What types of cybersecurity skills can you learn in a cyber range?
A cyber range is an environment designed to provide hands-on learning for cybersecurity concepts. This typically involves a virtual environment designed to...
Howard Poston
Howard Poston is a cybersecurity researcher with a background in blockchain, cryptography and malware analysis. He has a master’s degree in Cyber Operations from the Air Force Institute of Technology and two years of experience in cybersecurity research and development at Sandia National Labs. He currently works as a freelance consultant providing training and content creation for cyber and blockchain security.
Page 4
How to reserve a CVE: From vulnerability discovery to disclosure
A CVE, meaning Common Vulnerabilities and Exposure, is a publicly reported vulnerability in software products. Vulnerabilities are assigned CVE IDs to ensure...
Phishing with Google Forms, Firebase and Docs: Detection and prevention
The COVID-19 pandemic spurred a massive shift toward telework as companies tried to both stay operational and safe. One of the biggest impacts of this shift...
6 key elements of a threat model
Threat modeling is a process for threat discovery and risk management. Any system carries potential risk, and a clear understanding of these risks is essential...
Top threat modeling frameworks: STRIDE, OWASP Top 10, MITRE ATT&CK Framework and more
Threat modeling is an exercise designed to identify the potential threats and attack vectors that exist for a system. Based upon this information, it is possible...
Using MITRE ATT&CK with cyber threat intelligence
MITRE ATT&CK® is a framework. It’s designed as a store of knowledge about the possible ways that cyber attackers might create a plan or execute that...
MITRE ATT&CK Framework Mitigations: An overview
MITRE ATT&CK® is a framework. It’s designed as a store of knowledge about the possible ways that cyber attackers might create a plan or execute that...
MITRE ATT&CK Framework Techniques, Sub-Techniques & Procedures: An overview
MITRE ATT&CK® is a framework. It’s designed as a store of knowledge about the possible ways that cyber attackers might create a plan or execute that...
The top 5 pentesting tools you will ever need [updated 2021]
A penetration test or “pentest” is a human-driven assessment of an organization’s security. One or more pentesters will be engaged by an organization...
Threat modeling: Technical walkthrough and tutorial
Threat modeling is an exercise designed to help an organization identify potential threats and cybersecurity risks within their organization and systems....