Exchanging Web Shells
Tony G and Aamir Lakhani discuss the Microsoft Exchange Zero-Day vulnerabilities.Click here to listen to the podcast on Soundcloud or find us on your favorite podcast app.
Aamir Lakhani1 min read
~/category/security
Security
142 articles
What Is Digital Forensics in Cybersecurity and Why Is It Important?
Cybersecurity is a vast sector that incorporates several subfields. While protecting invaluable data and digital assets, it’s essential to have numerous professionals working on cybersecurity at all times. Digital forensics is the field where workers deal with what happens after any form of cybercri
Shannon Flynn3 min read
Why Threat Actors Continue to Rely on Cyber Fraud
While 2020 has come and gone, many of last year’s cyber fraud problems will continue into at least mid-2021. Cybercriminals will focus on maximizing their profits, using a traditional cost-benefit analysis to decide on the best attack vector. Pandemic-related emotions will run high, and remote workf
Aamir Lakhani1 min read
I'm a C I Double S P (CISSP Parody)
Think you know what being a CISSP is all about? Not all CISSP's are equal, some are more equal than others!
Aamir Lakhani1 min read
Mobile Security should be your top concern
The world is much smaller than it was thirteen years ago. In 2007 Steve Jobs announced the Apple iPhone. It was an innovative product because it brought mobile Internet into the pockets of millions of people. Smartphones were in existence before the iPhone. Blackberry devices were standard issued de
Aamir Lakhani13 min read
Scammers Posing as Board of Elections to Obtain Social Security Numbers
Everybody in the USA that used the mail-in or dropbox voting option, be on alert that there are criminals lurking about with the goal of abusing the confusion going on with the US election the next few days. If anybody calls you and asks you to verify anything about you as a means to “validate y
Aamir Lakhani2 min read
Baselines and Anomaly Detection – The Future of Security Capabilities
In a previous lesson, I pointed out that there are three essential ways security tools detect threats. Those methods are signature-based, behavior, and anomaly detection. Most security tools use a combination of one or more of these capabilities to detect threats. The following figure represents
Aamir Lakhani1 min read
Why is my Network Down?
Over the last few days, many of us in the USA have experienced network outages. I’m not sure about you, but I have become the default “IT Support Guy” at my house meaning when the network goes down, my family starts throwing tomatoes at me while they blame me for the outage. As the IT Support Gu
Aamir Lakhani1 min read
Active DDoS Attack – What to Do
Don't Panic!You will inevitably be affected by a Distributed Denial of Service (DDoS) attack at some point. A DDoS attack is a shock to the system and how you react is everything. When it happens, stay calm and accept it. Someone comfortable at making the right decisions needs to take control of the
Aamir Lakhani6 min read
How Real-Time Technologies Are Helping Protect Vulnerable Energy Assets
As the world increasingly relies on technology, the energy sector’s role becomes more critical. A disruption in the power grid that delivers electricity to businesses and homes could be devastating for any infrastructure and services in an area. Given this severity, cyberattacks on the energy indust
Shannon Flynn2 min read
Open Source Security Tools You Can Use Now
One common question I’ve received is what open source tools are available that I can download now. The answer to this question is simple: LOTS! I will point out however, there are reasons why organizations don’t just run only open-source products within their security operation center. There are
Aamir Lakhani1 min read
Snort 3 is FINALLY out
Snort 3 is out. This comes from the official release. This post can be found HERE. We know users have been anticipating this day for years. So, we are excited to announce that the official release of Snort 3 is here! The version number is 3.1.0.0. Snort is an open-source intrusion prevention system
Aamir Lakhani1 min read