Collaborate Disseminate
If a phishing email came through with a link to a website hosting BeEF (or another such framework) what would be the Indicators of Compromise for such an attack.
Additionally, if systems were compromised what would be the be… Continue reading BeEF – What are the Indicators of Compromise (IOC)
When co-workers travel internationally for business there seems to be risk of bringing a regular work laptop to some countries.
The one’s that immediately come to mind is China / N Korea.
Is there a list of countries that w… Continue reading What countries are considered hostile in regards to cybersecurity?
When co-workers travel internationally for business there seems to be risk of bringing a regular work laptop to some countries.
The one’s that immediately come to mind is China / N Korea.
Is there a list of countries that w… Continue reading What countries are considered hostile in regards to cybersecurity?
When a website supplies a PDF there are two options for how a user might interact with it:
View it in browser
Download it
As the host of these files is there a security advantage one way or the other? Is it safer for the … Continue reading Is there a best practice regarding PDF files on website?
When a website supplies a PDF there are two options for how a user might interact with it:
View it in browser
Download it
As the host of these files is there a security advantage one way or the other? Is it safer for the … Continue reading Is there a best practice regarding PDF files on website?
When a WAF is throwing alerts your way is there a tool or way to fingerprint the the script or automated tool the potential attacker is using against the site?
What techniques can I use to narrow down and figure out what too… Continue reading WAF – How to tell what automated tool is causing alerts
If a company needs to be PCI compliant, are there any fines levied on them if they don’t do penetration or vulnerability testing? If yes, is it an automatic fine, or is it only if they are caught?
Continue reading Are penetration and vulnerability testing required for PCI compliance? [closed]