The Supply Chain Cybersecurity Saga: Challenges and SolutionsFeatured
According to a study by Argon Security, software supply chain attacks grew by more than 300% in 2021 compared to 2020. The […]
Category: Case Studies
Holiday wishes from the CEO’s Desk!
The end of 2021 brought with it two high-impact events. One was the appearance of the Omicron variant that has […]
Kerberoasting, exploiting unpatched systems – a day in the life of a Red Teamer
The Scope Recently, we conducted a red team assessment for a large enterprise client where the scenarios allowed were to […]
Security Analytics Using ELK
Few months back, I had the opportunity to conduct two workshops at BSidesDelhi and CSI Mumbai on the above topic. […]
Hardware Security Module (HSM) security testing checklist
One of the key security devices in a lot of organizations is an HSM – Hardware Security Module. All banks use […]
Security Review of Microsoft DirectAccess Implementation
This article presents the key risks with DirectAccess and how to audit them. Let’s begin by first understanding the DirectAccess […]
Anatomy of a Credit Card Stealing POS Malware
INTRODUCTION Point-of-sale (POS) is the place where a retail transaction is completed. It is the point at which a customer […]
Asus RT-N10 Plus Cross Site Scripting CVE-2015-1437
Overview ASUS Router RT-N10 Plus is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the result_of_get_changed_status.asp […]
The Lesser Known XE Attack
The Meaning XE which stands for XML Entity is a standard for representing sets of data. Meanwhile, Entities are more […]
POODLE Advisory
What is POODLE? POODLE stands for Padding Oracle On Downgraded Legacy Encryption Vulnerability CVE: CVE-2014-3566 What is the attack? The […]