[Original] Cyber Warrior's Cybersecurity PRISM

Details: Written by: Meena; Category: Cybersecurity PRISM

Your organization is most likely spending a lot of effort in finding and fixing vulnerabilities, but the problem is that you or your team just can’t seem to keep up with.

You will soon find out that your approach to vulnerability management does not work. Creating vulnerability reports, attending vulnerability review meetings, opening tickets to patch vulnerabilities, validating fixes and patches, etc. takes too much time, energy, and head-banging, but nothing seems to make any difference to your company and the number of vulnerabilities it is facing. Why?

Details: Written by: Meena; Category: Cybersecurity PRISM

Here is a fact, you always need to keep in the mind:

For every novel (new) attack technique discovered, there are countless attacks taking place somewhere in the same time frame that use well-known and well-trodden tactics. For every attack carried out by a nation state, there’s a dozen million-dollar ransomware attacks that still started with a simple phishing email.

Details: Written by: Meena; Category: Cybersecurity PRISM

As a cybersecurity professional, you need to know that in a routine, you would encounter

Not more than 3-5 % Critical Incidents of Compromise
And, around 10% with High Severity!

Details: Written by: Meena; Category: Cybersecurity PRISM

All employers expect that networking professionals are well-versed not only with networking technologies, but also with technologies to defend it in right way. There cannot be two thoughts about that!

Details: Written by: Meena; Category: Cybersecurity PRISM

Every IT systems that store and process information of any kind actually use 'file-based architectures'. The core operating system and applications (software) binaries, configuration data of system and applications, organizational data, and all logs are stored in files somewhere. What these files actually do?

Details: Written by: Meena; Category: Cybersecurity PRISM

In this post, I will not include an exhaustive list of technical ransomware details, different malware strands, and business implications of this kind of crimeware.

I will focus, instead, on preventive measures to stop ransomware. Here they are:

Details: Written by: Meena; Category: Cybersecurity PRISM

It is a model of intrusion analysis built by analysts, asking the simple question, “What is the underlying method to our work?”

Details: Written by: Meena; Category: Cybersecurity PRISM

A lot of Exploit Kits (EKs) can be obtained commercially available on the darkweb. These are malicious code which can be embedded in a website. Many Exploit Kits are easy to use (even by those cybercriminals with little coding experience). They contain pre-packaged code that seeks to exploit out-of-date browsers, insecure applications, or vulnerable services, etc.

Details: Written by: Meena; Category: Cybersecurity PRISM

Let us first understand what Buffers are…

A buffer is a sequential section of memory allocated to contain anything from a character string to an array of integers. Buffers are memory storage regions that temporarily hold data while it is being transferred from one location to another.

Details: Written by: Meena; Category: Cybersecurity PRISM

What is a Rootkit?

A rootkit is a malicious software that allows an unauthorized user to have privileged access to a computer and to restricted areas of its software. A rootkit may contain a number of malicious tools such as keyloggers, banking credential stealers, password stealers, antivirus disablers, and bots for DDoS attacks. This software remain hidden in the computer and allow the attacker remote access to the computer.