What is Lateral Movement?
Lateral movement is how attackers spread across multiple parts of a network. In network security, lateral movement is the process by which attackers spread from an entry point to the…
OSI in a Cyber Security Breakdown
This is a good breakdown and linking of hacking techniques. This can and will relate to MITRE attack frames and OWASP.
Chinese hackers targeted sanctions office in Treasury attack
Chinese state-backed hackers have reportedly breached the Office of Foreign Assets Control (OFAC), a Treasury Department office that administers and enforces trade and economic sanctions programs. OFAC was created in…
US shares tips to block hackers behind recent telecom breaches
CISA released guidance today to help network defenders harden their systems against attacks coordinated by the Salt Typhoon Chinese threat group CISA released guidance today to help network defenders harden…
What is OAuth?
OAuth, short for Open Authorization, is an open standard protocol used for secure authorization. It allows users to grant third-party applications limited access to their resources without sharing their credentials,…
What is an Endpoint?
What is an endpoint in networking? An endpoint is any device that connects to a computer network. When Bob and Alice talk on the phone, their connection extends from one…
What is Defense In Depth?
“Defense in depth” (DiD) is a cyber security strategy that uses multiple security products and practices to safeguard an organization’s network, web properties, and resources. It is sometimes used interchangeably…
What is an insider threat?
An insider threat is a security risk posed by an employee, former employee, contractor, or vendor. Insider threats can result in fines, reputational damage, and loss of intellectual property. What…
What is a RSA Tolken Keyfob?
An RSA token keyfob, often called an RSA SecurID token, is a hardware device used for two-factor authentication (2FA). Here’s how it works: The RSA token keyfob is a small,…
What is threat intelligence in cyber security?
Threat intelligence is information about the potential attacks an organization may face and how to detect and stop those attacks. Law enforcement sometimes distributes “Wanted” posters with information about suspects;…