Sign in Subscribe

Latest

How to Actually Disable Windows Defender

How to Actually Disable Windows Defender

Article Purpose People starting out on their computer security journey can be put off from using Microsoft Windows because the OS ships with a persistent antivirius (which is actually quite robust). Disabling this AV is required to load any sort of unobfuscated hacking tools onto the OS, but simply "

5 Practical Security Improvements For Small Businesses

5 Practical Security Improvements For Small Businesses

Small businesses are increasingly becoming targets for cybercriminals. More often, attackers target smaller organizations because they're perceived as easier targets with fewer resources dedicated to security. The good news is that improving your businesses cybersecurity doesn't have to be complicated or expensive. Today, we’re discussing

Business Email Compromise: Fortifying Your Business Against Email Deception

Business Email Compromise: Fortifying Your Business Against Email Deception

In today's digital-first business world, one of the most subtle yet devastating weapons cyber adversaries employ is Business Email Compromise (BEC). It's a sophisticated scam that preys not on the weaknesses in technology but on the trust within human relationships. BEC is an attack where a

Findings Series: Deprecated TLS/SSL Protocol Versions Supported

Findings Series: Deprecated TLS/SSL Protocol Versions Supported

Contents * Description * Classification * Examples * Remediation * References Description Transport Layer Security (TLS) and Secure Socket Layer (SSL) Protocols are used to establish connections between a client and server. TLS/SSL protocols underlay a significant portion of the communcation conducted between computers. Vulnerabilites in TLS and SSL protocols arise from cryptographic failures

Go Ph*sh Yourself

Go Ph*sh Yourself

Security awareness assessments are an effective means of gauging your employees susceptibility to clicking on suspicious links or engaging in less-than-ideal actions when it comes to handling received emails. While Maltek Solutions provides Security Awareness assessments, not every organization may have the budget to enlist an external resource. If you

Findings Series: Weak Password Policy

Findings Series: Weak Password Policy

Contents * Description * Classification * Examples * Remediation * References Description Applications and environments are often only as secure as their weakest user account password. To prevent initial compromise from occurring through account takeover, it is common to enforce complexity, length, and renewal requirements for passwords across an application or network. When these requirements

Findings Series: Cross-Site Scripting (XSS)

Findings Series: Cross-Site Scripting (XSS)

Contents * Description * Classification * Examples * Remediation * References Description Cross-site scripting (XSS) is a code injection attack caused by improper input sanitization of user input in web applications. Attackers submit malicious input to a web application and run JavaScript functions that can dump cookies, hijack sessions, or even log keystrokes from a

Maltek Solutions and APIsec University Present: ASCP Certification

We have been working closely with APIsec University and are excited to announce the release of the API Security Certified Professional (ASCP) examination. The ASCP exam is a practical, hands-on evaluation designed to test a participant's knowledge of API security vulnerabilities by identifying and exploiting weaknesses in the

Findings Series: User Enumeration

Findings Series: User Enumeration

Contents * Description * Classification * Examples * Remediation * References Description User Enumeration occurs on web applications when there are discrepancies in responses received from the application when sending a valid versus invalid username. User enumeration is typically found in authentication and password reset processes. When an authentication attempt on a web application fails,

The Next Step in Your Security Journey: Vulnerability Assessments

The Next Step in Your Security Journey: Vulnerability Assessments

Previously, we discussed the process of creating a Threat Map to identify ways in which attackers may target your organization and what you can do to begin mitigating those threats. The next step in your security journey is to conduct a Vulnerability Assessment. This process is an essential part of

Begin Your Security Journey: External Threat Mapping

Begin Your Security Journey: External Threat Mapping

While businesses are ever more connected to the outside world, they also face an increasing threat of cyberattacks. At the same time, IT security teams are under pressure to provide better protection while spending less on it. To meet these challenges, companies must move beyond perimeter-based security and look at

Why You Should Use a Password Manager

Why You Should Use a Password Manager

Password security is a critical aspect of our digital lives. With the ever-increasing amount of sensitive information stored online, we must protect ourselves from cyber threats by using strong, unique passwords for each of our accounts. However, remembering all of these passwords can be a challenge. Through our security engagements

Security Tip – PayPal Request Scam

Security Tip – PayPal Request Scam

There has been an increase in the number of scam emails originating from PayPal. In these instances, the target victim receives an email about a transaction that requires payment. The transaction usually lists some expensive item or items and is meant to invoke a sense of panic due to the

SSH Socks Proxying and Burp

There's no question about it, PortSwigger's Burp Suite is the de-facto tool for testing web applications for security vulnerabilities. It's far from a "fire-and-f0rget" tool, which means that it take a lot of getting used to in order to make effective use