Cybercrime
Cyber Attacks
"Conquer Your Risk" is a corporate blog for Cybersecurity and Risk Management executives and specialists, sharing XRATOR experts' views on Cybersecurity, Threat Intelligence, Risk Management and Cyber Insurance.
Vulnerability & Weakness
SQL Injection via JSON: an attack vector overlooked by WAF providers
SQL injection is a well-known attack vector that has been used by hackers for decades to compromise databases and exfiltrate...
Read moreOWASP: The Battle for Governance and Funding
The Open Web Application Security Project (OWASP) has been a mainstay in the cybersecurity community for over two decades. Its...
Read moreCOVID-bit Attack: A New Air-Gapped Networks Intrusion Vector
Air-gapped networks are considered to be the safest of all. These networks are physically isolated from other systems and networks,...
Read moreHow Cybercriminals are Exploiting Abandoned Domains
In today's digital age, domain names are a crucial part of our online presence. They act as the virtual address...
Read moreLow-Code/No-Code Security Risks: Challenges and Solutions for Protecting LCNC Apps
Low-code/no-code (LCNC) development platforms have become increasingly popular in recent years, as they allow business users to build software without...
Read more10 Essential Tools for IoT Pentesting
IoT pentesting is a security assessment that focuses specifically on internet of things (IoT) devices. It is designed to identify...
Read moreThreat Modeling : from Software Security to Cyber Risk Management
As the reliance on technology and interconnected systems continues to grow, so too do the potential consequences of cyber attacks....
Read moreThe Dangers of Broken Links: How They Can Threaten Your Cybersecurity
A broken link (also known as a link rot, rotten link, dead links or 404 errors,) is a hyperlink that...
Read moreIf you have an unpatched Log4j, you can burn your network.
Log4j is a Java-based logging utility used in numerous applications. It is designed to log information, determine how applications are...
Read moreThe Stakeholder-Specific Vulnerability Categorization (SSVC) Methodology
In 2019, Carnegie Mellon University's Software Engineering Institute (SEI) joined together with the Cybersecurity and Infrastructure Security Agency (CISA) to...
Read more-
The H-Factor: Turning Human Into The Strongest Link Of Your Cybersecurity Strategy
-
Understanding and Mitigating the Risk of Computer Memory Exploitation
-
Three Social Impacts of Ransomware Operations
-
Methods to Conduct an Insider Threat Risk Assessment
-
Cyber War, Undefined By Military, Rationalized By Insurers