Blog

18 Jan

DFIR Briefly Expained – Part 1

Since we are going to be learning in future blog posts the specifics of Digital Forensics & Incident Response (DFIR), we first need to establish a foundation of basic knowledge from which we will build upon. The easiest way I know how to do that (without writing an entire book) is to define the common terminologies in use and provide additional context as necessary. (If you are looking for a good book on DFIR I would highly recommend this [...]

By General 0 Comments Read more...
15 Jun

Spy v Spy

This is what I love about IT security – the intellectual battle played out daily between the good guys and the bad guys like an intricate chess game on a global chess board. Every day consists of countless skirmishes, reconnaissance and espionage expeditions, the shoring up of defences, securing data, secret communications, subterfuge, surveillance, encryption, and commando raids, in a shadowy intellectual dual between attacker and defender. Intellectual, because the clever guy wins. It is an uneven playing field on [...]

By General 0 Comments Read more...
15 Jun

The four prime threat agents

A decade and more ago, cyber attacks were carried out by talented teenagers working on PCs in their bedrooms. Their objective was to gain notoriety. They were out to impress their peers, other hackers. The attack tool of choice by these teenagers, was worms that could self-replicate. The wider and faster their malware spread, the more notoriety the virus developer gained. Times have moved on, and the malware landscape is very different today. With cyber attacks on the rise, and [...]

By General 0 Comments Read more...
15 Jun

Drive-by downloads – the biggest threat

The European Network and Information Security Agency (ENISA) has identified drive-by downloads as the number one threat in the emerging IT landscape. This post examines the nature of this threat. A drive-by download occurs when malicious code is installed on a device without the user’s knowledge, when the user visits an infected webpage, or opens an infected HTML email, or via instant messaging. Typically, in a drive-by download, the malware is installed without the user knowing, or without the user [...]

By General 0 Comments Read more...
15 Jun

10 dangers lurking within social networking

With about one and a half billion social network users worldwide, those regularly using Facebook, Twitter, LinkedIn, Google +, Pinterest and others, are key targets of cyber criminals. This post examines some of the security threats arising from social networking. Many on the list are interconnected. Hoaxes An example of a hoax is the Facebook post currently circulating in which it is alleged that Taylor Swift’s iPhone has been hacked. Facebook users are encouraged to click on a link supposedly [...]

By General 0 Comments Read more...