Prevent Wordpress hacking using this Pen Testing guide
Prevent Wordpress hacking using this Pen Testing guide
Welcome back to the next edition of “Hacking WordPress”. Find Part 1 if you missed it. Let me start with a PSA message. It is illegal to hack, log in to, penetrate, take over or even hack, a system or network of systems without the explicit permission of the owner. Criminal hacking is illegal and punishable under Federal Law.…
How to build a home IT security lab: Episode 1
Part of our blog series “How to prevent a WordPress site hack in 2019: lessons from a former hacker” Hello all and welcome to the first episode of a new blog series focused on how to prevent WordPress site hacks. In this first post of the series, I will provide videos and articles that will comprise a set of…
10 Steps to Creating a Secure IT Environment
Every day, as a part of my work at AlienVault, I talk to prospective clients. Many of them are trying to put together a security plan for their business. Most of the people I talk to are IT professionals who, like everyone else, are learning as they go. During my time in IT and the security industry, I have seen…
The Dark Web has a Serious Deduplication Problem
In a post released on 1/8/19, I wrote about the record number of breaches in 2018. This brought to mind a podcast that I was listening to a few days back hosted by Corey Nachreiner, CTO of WatchGuard Technologies, Inc. on his 443 Podcast. Corey discussed the potential data deduplication problem on the Dark Web. This article will attempt to break down how…
2018 Sees Record Number of Online Retail Data Breaches
During the holiday season people logged on to make purchases through online retailers, like no other time of the year. While there was significant growth in many segments of society on a global scale in 2018, we also saw a significant increase in online retail breaches where personally identifiable information was compromised at an alarming rate. With more and more…
Explaining the Cyber Kill Chain Model
An Alternative to the “Classic” Cyber Kill Chain Model for Internal Attacks and Breaches Developed by Lockheed Martin, the Cyber Kill Chain® (CKC) framework is part of the Intelligence Driven Defense® model for the identification and prevention of cyber intrusions activity. The model identifies what adversaries must complete in order to achieve…