Understanding malware classification
Understanding this isn’t required for the CompTIA Security+ exam, meaning that we’re going beyond the scope of this exam for a few minutes, but I…
Category: Cybersecurity
Must-have AWS security monitoring & alerting [Cheat Sheet]
Most of us know that having visibility into our cloud accounts and resources is critical, but it can easily be overwhelming to implement. What should…
Request forgeries (CSRF, XSRF, SSRF)
In 2020, CheckPoint Research announced multiple vulnerabilities in the popular social media application named TikTok. One of the found vulnerabilities allowed an attacker to delete…
Directory / Path Traversal
Just like you have directories on your PC, laptop, and mobile phones, web servers also have directories. For example, if you were to purchase web…
HashiCorp Vault [Cheat Sheet]
We wrote a blog post introducing and explaining what Vault is, when it’s useful, and how to get started using it to manage your secrets.…
Boot Integrity
Ever hear of a rootkit before? A rootkit is a malicious piece of software that’s designed to give admin control of the targeted system to…
Important pentesting concepts for the Security+
You’ve been running vulnerability scans on a regular basis, you’ve expanded that into a broader vulnerability assessment approach, and you’ve been fixing everything that’s been…
Biometrics techniques and concepts for authentication
We talked about how biometrics can be used for multifactor authentication in order to verify someone’s identity. Biometric authentication refers to something you are (as…
How to set up and use a WiFi Deauther workshop (Spacehuhn Tech on ESP8266)
A WiFi deauther is used to de-authenticate devices from their WiFi networks for security research, pentesting, and educational purposes. They’re also just all around super…
How to get your first cybersecurity job with Emily Pearson
When I first met Emily, she was still in the process of transitioning into the field of cybersecurity from her career in the Navy and…