HHazel Chirinda2d ago · 10 min readUnderstanding Data Loss Prevention: When Data Leaves the OrganizationSensitive business information does not always leave an organisation because of a cyberattack. Sometimes, it happens because an employee makes a mistake, shares a document with the wrong person, or ushazelsec.hashnode.dev
KKazem Mortazavi2d ago · 3 min readFirewall Policy Cleanup: Removing Stale Rules Without Breaking ServicesA firewall is only as strong as the policy running on it. In a recent review of a multi-branch organization, the main firewall had more than 2,000 rules. About a third had not matched a single packet securityland.hashnode.dev
Rrathsara5d ago · 9 min readIDSLab: What Does Another IDS Stage Actually Add?TL;DR: the tool is at hashtagrr.github.io/IDSLab. The rest of this is how it came to exist. I was reading research papers on machine learning and deep learning based intrusion detection systems when rr-cyber.hashnode.dev
TTH6d ago · 11 min readNot-So-Common, Common-Sense Security: ADCS ESC1⚠️ Legal & Ethical Disclaimer The information presented in this post is provided for educational and informational purposes only. All techniques, tools, and examples discussed are intended to be used operationally-insecure.hashnode.dev
Rrathsara6d ago · 18 min readThe Firewall Is the Target Now: A Practical Audit ChecklistIn 2020 I was a network security engineer at a firewall partner that had deployed a large number of firewalls across the region, from small businesses to large enterprises. When the company set out torr-cyber.hashnode.dev
DDražen VišnjićOct 12 · 5 min readThe Architecture of State-Level Surveillance: China, Russia, and Bosnia's 31 Million USD Tech Gamble When critical national infrastructure is rebuilt behind closed doors, information security risks extend far beyond mere software vulnerabilities. They become matters of state sovereignty, foreign polidigitalpower.hashnode.dev
JJeji JamesOct 5 · 2 min readOSINT Fundamentals And Investigation Techniques OSINT: Finding What's Already Out There OSINT (Open Source Intelligence) is the practice of collecting information from sources anyone can access. Hackers, journalists, investigators, and everyday peojeji-james.hashnode.dev
SSansrOct 4 · 10 min readCybersecurity Fundamentals: What Is Cybersecurity and How Does It Work?If you're new to cybersecurity, you've probably seen the same words everywhere: malware, phishing, firewalls, encryption, SOC, penetration testing, and so on. The problem is that most explanations stasansrsecurity.hashnode.dev
VVikram Kumar ShuklaOct 3 · 4 min readA resident needed three clicks to find his city's leaked files on the dark webOn October 1, KOIN 6 News in Portland ran a story I can't stop thinking about. Not because the numbers were huge — they weren't — but because of how ordinary the whole failure was. McMinnville is a civikramkumarshukla.hashnode.dev
RrathsaraSep 22 · 15 min readHiding Network Connections: Encryption, Onion Routing, and Identity SpoofingNetwork logs from an organisation's perimeter tell an analyst a great deal without capturing a single byte of payload: which hosts communicated, when, over which ports, for how long, and how much datarr-cyber.hashnode.dev