Articles, write-ups, and musings concerning the world of cybersecurity and technology.
Routine network enumeration turned up a shared folder full of plaintext employee passwords. Here's the memo that went up the chain — and the case for the free tool used to dig further.
Once you've enumerated a target and know what OS and service versions are running, vulnerability research means checking whether what's installed is actually exploitable. Four acronyms—CWE, CVE, NVD, Exploit-DB—sound interchangeable but aren't.
JPMorgan Chase spends roughly $600 million a year on cybersecurity. Meanwhile, just 5% of small business owners surveyed in 2022 called it their biggest risk. The information for this post was gathered and sourced in 2024 when most of the content was written. Though the...
