Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

SIEM Use Cases for PCI DSS 3.0 – Part 2

So as promised, I have come up with some more use cases for PCI DSS 3.0 requirements. I will try to cover as many requirements and use cases as possible in t
Read More
Article

Cyber Warfare and Cyber Weapons, a Real and Growing Threat

Numerous malicious attacks on computers and mobile devices as well as networks of important entities have recently made the news and have brought back to the
Read More
Article

How to Keep Your Webcam Safe from Hackers

The recent revelations about a Russian website offering links to various live streaming web cameras and baby monitors have made people truly petrified of usi
Read More
Article

SIEM use cases for PCI DSS 3.0 - Part 1

After I got an outstanding response to my previous article on SIEM use cases, I have now prepared a series of articles for some SIEM use cases. In this artic
Read More
Article

Cyber Terrorism: Complexities and Consequences

While a terrorist using the Internet to bring down the critical infrastructures the United States relies on makes an outstanding Hollywood plot, there are fl
Read More
Article

Information Security Vulnerabilities of Automobiles

1. Introduction In the past, cars and computers did not have many touching points. Nowadays, modern cars contain numerous computers. As Bruce Emaus, the chai
Read More
Article

Breaking Software Protection: ElGamal Signature Scheme

Introduction In today's article, we will see a more advanced cryptosystem than the previous one: the ElGamal Signature scheme (not to be confused with ElGama
Read More
Article

Post-Exploitation Using Veil-Pillage

Veil-Pillage is a part of the Veil-Framework which comes handy when performing post-exploitation. It consists of a number of modules which can be used to per
Read More
Article

ITIL Interview Questions

Information Technology Infrastructure Library or ITIL is a set of procedures that companies use to implement, architect, and manage IT software and hardware.
Read More
Article

Website hacking, Part VI: Input validation and filtering in PHP

In this part of the series, we are going to examine the different ways to escape HTML characters in PHP in order to add security to your web project. We will
Read More
Article

PowerShell toolkit: PowerSploit

PowerSploit is a collection of PowerShell scripts which can prove to be very useful during some exploitation and mostly post-exploitation phases of a penetra
Read More
Article

HTTPS and mixed content vulnerability

HTTPS is used to make communication between the server and the browser secure. However, a problem occurs when an HTTPS page loads HTTP content: this is calle
Read More
Article

Cyber-Terrorism: Complexity and Strategy

The Internet has fundamentally altered the world we live in and interact. As former Secretary of Defense Leon Panetta (2012) remarked in a speech before the
Read More
Article

Acceptable Use Policy Template For University IT Systems

Universities, colleges and other higher education institutions store PII (Personally Identifiable Information) such as credit card numbers, email addresses,
Read More
Article

Forensics investigation of document exfiltration involving spear phishing: The M57 Jean case

Humans are often the weakest link in the security chain. In his book The Art of Deception, renowned hacker Kevin Mitnick explains how innate human tendencies
Read More
Article

SoakSoak Malware and How to Protect Your WordPress Website

If you follow security news, I am sure you have heard of SoakSoak malware. It has been in the news for the past few days because it affects more than 100,000
Read More
Article

Introduction to RFID Security

1. Introduction Radio Frequency Identification, also known as RFID, is a technology that was created by Léon Theremin in1945 and later patented by Mario Card
Read More
Article

VMware Interview Questions

VMware is a popular virtual machine software that lets you run multiple operating systems on one physical computer. Virtualization is quickly becoming one of
Read More
Article

Project Management Interview Questions

Project managers are the central component for successful project support, organization and team building. You need the right people skills to work in projec
Read More
Article

WPScanner: Automated Security Testing Tool for WordPress

WordPress is the popular content management system and blogging platform being used by millions of websites. This is the reason hackers are targeting WordPre
Read More
Article

Security Predictions for 2015

2014 has been a very interesting year with some really big data breaches on companies like Sony, eBay, Dominos and widespread software vulnerabilities like S
Read More
Article

iOS Application Security Part 37 - Adapting to iOS 8

In this article we will look at all the things you need to do to set up a pentesting platform on iOS 8 and be comfortable with using all the tools. Jailbreak
Read More
Article

Evolution of Banking Malwares, Part 2

Web Injects This technique is used in scenarios where critical information such as Social Security Number (SSN) or Personal Identification Number (PIN) is ot
Read More
Article

How to Become a Cyber Security Expert

Cyber security is of paramount importance nowadays, since there are ongoing threats jeopardizing our overall web experience. Malware and hackers have been ge
Read More