Infosec

InfoSecSherpa: Your Guide Up a Mountain of Information! —

On May 22, 2023, I received a text message stating that I needed to update the mobile number associated with my Unionbank account. The message contained a hyperlink directing me to a website called alphaposbd.startlhk.com. As an Information Security Engineer, I was not susceptible to such deceptive tactics and recognized…

Privacy-enhancing technologies (or PETs) utilize data protection principles to enhance data security and minimize the use of personal data, helping users to protect their personal information. They have been around for a while, and presently enjoy a return to popularity. These technologies can enable, enhance and preserve data privacy throughout…

Within the cybersecurity industry, many of us have a natural inclination towards digging into technical concepts and understanding what is going on under the hood. Or, if you are like me, you develop this over time and realize many of the complexities and dependencies you had missed, resulting in a…

InfoSecSherpa: Your Guide Up a Mountain of Information! — FTC Announces Enforcement Action Against Ovulation Tracking App Premom (Lexology/Crowell, May 24th) The Intersection of Technology and Religion: Exploring the Evolving Relationship (Geeky, May 25th) Compensation claims under the GDPR unpicking the latest EU and English case law and looking ahead (JDSupra/Allen & Overy, May 25th) Building an Effective Cybersecurity…

Welcome to this comprehensive guide on the log4j vulnerability. In this article, we will see what is log4j vulnerability and how to exploit it over the internet. Log4j is a logging framework mostly used in the Apache servers. The primary cause of the vulnerability lies in the way Log4j handles…

A low severity bug report, and the importance of bug bounty programs for continuous security. By Jelle Gerbrandy On April 19 we at Hats.Finance received a bug report through our Bounty Vault from Nik (@eth_nik_dev on twitter and telegram). Nik has been an appreciated contributor in the audit competitions we run, and we thank him for the report. In this article, we explore the details…

Picture this: a world teeming with digital shadows, where hackers lurk in the depths, seeking vulnerabilities to exploit. In this thrilling landscape, I embarked on my bug bounty journey, armed with determination and an insatiable curiosity to make my mark in the realm of cybersecurity. Little did I know that…

InfoSecSherpa: Your Guide Up a Mountain of Information! — The food and agriculture industry gets a new center to share cybersecurity information (The Washington Post, May 24th) Despite warnings, Newfoundland and Labrador health officials didn’t bolster cyberdefences before ransomware attack (CBC, May 24th) European Union countries give lukewarm reception to cyber defence strategy (Euractiv, May 24th)