Five Penetration Testing Frameworks and Methodologies
Which are the best frameworks for penetration testing? What are the attributes of each and which one is best for your organization?
Articles
Everything we have published
468 articles, newest first.
40 Million(!) Class Action Complaint for Personal Data Disclosure
Maurice Blackburn Lawyers has launched a class action complaint against Optus which claims that Optus disclosed the personal data of 50,000 customers in a privacy breach.
Sophos XG Firewall Hacked. Hotfix Available
Hackers were spotted exploiting a vulnerability on Sophos XG firewalls which lead to the abuse of the firewall configuration, exposing information such as usernames and passwords.
What Is Google Dorking?
Google Dorking is great for penetration testing activities and security researching but can also be used to aid in the protection of sensitive information.
160,000 Nintendo Player Accounts Hacked
Recently 160,000 Nintendo player accounts got hacked. The hackers exploited a weakness and gained access to player data.
New GIAC Cybersecurity Certification
The new GIAC cybersecurity certification shows that you can put modern principles into practice in an automated and repeatable manner
DevSecOps: Why You Should Put “Sec” in DevOps.
It is important to understand the need for security integration in the DevOps environment. Security belongs in the DevOps lifecycle.
iPhones Crashing From Simple Text Messages
The latest Apple mobile OS version iOS 13.4.1 has a text bomb bug that forces iPhones Crashing From Simple Text Messages.
Docker Security Practices
A list of docker security practices for securely configuring your Docker containers and images.
Warning to Apple Users! Possible Device Hack by Just Sending Email
Bugs were found in the Apple mail app which can allow RCE (Remote Code Execution), due to an out-of-bounds write bug and a heap overflow issue.
Personal Data of 267 Million Users Sold by Hackers
Hackers have sold personal data from 267 Million Facebook users causing another major reputation blow on the tech giant.
Zoom Videoconferencing Security Issues Were known to Dropbox
Security vulnerabilities have been unveiled that could allow attackers to covertly control user's computers.
Defense in Depth – The Layered Approach to Cybersecurity
Defense In Depth is a common terminology in modern day cybersecurity practices. It is a strategy that employs a series of mechanisms, to stop an attack on your organization.
Microsoft Offers Free Cybersecurity Service Protection to Healthcare Staff
Recently numerous hospitals became the target of cyber attacks both in Europe and the United States. Microsoft decided to offer its security service AccountGuard for free to healthcare staff as well as human rights and humanitarian organizations.
NIST is Providing Online Cybersecurity Training Resources
The National Institute of Standards and Technology (NIST) has provided information and links to free and low-cost security training content.
All Data Breaches in 2019 & 2020
Many organizations, big and small, have suffered data breaches in 2019 and 2020. The breach details are shown in the table below.
Zoom Usernames and Passwords Compromised and Listed on Dark Web Forum
The Coronavirus crisis has forced many organizations to embrace "work from home". Zoom platform has become increasingly famous due to this, but also for its
Microsoft Exchange Servers Still Unpatched, Leaves them open to Remote Code Execution Vulnerability
Based on a Rapid7 survey more than 357 thousand Exchange Servers are vulnerable to a latest RCE vulnerability which allows an attacker to use an Exchange user