How to map MITRE ATT&CK against security controls
The MITRE ATT&CK® framework provides and easy-to-navigate playbook of how attackers work, from high-level tactics to specific procedures.
Article Archive
Maintaining your CCSP Certification: Renewal Requirements [updated 2021]
The Certified Cloud Security Professional certification needs to be renewed. Find out how to do just that.
Malware analysis: Ragnarok ransomware
Learn what Ragnarok ransomware is, how it works and how you can defend against it in this malware breakdown.
ISACA CDPSE domain 3: Data lifecycle
Domain 3 of the ISACA CDPSE certification covers important aspects of the data lifecycle, including how data is collected, stored and disposed.
How to carry out a watering hole attack: Examples and video walkthrough
What is a watering hole attack, how do they work and what can you do to defend against them? Find out in this from Infosec's Keatron Evans.
ISACA CDPSE domain #2: Privacy architecture
The ISACA CDPSE certification teaches many vital privacy-related skills related to privacy architecture and privacy architecture design.
Cybersecurity Weekly: REvil decryptor, AT&T loses millions, OMIGOD flaw
A free decryptor for past REvil ransomware victims was released. AT&T lost $200 million to an illegal phone unlocking scheme. Mirai Botnet started exploiting the OMIGOD flaw. All this, and more, in this week’s edition of Cybersecurity Weekly.
CySA+ Domain #5: Compliance and assessment
Learn about the Cyber Security Analyst Plus certification’s focus on compliance and assessment.
ISACA CDPSE domain 1: Privacy governance
Domain 1 of the ISACA CDPSE certification covers important privacy aspects and requirements needed within modern organizations.
Cybersecurity Weekly: Cobalt Strike beacon, REvil is back, IT training pitfalls
Linux Cobalt Strike beacon is being used in ongoing attacks. REvil ransomware is back in full attack mode and leaking data. 7 signs your IT training sucks. All this, and more, in this week’s edition of Cybersecurity Weekly.