In this blog post, we’ll introduce a new 0day technique designed to bypass AMSI without the VirtualProtect API and without changing memory protection. The post AMSI Write Raid 0day Vulnerability appeared first on OffSec. This article has been indexed from…
Category: OffSec
How Cybersecurity Training Lowers Insurance Premiums
Discover the essential cybersecurity training elements that insurers look for and how to build a winning program. The post How Cybersecurity Training Lowers Insurance Premiums appeared first on OffSec. This article has been indexed from OffSec Read the original article:…
Infrastructure Automation and Defense: Introducing DevSecOps Essentials
Accelerate your DevOps journey with OffSec. Build secure, scalable, and efficient software delivery pipelines through real-world training. The post Infrastructure Automation and Defense: Introducing DevSecOps Essentials appeared first on OffSec. This article has been indexed from OffSec Read the original…
The Role of Cybersecurity Training in Compliance
Learn about the role of cybersecurity training in compliance. Discover how OffSec’s training can contribute to a strong compliance posture. The post The Role of Cybersecurity Training in Compliance appeared first on OffSec. This article has been indexed from OffSec…
Proactive Threat Detection: Introducing Threat Hunting Essentials
Outsmart evolving cyber threats with Threat Hunting Essentials. This hands-on training path builds expertise in threat actor analysis, advanced hunting techniques, and data analysis. The post Proactive Threat Detection: Introducing Threat Hunting Essentials appeared first on OffSec. This article has…
Cybersecurity Compliance: Understanding Regulatory Frameworks
Learn about the importance of cybersecurity compliance, most common cybersecurity compliance frameworks and how to navigate their complexities. The post Cybersecurity Compliance: Understanding Regulatory Frameworks appeared first on OffSec. This article has been indexed from OffSec Read the original article:…
The Race Against the Hackers: How the OffSec Cyber Ranges Keep You Ahead
Attacks happen all the time – just this month, the cybersecurity community was shaken by the discovery of the Xz backdoor, a malicious exploit hidden within the popular open-source project XZ Utils. This backdoor, cleverly concealed within a seemingly legitimate…
Attacks happen all the time – just this month, the cybersecurity community was shaken by the discovery of the Xz backdoor, a malicious exploit hidden within the popular open-source project XZ Utils. This backdoor, cleverly concealed within a seemingly legitimate…
Communication Skills in Cybersecurity
This blog is based on a conversation we had with Eugene Lim. Eugene is a Senior Cybersecurity Engineer who has earned the OSCP, OSCE3, and OSEE certifications. Follow him on X @spaceraccoonsec and learn about infosec and white hat hacking…
OffSec Versus: Revolutionizing Cybersecurity Training Through Live-Fire Collaboration
Did you know that 95% of cybersecurity breaches are caused by human error? Traditional training methods often fail to address this critical factor, leaving organizations exposed. OffSec Versus, part of the Enterprise Cyber Range, is designed to change that. It’s…
Behind Enemy Lines: Understanding the Threat of the XZ Backdoor
The following is an excerpt from our new module on the recent XZ Utils backdoor, CVE-2024-3094. On Mar 29, 2024, at 12:00PM ET, Andres Freund posted on the Openwall mailing list about a backdoor he discovered in the XZ…
Soft Skills for Cybersecurity Leaders: CISO’s Perspective
The emphasis on technical skills and knowledge in cybersecurity has always been present. However, as the field becomes increasingly complex and intertwined with every facet of business operations, the spotlight has shifted to the indispensable role soft skills hold in…
Transform Your Cybersecurity Training with OffSec’s Cyber Ranges
In 2024, the cybersecurity landscape is bleak, with 62% of organizations acknowledging a pressing need for enhanced cybersecurity skills amidst growing digital threats. This statistic underscores the urgent demand for comprehensive training in modern cybersecurity practices. In response to this…
Importance of report writing for pen testers
Pentesters are well known for their technical skill sets, they simulate cyber attacks on computer systems, networks, or applications in a controlled environment. And, their primary goal is to identify vulnerabilities and weaknesses to assess the security posture of a…
The Cybersecurity Skills Gap: Time to Step Up with OffSec’s Red Teaming and IoT Learning Paths
The cybersecurity landscape is indeed challenged by a significant skills gap, with reports highlighting the critical shortage of professionals equipped to handle escalating cyber threats. The 2023 Global Cybersecurity Skills Gap Report from Fortinet underscores the urgency of this issue,…
Starting 2024 strong – The largest launch of security training from OffSec
Strong cybersecurity relies on an understanding of the importance of security throughout the entire organization. OffSec is committed to delivering security training to offensive, defensive, development and IT teams that can best protect organizations. In the first 10 weeks of…
Cybersecurity training aligned with the MITRE ATT&CK framework
The MITRE ATT&CK framework was developed in 2013 as a knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is a foundation for specific threat models and methodologies in the private sector, government, and…
Cloud security training: Build secure cloud systems
The cloud’s potential is undeniable – but securing it remains a daunting challenge. A recent SC Magazine survey revealed a troubling statistic: one in four companies cite a critical cloud security skills gap. This gap leaves organizations vulnerable, as attackers…
The Essential Soft Skills for Cybersecurity Leaders
Learn about the essential role of soft skills in enhancing the effectiveness and resilience of cybersecurity leaders amidst evolving cyber threats. The post The Essential Soft Skills for Cybersecurity Leaders appeared first on OffSec. This article has been indexed from…
How to Leverage AI as a Cybersecurity Professional
Mixed sentiment surrounds the application of AI in cybersecurity. Join us for an examination of where AI fits into our cybersecurity toolkits. The post How to Leverage AI as a Cybersecurity Professional appeared first on OffSec. This article has been…