Enterprise Password Security Scores

LogMeIn did a really cool report they’re nicknaming “The State of the Password“, which breaks down a company’s security score by size and industry. They took a census of 43,000 companies to gather all of this data. Here are some highlights of the report: The bigger the company, the worse the score This one should […]

Read More Enterprise Password Security Scores

Antivirus Bypass Technique

A lot of users think having an antivirus is the silver bullet to all of their security problems. Plot twist: It isn’t.  There is a relatively simple way to bypass antivirus and execute code on a remote machine, and the whole process takes less than 30 minutes. First, you need a Kali VM that has […]

Read More Antivirus Bypass Technique

Playing in Sandboxes

For researchers getting into malware analysis, or organizations that need somewhere to test suspicious files, sandboxes are a great way to isolate and run potentially malicious attachments or files before letting them get into your network. You can use any of the available cloud services like Cisco’s ThreatGrid, any.run, or Joe Sandbox. The downside to […]

Read More Playing in Sandboxes

New Project! HOMELAB

I’m always on the lookout for new projects to keep me engaged, so when the opportunity came up this morning to get an old Cisco ASA 5505, I jumped on it. That started the gears turning when I realized I could combine the new-to-me ASA with the Intel NUC I already have to start my […]

Read More New Project! HOMELAB