Article Cyber Security Risk in Supply Chain Management: Part 1 Introduction Cyber security is generally thought of as various types of security devices like firewalls, Web Application Firewall (WAF), IDS/IPS,…
Article The FREAK Vulnerability: From Discovery to Mitigation A few weeks ago, security experts discovered a new major security SSL/TLS vulnerability, dubbed FREAK, that for more than a decade left users of…
Article Cyber Security Risks in Supply Chain Management – Part 2 In Part 1 of this article series, I discussed various risks involved in supply chain management with the latest example of a malicious adware named…
Article iOS Application Security Part 39 - Sensitive information in memory In this article, we will look at analyzing the memory contents of an iOS application. iOS applications may store sensitive information like…
Article Packet crafting: a serious crime! Packet crafting is the art of creating a packet according to various requirements to carry out attacks and to exploit vulnerabilities in a network.…
Article Introduction to GSM security The Global System for Mobile Communication or GSM is a wireless communication that uses digital technology and is widely deployed across the globe…
Article Understanding iOS Security: Part 1 Apple uses iOS (operating system) to power many of its mobile devices such as iPhone, iPad and so on. From the beginning, security has been placed…
Article Wi-Fi Security: Securing Yourself against Practical Wireless Attacks While the access points in organizations are usually under the protection of organization-wide security policies, home routers are less likely to be…
Article Cracking a Wi-Fi WPA2 Password, Thanks to Amazon In a pen tester's life, sooner or later you are cracking a password. This activity depends on the type of password and available hardware. Today I…
Article Ethical Hacking Dual Certification Interested in an online course for hacking? A dual training CEH boot camp?[pkadzone zone="main_top"] Our most popular information security and…
Article Digital Dark Age: Information Explosion and Data Risks "Old formats of documents that we've created or presentations may not be readable by the latest version of the software because backwards…
Article Buying personal information in the deep web The criminal underground Before starting our quick tour in the criminal underground to collect information on the principal items and services…
Article Browser-based vulnerabilities in web applications Abstract Web browsers or mobile browsers are software applications that act as the intermediary applications between a user and the World Wide Web…
Article Android Application hacking with Insecure Bank - Part 3 In this article, we will look at attacking components in Android applications, starting with activities. But first, it is essential to understand…
Article PCI-DSS and PA-DSS Today's online domain and a cashless way of transacting business have brought more players into the payment industry than yesterday. Cash is no…
Article Encryption Solutions for the New World Keeping personal information secure and protected remains a top priority for computer users who now rely heavily on information systems to manage a…
Article Security attacks via malicious QR codes With the increasing use of smartphones, QR codes are becoming popular. Recently, WhatsApp launched its web version, which needs QR code scanning to…
Article Are Browsers the Weakest Link of the Security Chain? Current scenario The number of cyber attacks is constantly increasing, and according to security experts they grow even more sophisticated. The…
Article Bypassing same origin policy (SOP) The same origin policy is an important concept in the web application information security domain. In this policy, a web browser allows scripts…
Article Android Application hacking with Insecure Bank Part 4 In this article, we will look at a very handy framework for analysis of android applications named Drozer. Drozer is a very useful tool as it…
Article DNA cryptography and information security What is cryptography? Cryptography is the science of study of secret writing. It helps in encrypting a plain text message to make it unreadable. It…
Article Security Policy Template for Web Applications Web applications are critical to the enterprise infrastructure. Companies rely on them to communicate with partners, clients, shareholders and…
Article Solutions to Net-Force steganography CTF challenges Steganalysis refers to the process of locating concealed messages inside seemingly innocuous 'containers'. The idea behind steganography is…
Article IT Security Awareness Programs [download]Download the BEST PRACTICES FOR DEVELOPING AN ENGAGING SECURITY AWARENESS PROGRAM whitepaper[/download] Learn the best practices for…
