Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Insurance Against Ransomware Threats

Section 1. Introduction Although there is a vast amount of information on the risks of cyber-attacks, not all businesses engage in preparation and implementa
Read More
Article

Patching by Reversing Binary

Abstract Software often distributed with vulnerabilities in production milieu either due to poor programming practice (often inadvertently) or may be owing t
Read More
Article

SAP Risks - Fraud

Welcome to the latest part of SAP Risks. After we finished with Espionage and Sabotage, let's eat the last piece of this "sweet cake" dubbed Fraud. In my opi
Read More
Article

Past and Present Iran-linked Cyber-Espionage Operations

Iranian hackers intensify their cyber operations Security experts and intelligence agencies are observing a significant intensification of the cyber espiona
Read More
Article

How Security Awareness Training Can Prevent a Ransomware Situation

I. What is Ransomware? Ransomware is a type of malware that locks users out of their computer systems or/and files and demand ransom to restore the status qu
Read More
Article

Configuring Kali Linux on AWS for FREE to get the Public IP

Kali Linux is the most favorite pentesting distribution. There are thousands of tutorials for Kali Linux are available on the Internet. However, people alway
Read More
Article

Malware Analysis with OllyDbg

In this part of the article series, we will look how we can look at the inner workings of a malware. In part 1 and part 2 we have worked on the behavioral an
Read More
Article

How to prevent access control attacks

As we know, organizations are prone to data breaches, and even though organizations are becoming serious about their security posture, they are often attacke
Read More
Article

Static Analysis

In Part 1, we have seen that how to perform behavioral analysis on a malicious specimen. In this article, we will look at another specimen and perform behavi
Read More
Article

Network security policy

A security policy designates an organization's security controls, without specifying technologies, as well as offers high-level directives on acceptable and
Read More
Article

Hacking IMF – CTFh

IMF is yet another awesome boot2root challenge hosted by Vulnhub where one needs to go through various web and some binary exploitation to fetch all flags.
Read More
Article

SAP Risks: Sabotage

I hope you did not forget the previous article about espionage. Just in case, I would like to remind you once again that traditional IT security deals with C
Read More
Article

Breaking into Fortress DC416 – CTFha

In this article, we will be solving fortress VM which is one of the VMS created by Vulnhub team for DEFCON Toronto's 2016 offline CTF. Introduction I picked
Read More
Article

Freedom Hosting II Hacked: 10,613 .onion Sites are Down

A fifth of the Dark Web is down The Anonymous hacktivist group hacked the popular Dark Web hosting provider Freedom Hosting II. Roughly 10,613 .onion sites l
Read More
Article

Mathematical algorithms of asymmetric cryptography and an introduction to public key infrastructure

Learn what's involved in asymmetric cryptography, including the mathematical algorithms used and the public key infrastructure.
Read More
Article

Security Awareness

Security awareness is the knowledge and attitudes of members of a group that is tasked with the protection of the physical, and more important, informational
Read More
Article

How Healthy is Security Across Healthcare?

For the first time, 2016 saw the American Medical Association (AMA) placing health data security within their top nine issues affecting physicians (1). This
Read More
Article

Shamoon Reloaded: the Mysterious Return of the Dreaded Wiper

August 2012 – Saudi Aramco hit by a cyber attack On August 15th, 2012, the Saudi Arabia's oil company, Saudi Aramco announced that its systems and its intern
Read More
Article

A Review of Asymmetric Cryptography

Introduction Our last article further examined and finished off the topic of Symmetric Cryptography. Specifically, the following topics were examined:
Read More
Article

Code Analysis

In this article series, we will learn about malware behavioral and code analysis. For part 1, I will cover behavioral analysis of one of the specimens. Behav
Read More
Article

Which Cloud Certifications are Important for 2018?

If you work with the cloud on a regular basis, becoming certified by a trusted company will help you improve your career prospects and ensure that you have a
Read More
Article

Penetration Testing from Amazon Cloud

In this article, we are going to see how we will deploy a Windows and Linux system on an Amazon cloud server for penetration testing purposes. What is the di
Read More
Article

Process: gaining and elevating access

Gaining and elevating access and its relation to penetration testing Background Penetration Testing is a process that typically consists of the following
Read More
Article

An introduction to the key distribution center, mathematical algorithms, and the hashing function

Our last article reviewed some of the key fundamentals of Cryptography, especially what has been used in the past. Specifically, it covered the following top
Read More