Article Security vulnerabilities of voice recognition technologies An increasing number of devices nowadays use voice recognition technologies for performing commands, allowing access to stored information, and…
Article Reversing the Pony Trojan part II Pony is a stealer Trojan and has been active for quite a while now. It was responsible for stealing over $200,000 in bitcoins (…
Article Securing Your WordPress Admin Panel Today, anyone can create their own website with tools such as WordPress, Joomla or Drupal. However, many people suffer when they do not take…
Article Budgeting for Security Awareness: Who - What - When - Where - Why - How much 1. Introduction The actions and/or inactions by members of an organization who lack security awareness can lead to various security incidents, such…
Article Is Safe Harbor 2.0 Another Tug of War between Privacy and Security? What led to the Safe Harbor's Demise? In Schrems v. Data Protection Commissioner, the Court of Justice of the European Union (also known as CJEU or…
Article Attacks on Hotel Wi-Fi Networks 1. Introduction Wi-Fi (Wireless Network LAN) is a widespread wireless networking technology that is used in various public places (e.g., coffee…
Article Why Throwing Away Your Old Boarding Pass is so Risky Don't throw away your old boarding pass It's the holiday season and probably most of you will travel during the Christmas time. For this reason, I…
Article When Basic Security Training MIGHT Be Enough When there are people who still open attachments willy-nilly, who click on links with reckless abandon and who let their guard down even though…
Article Oil and Gas Cyber Security – Interview In the recent presentation at BlackHat, you mentioned that oil and gas is one of the industries most plagued by cyber-attacks. What makes oil and…
Article Attacking WPA2 enterprise The widespread use of mobile and portable devices in the enterprise environment requires a proper implementation of the wireless network…
Article Application architecture review Application architecture review can be defined as reviewing the current security controls in the application architecture. This helps a user to…
Article Exploiting CVE-2015-8562 (A New Joomla! RCE) Introduction: A critical remote code execution(RCE) vulnerability was discovered in Joomla! websites. This is making a lot of noise because of the…
Article Malware Researcher’s Handbook (Demystifying PE File Part 2) Demystifying PE File - Continued As per our previous article we will continue on this article here by the rest of section of PE file. Those who…
Article Gift Card Fraud: A Profitable Business Gift cards are a very pleasant gift, especially during the holiday season, but they also can represent a good opportunity for crooks. When dealing…
Article 2016 Cyber Security Predictions: From Extortion to Nation-state Attacks Introduction Here we are, once again, to discuss the current cyber threat landscape, trying to predict possible evolutions of the menaces for the…
Article Domain-Based Message Authentication Reporting and Conformance Domain-based message authentication reporting and conformance, also known as DMARC, is a set up created by a group of organizations, having the…
Article A Beginner’s Guide to Setting Up an SNMP Pentest Lab Using Vyos and Pfsense SNMP often provides a great deal of information during the information gathering phase of a penetration test. It is often seen that SNMP protocol is…
Article Cracking damn insecure and vulnerable app (DIVA) : Part 1 What is DIVA? DIVA is a vulnerable Android application. According to their official website, "DIVA (Damn insecure and vulnerable App) is an App…
Article Cracking Damn Insecure and Vulnerable App (DIVA) – Part 2: In the previous article, we have seen the solutions for the first two challenges. In this article we will discuss the insecure data storage…
Article Cellphone Surveillance: The Secret Arsenal StingRay and the cellphone surveillance In a previous post, I detailed the technologies used to track mobile devices, with a specific reference to…
Article A Case Study of Information Stealers: Part II Introduction: In the second part of this analysis, we will be exploring how Pony steals data and how it sends it to the C&C server. We are equally…
Article Cracking Damn Insecure and Vulnerable App (DIVA) – part 3: In the first two articles we have seen the solutions for the first 6 challenges in DIVA. In this article we will discuss the "Input Validation…
Article BlackEnergy Used as a Cyber Weapon Against Ukrainian Critical Infrastructure Introduction Recently the researchers at ESET firm spotted a new wave of malware-based attacks that are targeting media outlets and energy companies…
Article IoT Security Awareness The world of interconnected "smart" devices is here. Seizing the opportunity for Internet of Things (IoT) devices are manufacturers, retailers in…
