Article Spear phishing: Real life examples Spear phishing is a more selective and effective scheme than traditional phishing plots. This technique has raised e-scams to a new level and has…
Article Creating your Own Simple Exploit Module for a Remote Code Execution in Web Apps To all readers, a zip file containing the code used in the article can also be downloaded here: [download][pkadzone zone="main_top"] MSF is one of…
Article Digital forensics models In the increasingly dynamic world of technology, the number of smart devices (computers, smartphones) is dramatically increasing leading to a huge…
Article Why ITIL, COBIT and Other Non-Infosec Based Frameworks Are Infosec’s Best Friends As a current or aspiring security professional, you will know of a range of information security frameworks and enablers. These might include…
Article SQL injection analysis It is one thing to be able to execute a simple SQL injection attack; it is another to do a proper investigation of such an attack. Unfortunately,…
Article Web Application Firewall 101: How to Prevent Web Hacking At this point, it's is safe to say that web hacking is a pretty rampant concern. It almost seems that on a weekly basis readers are inundated with…
Article Windows logging for PCI-DSS Various organizations strive to be PCI-DSS compliant, and they often have a hard time deciding what to log from Windows Systems so as to retain all…
Article SAP Afaria Security: Attacking Mobile Device Management (MDM) Solution It is known that the BYOD trend is changing the way enterprises are managed, delivered, and, most importantly, secured. While BYOD has its benefits,…
Article SAP Cybersecurity History After we got to know what is SAP and why SAP Security is important, we are ready to take the next step, to learn a history of SAP Security and the…
Article Why Does No One Talk about BYOD Anymore? The emergence of BYOD has been a revolution in the work world. For the first time, employees were able to use their own preferred, personal piece of…
Article EINSTEIN System is Still Too Immature to Protect Fully the US Government Networks On Jun 2105, the US Government announced that a major data breach likely backed by Chinese hackers caused the exposure of data belonging to millions…
Article How malware detects virtualized environment (and its countermeasures) Virtual Machines are usually considered a good way to analyze malware as they can provide an isolated environment for the malware to trigger but…
Article Security in Projects: The Importance of Effective Social and Soft Skills Security is just one part of a process for enabling information projects. However, it has become one of the most vital components to their success.…
Article What a Challenger Perceives in most CTF Categories/Challenges Did you have fun playing our very own Capture the Flag (CTF) challenges? I know it's been a long time though since we launched the n00bs CTF Labs…
Article PoS Malware: All You Need to Know Introduction to POS malware PoS malware continues to be a serious threat to several industries, from retail to the hotel industry. Respect our…
Article Categorizing the Types of GNU/Linux users I have been a GNU/Linux user for almost seven years now, and I have been using GNU/Linux since college. In fact, during my college years, I was the…
Article Legal issues of new and emerging technologies Since the invention of the agriculture in the Fertile Crescent, the humanity has witnessed continuous technological developments. Such developments…
Article Is your Security Awareness Program Culturally Sensitive? (And does it matter?) A security awareness program is probably the first line of defense against modern threats to IT systems and company data. Although more and more…
Article Complete Tour of PE and ELF: An Introduction I have decided to come up with an end-to-end malware analysis course and even extend it to memory forensics and detecting APT's. Though this might…
Article Oil and Gas Cyber Security 101 Recently, I've published a post in the form of Interview about Oil and Gas Cyber Security, and it received a lot of attention. It seems that…
Article The Ferizi Case: The First Man Charged with Cyber Terrorism Who is Ardit Ferizi? In October 2015, for the first time, the US Justice Department has charged a suspect for terrorism and hacking. The US…
Article Developments in Machine Learning vs. Traditional SIEM Solutions For decades, Information security analysts have been scanning through security logs trying to find anomalies that could lead to security incidents.…
Article Top 7 Android Ransomware Threats Malicious programs categorized as ransomware, which encrypts their victims' personal files and demands a ransom for restoring the locked data,…
Article DDoS Attacks: Targets and ‘Smoke & Mirrors’ Mode Introduction It is clear that distributed denial-of-service (DDoS) attacks are still in vogue. It is clear that they have become more ubiquitous,…
