- Malware Analysis Teaching Malware Analysis and the Expanding Corpus of Knowledge
Malware analysis skills have expanded in complexity as software—benign and malicious—has grown more sophisticated. From a 2.5-hour session in 2001 to a full six-day course with capture-the-flag...
- Malware Researching Scams Helps Understand Human Vulnerabilities
Online scammers exploit predictable human vulnerabilities: starting scams in the physical world, customizing messages with victims' locations, appealing to vanity and self-interest, posing as...
- Social Engineering Looking for Anomalies in Check Overpayment Scam Correspondence
Check overpayment scams convince victims to deposit fraudulent cashier's checks and forward the "extra" funds before the forgery is discovered. Warning signs include strange punctuation, extraneous...
- Privacy What Happens After You've Set Up Google Inactive Account Manager?
Google's Inactive Account Manager notifies designated contacts after 3+ months of account inactivity, optionally sharing data with them. Google sends multiple alerts before expiration and requires...
- Incident Response Why Organizations Don't Prepare for Information Security Incidents
Organizations fail to prepare for security incidents not because they're unaware of threats, but because they believe they personally won't be attacked and underestimate the disruptive effects of...
- Cheat Sheets IT and Cybersecurity Cheat Sheets
As much as we try to be proactive about cybersecurity, IT planning, or project management, we get distracted, or procrastinate. These cheat sheets and checklists are designed to assist professionals...