Year: 2024

7 min read 0

How to track data exfiltration through DNS tunneling

In the evolving landscape of cyber security, attackers are constantly finding new ways to exploit network protocols to evade detection. One of the most sophisticated and challenging threats is DNS tunneling, a technique that leverages the Domain Name System—a protocol fundamental to how the internet works—to covertly move data in…
8 min read 0

Analyzing malware samples in a sandboxed environment

In the digital age, confronting malware is a necessity for cybersecurity professionals and enthusiasts alike. When faced with a suspicious file, the instinct to execute it and observe its behavior is crucial, but doing so on a regular system is an unacceptable risk. This is where sandboxing comes in—a fundamental…
9 min read 0

How to conduct a man in the middle attack in a lab setting

Every WordPress website owner understands the sinking feeling when something goes wrong. Maybe an update crashed your entire site, a plugin conflict caused critical errors, or perhaps your host suffered an outage. The difference between a minor panic and a business-halting catastrophe is almost always a reliable, up-to-date backup. Creating…
7 min read 0

Setting up a private container registry with image scanning

As the world of software development increasingly pivots towards containerization, tools like Docker and Kubernetes have become indispensable. While containers offer unparalleled speed, portability, and efficiency, they also introduce a unique set of security challenges that, if ignored, can leave your applications vulnerable to attack. Implementing robust security measures is…
8 min read 0

Strategies for securing GraphQL endpoints against depth attacks

GraphQL is a powerful query language for your API, offering clients exactly the data they request and nothing more. This efficiency has led to its rapid adoption, but with great power comes great responsibility—and security risks. One of the most subtle yet dangerous threats facing GraphQL APIs is the resource…
8 min read 0

Securely handling JWT authentication and storage

JSON Web Tokens (JWTs) have revolutionized modern authentication, offering a compact and self-contained way to securely transmit information between parties. They enable stateless authentication, which is a major benefit for scalability in modern web applications. However, the convenience of JWTs comes with a unique set of security pitfalls. Proper implementation…
8 min read 0

Monitoring cloud trail logs for suspicious API activity

In the vast and dynamic world of Amazon Web Services (AWS), managing and securing your infrastructure requires more than just setting up resources; it demands constant vigilance over activity within your accounts. AWS CloudTrail is the essential logging service that records almost every API call made in your environment, serving…
8 min read 0

Detecting lateral movement within a virtual private cloud

In the vast, interconnected world of cloud infrastructure, particularly within a Virtual Private Cloud (VPC), attackers rarely stop at gaining initial access. Once inside, their primary goal is often to expand their reach, moving from a compromised host to other valuable resources—a tactic known as lateral movement. Understanding and defending…
9 min read 0

Hardening Linux servers for production environments

Protecting your website and data begins with securing the foundation upon which they operate: your server. Whether you manage a dedicated machine, a virtual private server (VPS), or a cloud instance, server security is a non-negotiable step in modern digital stewardship. A “hardened” server environment is the robust shield that…
7 min read 0

Understanding the shared responsibility model in cloud computing

The move to the cloud offers immense flexibility, scalability, and cost efficiency, but it also fundamentally changes the landscape of cybersecurity. When an organization migrates data and applications to platforms like AWS, Azure, or Google Cloud Platform (GCP), security becomes a joint effort, governed by a critical framework known as…