Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Advice to a New SCADA Engineer

Target Audience As I have come in contact with those new to industrial control systems – whether they be supervisor control and data acquisition (SCADA) syst
Read More
Article

An Introduction to cybersecurity policy

Security policy Security policy is the statement of responsible decision makers about the protection mechanism of a company crucial physical and information
Read More
Article

Hooking and patching android apps using Xposed framework

In part 22 of this series, we discussed the tools that control the flow of the application on the fly while the app is running. Writing Cydia Substrate exten
Read More
Article

Insidious Gmail Phishing Attacks: New Variants Leveraging An Old Scheme

The recent Gmail Phishing attacks Recently security experts warned of a new insidious Gmail phishing campaign that can also trick tech-savvy people. Cyber-cr
Read More
Article

API Call Logging: Windows API

API call logging is a mechanism of logging API call made by an application. In this series, we are going to learn about how to develop an API call logger usi
Read More
Article

Security Awareness Training for the European Union General Data Protection Regulation (EU GDPR)

As part of SecurityIQ’s ongoing commitment to providing the most timely access to new and relevant training resources on security related topics that impact
Read More
Article

An Introduction to tmux

In this introduction, we cover a basic set of features for tmux and a little hands-on using it in some specific use cases. The article was inspired by keepin
Read More
Article

USV CTFh

CTF-USV 2016 was created by Suceava University. There are 7 flags that should be discovered in the form of: Country_name Flag: [md5 hash]. We hosted the VM i
Read More
Article

An Examination of the Caesar Methodology, Ciphers, Vectors, and Block Chaining

Overview of the Last Article In today's world, communications of all types and kinds are becoming of utmost importance. Whether it is from personal to profes
Read More
Article

Stapler Walkthrough

Stapler is a boot2root challenge we are going to solve. We hosted the machine in VirtualBox and fired nmap on its IP address and below is the result: [pkad
Read More
Article

Integrate WHONIX with Kali Linux to achieve anonymity

How to become anonymous is the most common question that everybody asks on the internet. There could be many reasons to be an anonymous user; you are a journ
Read More
Article

10 Security Vulnerabilities That Broke the World Wide Web in 2016

Information security is a subject in cyber-world which we can't think away anymore. Data breaches can cost millions when sensitive information is leaked on t
Read More
Article

Unprotected MongoDB Installations: Child's Play for Hackers

Hacker held open MongoDB databases for ransom In the last weeks, security experts observed a significant increase in ransom attacks against unprotected Mongo
Read More
Article

A brief summary of encryption method used in widespread ransomware

Try to describe encryption method in such a simple way that everyone can understand it easily. 1.1 Ransomware Ransomware is a kind of computer malware that
Read More
Article

Best guide for preparation of SIEM POC (Proof of Concept)

Basically, in SOC operation, Security Information & Event Management (SIEM) plays an important role. We can say it is main centralized Heart of SOC which
Read More
Article

Latest trends in cybersquatting

Protecting company's intellectual property, including designs, patents, trade names, and domain names, is an essential condition for establishing a successfu
Read More
Article

A Review of Cryptography

Overview of Last Articles Our last few articles have dealt with the science and technology of Biometrics. To review, it is merely the Verification and/or Id
Read More
Article

The Best Techniques to Avoid Phishing Scams

Phishing is a form of online identity theft in which fraudsters trick Internet users into submitting personal information to illegitimate websites. These att
Read More
Article

The Advantages and Benefits of Automating Web Security

Every innovation in the world of technology is made to reduce the labor hours, eliminate the repetitive tasks and improve the effectiveness. This automation
Read More
Article

Penetration testing and the law

As one might expect, there are a wealth of legal issues that are associated with information security. Whether it's a matter of preventing security breaches
Read More
Article

System Configuration of Biometrics-The Network Topologies

Overview of the Last Article Whenever the term of Biometrics is conjured up of and spoken in a conversation, the thoughts of a Fingerprint Scanner or any oth
Read More
Article

When Convenience Trumps Security

Security is always a retrofit. Those true geniuses who invented new ways for us to do things better are not the same people who built in the security and saf
Read More
Article

The Biggest Cyber-Security Incidents of 2016

January 1st, 2017, this is the right moment to look at the last 12 months analyzing the biggest hacks of 2016. It was for sure the worst year for cyber-secur
Read More
Article

Setting Up a VPN-Based Penetration Testing Lab

Introduction: In today's information security training, time and location is one of the crucial elements for the attendees. Many tend to choose a flexible tr
Read More