N0va Phishkit: Defending Against AiTM Phishing
N0va's AiTM phishing kit proxies live authentication sessions to defeat MFA. Learn how it works and the practical steps to detect, block, and respond.
Dominion Cyber
Cybersecurity Articles & Insights
Practical security guides, threat deep-dives, and hands-on how-tos for defenders, engineers, and the security-curious.
Zero to Patch: A Practical Patch Management Checklist
A practical, step-by-step patch management checklist for small and medium teams: inventory, prioritize, test, automate, and verify to reduce vulnerability exposure and speed remediation.
Beyond CVSS: Contextual Vulnerability Prioritization
Beyond CVSS: Contextual Vulnerability Prioritization Introduction CVSS is a useful baseline for understanding vulnerability severity, but it’s only part of the story. True prioritization needs context: exploit availability, asset criticality,…
Working From Home: Essential Security Tips for All Remote Workers
In today’s interconnected world, remote work has become a norm for many professionals. While it offers numerous benefits such as flexibility and improved work-life balance, it also comes with its…
Port Scanning with Python, Bash, and PowerShell
Network scanning is a fundamental process in cybersecurity, allowing security professionals to identify open ports, services, and potential vulnerabilities within a network. It is an essential step in both defensive…
Set Up a Successful Bug Bounty Team
In today’s digital age, cybersecurity is more crucial than ever. A bug bounty program is an innovative approach where organizations invite ethical hackers to identify and report security vulnerabilities in…
Enhancing DevOps Security: Strategies for Securing CI/CD Pipelines
Enhancing DevOps Security: Strategies for Securing CI/CD Pipelines Introduction DevOps has revolutionized the software development process, enabling organizations to deliver high-quality software at a faster pace. However, with the increasing…
Step-by-Step Guide to Installing and Configuring Velociraptor for Digital Forensics and Incident Response
Introduction A how-to guide for installing and configuring Velociraptor, a tool used in digital forensics and incident response (DFIR), can be quite technical. Here’s a step-by-step guide to help you…
Understanding DevSecOps: An In-Depth Guide to Integrating Security in DevSecOps Practices
Integrating Security into DevOps: The Critical Role of DevSecOps Key Takeaways: Understanding DevSecOps: Merging development, security, and operations for enhanced cybersecurity. Benefits of DevSecOps: Streamlined processes, improved security, and accelerated…
A Deep Dive Into APT34 (OilRig): Discovering Iranian Hackers
Introduction In today’s digitally interconnected world, understanding the dynamics of cybersecurity threats is crucial. Among these threats, Advanced Persistent Threat 34 (APT34), also known as OilRig, stands out as a…