taking advantage of Log4shell vulnerability This article will break down the modus operandi of the Log4shell vulnerability
Article Mission accomplished: How one army veteran turned neurobiologist moved into cybersecurity Since training with VetsinTech and Infosec, Tom earned his Security+ and AWS Cloud certifications and landed a security engineer role at Caterpillar.
Article How to learn and pass your next certification exam What do you want to learn next? Where do you want to be in the next six months or year? Use these learning tips to help hit your goals.
Article A DevSecOps process for ransomware prevention Ransomware is possibly the most severe cybersecurity threat facing organizations today. There are multiple attack vectors. One of the ways…
Article 4 key takeaways from the 2022 Verizon DBIR report Here's what cybersecurity professionals need to know about the latest version of the Verizon Data Breach Investigations Report (DBIR).
Article How to use the MITRE ATT&CK Matrix for Enterprise: Video walkthrough Learn how to effectively use the MITRE ATT&CK matrix and develop your and your security team’s cybersecurity skills.
Article Two basic actions that reduce enterprise cyber risk by 60% Recent events have increased the likelihood of at cyber-attacks against critical infrastructure. Here are two things to reduce your risk.
Article Third-party authentication (OAuth): Good or bad for security? How does third-party authentication work and what happens if social media login fails?
Article Cybersecurity Weekly: Scam cryptocurrency apps, PayPal spoofing, CEO impersonation scams Scam crypto investment apps, hackers spoofing popular brands to phish victims, and preventing CEO impersonation scams. All these and more in this…
Article Popular evasion techniques in the malware landscape This article compiles some of the evasion strategies used by malware users in the wild.
Article Nerbian RAT Using COVID-19 templates Nerbian RAT has been spreading by taking advantage of Covid19 email templates containing a Microsoft Word attachment with malicious macros inside.
Article How learning to be "Always Flexible" helped a Marine in earning the Security+ certification Semper Gumby. Almost as synonymous with the Marine Corps as its official motto of Semper Fidelis, the mantra of staying “Always Flexible,” as the…
Article Capture: Improve IoT firmware security with new firmware architecture In this article, we shall discuss what Capture is and discuss how its application can benefit both IoT device owners and IoT device vendors.
Article Today’s IT job market: Beyond fear, uncertainty and doubt You may have heard some buzz about layoffs in the cybersecurity sector. Let's look at what's really going on in the job market.
Article Infosec Skills August Challenge Join the quest for new skills, bragging rights and over $1,000 in prizes. Each month, we’ll release a brand new challenge. Can you complete it?
Article Cybersecurity Weekly: Data breach cost passes $4MM, Uber data breach coverup, Chrome extension vulnerability Average cost of a data breach surpasses $4MM, Uber admits to massive data breach coverup from 2016, and Google Chrome extension steals emails…
Article Fileless malware uses event logger to hide malware Learn about a fileless malware that is “taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild.”
