Archives: Articles

From the Winter 2024 Issue

Navigating the Cybersecurity Landscape: College Students and the Role of Professors in Preparation

Author(s):

Rafael Hocker, Graduate Student, Oklahoma State University

Cybersecurity has become a critical facet of our lives in the digital age and is often described as the fifth dimension of warfare (Land, Sea, Air, Space, and now, Cyberspace). A recent Forbes article, published on December 5, 2023, delves into the multifaceted world of cybersecurity, urging college students to recognize its significance and advocating … Read more

From the Winter 2024 Issue

Exploring the Dark Web: Understanding its Role in Cybersecurity Threats

Author(s):

Justin Petitt, Director, Cybersecurity Center of Excellence, Edgewater Federal Solutions

Exploring the Dark Web

What in the Dark Web is happening here? “What in the Dark Web is happening here?” was the first thing said to me over a recent holiday trip, with a friend walking in and seeing me checking in on work and life with three separate laptops set up in front of me, my attention and … Read more

From the Winter 2024 Issue

How to Separate the Good SOCs from the Bad

Author(s):

Julia Girardi, Senior Consultant, CyberCX

How to Separate the Good SOCs from the Bad

Security Operations Centers (SOCs) typically provided by Managed Security Services Providers (MSSP) can be a valuable asset to help protect a company against cyber threats and to help them to operate securely. With so many providers in the marketplace and many organizations having adopted an outsourced SOC arrangement, how can your organization tell if its … Read more

From the Winter 2024 Issue

How is Generative AI a Bigger Security Concern Than a Benefit?

Author(s):

Shigraf Aijaz, Cybersecurity Writer and Journalist,

Generative AI Security Concern

The rapid rise and development of generative AI, such as ChatGPT, Google Bard, or even Microsoft Bing, has revolutionized how we interact and view AI. These LLM chatbots have significantly made lives more manageable, providing every individual and business with a fast and improved method to execute repetitive tasks. However, despite all their benefits, these … Read more

From the Winter 2024 Issue

Flashing Red Lights: Cybersecurity for Intelligent Transportation Systems

Author(s):

Christopher J. Brown, Author ,

Henry J. Sienkiewicz, Faculty, Georgetown University

Red lights, yellow lights, green lights. A flashing light?  A traffic warning sign?  Recognized as a critical infrastructure by the Department of Homeland Security (DHS), the transportation system is essential to modern life. From the skies to the seas to the railways to the roadways, and to bike lanes and pedestrian crossing, this highly complex … Read more

From the Winter 2024 Issue

UNISQUATTING IDN HOMOGRAPH ATTACKS

Author(s):

Danny Gershman, Founder and CEO, Radius Method

Unisquatting (a portmanteau for Unicode cybersquatting) or the Internationalized Domain Name (IDN) homograph attack is a fairly new type of mechanism that builds on several other types of Domain Name System (DNS) address attacks. The typosquat (Uniform Resource Locator (URL) hijacking) attack relies on being able to register a domain name very closely resembling another … Read more

From the Winter 2024 Issue

Cyber McCarthyism – The Third Red Scare

Author(s):

Chris Pogue, Director, Digital Forensics and Incident Response, CyberCX

Cyber McCarthyism

McCarthyism, also known as the Second Red Scare, refers to the political repression and persecution of various politicians, government employees and military personnel, in an attempt to spread the fear of alleged communist and Soviet influence on American institutions and of Soviet espionage in the United States during the late 1940s through the 1950s.  After the mid-1950s, Senator Joseph McCarthy, who had … Read more

From the Winter 2024 Issue

Navigating Blockchain and Quantum Computing and Their Cybersecurity Impacts

Author(s):

Gaurav Sharma, Director of Operations, Chetu

In a dynamic industry where technological evolution is constant, staying informed about the latest advancements is crucial for businesses aiming to optimize operations and bolster cybersecurity. Embracing new technologies not only enhances functionality but also ensures the seamless integration of innovative systems. As businesses increasingly rely on secure transactions and data protection, the popularity of … Read more

From the Winter 2024 Issue

Mobile Security Research – A Massive Waste of Time

Author(s):

Brian Robison, VP of Product Marketing & Chief Evangelist, Corellium

Mobile Security Research

Mobile security research and testing have traditionally been extremely difficult and time-consuming endeavors. And most of that time is spent doing things other than the actual research. Whether searching for vulnerabilities in a mobile OS, penetration testing a mobile app, or conducting research into mobile threats and malware, all are bound by the restrictions imposed … Read more