Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Analyzing a DDoS Trojan

MD5: 67877403db7f8ce451b72924188443f8 Installer: In the main function of the malware, two subroutines are used for checking whether the malware is already in
Read More
Article

ISIL, Terrorism and Technology: A Dangerous Mix

Introduction I was watching the Homeland series on TV when I received the news of the dramatic events in Paris. The introduction to this latest episode was e
Read More
Article

CISA is law: Now what?

The CISA cybersecurity bill passed U.S. Senate despite the fact that privacy advocates, private companies and civil liberties groups have expressed their dou
Read More
Article

Database Security

Database security is one of the most important topics that have been discussed among security personnel. The growing number of incidents proves that it's som
Read More
Article

Pentesting SAP applications : An introduction

SAP (Systems-Applications-Products) is a software suite that offers standard business solutions; it is used by thousands of customers across the globe to man
Read More
Article

Security Awareness – Judge the Impact to Justify the Effort

[download]Download the BEST PRACTICES FOR DEVELOPING AN ENGAGING SECURITY AWARENESS PROGRAM whitepaper[/download] Learn the best practices for developing a s
Read More
Article

The Most Popular Social Network Phishing Schemes

1. Introduction Social networks have become a trusted communication medium for both personal and professional communication. However, hackers regularly explo
Read More
Article

Reporting of Cybersecurity Incidents

This article is about the reporting of cybersecurity incidents in the USA. While it covers three main types of reporting—corporate, institutional and civil—f
Read More
Article

SpyderSec Challenge

Here is another interesting challenge we are going to solve. The vulnerable machine's name is SpyderSec. We hosted the machine in VirtualBox and fired nmap o
Read More
Article

Password Security: Efficient Protection of Digital Identities

Section 1. Introduction Almost all devices we own and online accounts we create deploy an authorization system, a crucial element of personal data security.
Read More
Article

Vulnerability Management

Vulnerability management plays an important part in establishing a secured network. It includes identifying, analyzing and rectifying the flaws that exist in
Read More
Article

American Government Cyber-Insecurities and Initiatives

Digital telecommunications represent a real danger today for governments, as their systems are being probed for weaknesses daily by a number of potential int
Read More
Article

Virtual Assistants: Here to Stay or Data Security Risks?

Cardiff University and IBM have been working on creating a new virtual assistant (VA) software that can interact with its owner in a more human-like manner.
Read More
Article

Windows 10 Security

Windows 10 was launched on July 29th of this year and had been adopted by 75 million users by the end of August. Despite its initial popularity, the adoption
Read More
Article

EMV and Threat Intelligence in the Prevention of Payment Card Frauds

Current Scenario Credit card data are a precious commodity in the criminal ecosystem, the number of data breaches involving payment card data continues to in
Read More
Article

DDoS Attacks: A Perfect Smoke Screen for APTs and Silent Data Breaches

At the beginning of the year, Forbes mentioned a trend of growing DDoS attacks all over the world. During this year, many security companies have announced a
Read More
Article

Smartwatch – A Fashionable and Dangerous Gadget

 10 Tips to Protect Your Smartwatch Section 1. Introduction Although the market for smartwatches is still in its infancy, there has been a steady increase in
Read More
Article

LibreSSL: The Secure OpenSSL Alternative

This paper seeks to compare OpenSSL and LibreSSL as the main encryption library for production environments
Read More
Article

Hacking ZigBee networks

What is ZigBee? Internet of Things (IoT) is what most experts consider as the next step of the Internet revolution where physical objects are invariably lin
Read More
Article

How to prevent web scraping

Web scraping is a widely used technique that transforms unstructured data on the web (HTML) into structured data which can be stored in a database or a sprea
Read More
Article

Privacy Risks of Household Robots: 5 Security Risks and 10 Steps to Protect Yourself

Section 1. Introduction As a result of the rapidly developing robotics industry, more and more families worldwide integrate robots in their households. Robot
Read More
Article

MES Security: What can we learn from the Volkswagen Recalls?

[download]Download the BEST PRACTICES FOR DEVELOPING AN ENGAGING SECURITY AWARENESS PROGRAM whitepaper[/download] I decided to write this article right after
Read More
Article

Checklist for Hiring a Good Web Penetration Tester or Web App Security Consultant

The task of a web security tester or penetration tester is of course to audit the security of the web applications, web services, and web servers in a compan
Read More
Article

Windows exploit suggester – An easy way to find and exploit windows vulnerabilities

During our penetration testing engagements, we often come across the situations where we need to find the right exploits to escalate the privileges on a comp
Read More