Introduction The security mindset serves as the compass guiding professionals through the complex terrain of protecting an organization’s vital operations and assets from an array of cyber threats. At the heart of this approach lies the critical practice of data and asset classification – a process that, when executed correctly, [...]
Introduction In the realm of cybersecurity, the ability to adeptly handle files in Python is more than a mere skill—it’s a necessity. Previously, we dipped into the basics of opening and reading files. Now, let’s delve deeper, unravelling the nuances of file handling in Python, with a focus on its [...]
In this task, as a level one security operations center (SOC) analyst at an undisclosed company, I have received an alert about a suspicious file being downloaded on an employee’s computer. The employee received an email with a password-protected spreadsheet attachment, and upon opening it with the provided password, a [...]
Some security terms for reference below: [...]
An SSL Stripping attack is a form of man-in-the-middle (MITM) attack where an attacker intercepts and alters the communication between a user’s browser and a web server to downgrade HTTPS connections (secure) to HTTP (unsecure). Here’s a step-by-step account of how this attack is typically executed: Step 1: Target Identification [...]
Cybersecurity Journal Description The Cybersecurity Journal is an academic exercise designed to inform and educate both the journaler and the reader. It’s a carefully curated record, capturing a series of simulated cybersecurity incidents and exercises. This journal is particularly valuable for professionals and students in the cybersecurity field, serving as [...]
In the digital age, usernames and passwords are akin to the locks and keys of our online universe. But as crucial as these login credentials are, they remain vulnerable to a sophisticated type of cyber attack known as brute force attacks. Today, let’s dive into the nature of these attacks [...]
Security experts must stay ahead of emerging risks. This guide, already encompassing the CVE® list – a public catalogue of known vulnerabilities and exposures, now also explores the National Institute of Standards and Technology (NIST) vulnerability database, alongside the revamped Open Web Application Security Project (OWASP). Understanding OWASP’s Role in [...]
Introduction to Hash Functions in Security Hash functions are critical elements in the realm of cybersecurity, serving as foundational tools in every company’s security strategy. These functions are pivotal for ensuring authentication and non-repudiation, guaranteeing the authenticity of information cannot be denied. Understanding the evolution of hash functions reveals their [...]
Introduction to OpenSSL and AES-256-CBC In the digital era, the security of information is paramount. OpenSSL, an open-source toolkit implementing the SSL and TLS protocols, is at the forefront of securing data transmission and storage. Among its many features, OpenSSL allows for robust file encryption and decryption, ensuring that sensitive [...]
