Wireless@SG is a nation-wide free WiFi service in Singapore. To get Internet access from a Wireless@SG hotspot, a user has to register their phone number, an...

The early days in the cyberspace used to be rather safe when compared to the increasingly hostile worldwide wild west, where various hostile governments, cri...

Tim (not his real name) routinely spends some of his free time prowling the web for exotic security tools and exploits. Shortly, he stumbled upon a new explo...

Some of the common questions, following up from my previous article, was “How can I efficiently scale my simulated phishing operation up?” or “Is there an ea...

Really simple things can be hugely influential and famous. Like SQL injection, buffer overflow and other classic types of software vulnerabilities — the gran...

After a recent simulated phishing exercise, we received a number of questions on how the emails were sent and how my team managed to craft such realistic-loo...

An individual’s lack of awareness and ability to identify social engineering attacks can lead to a security breach or financial loss. Hence, the human is of...

Although my Diploma in Infocomm Security Management with the Singapore Polytechnic laid a good foundation to get me started in cybersecurity, I really only h...

3 Sep 2016 — Div0 Crew Emil Tan shared insights on cybersecurity in the context of Total Defence to the Top 100 N.E.mation! 11 participating teams. N.E.matio...

Background According to CVE, Spring Framework has security restrictions as one serialise an object, but does not have any security restrictions as it deseria...

Note: This is an add-on post on top of my Kippo write-up. Kippo2MySQL Kippo2MySQL is a simple piece of script that extracts some very basic stats from Kippo’...

Quite a lot of people whom I’m following on Twitter were talking about the release of MazeRunner Community Edition, so I decided to check it out. I haven’t h...

While the search engine giants did join forces under national interests, it did face more and more difficult and largely unsolved questions regarding relatio...

In the world of cybersecurity and imposed concept of security, 2 mundane vulnerabilities have been looming around for years. Nobody seemed to care much about...

Update Note Cowrie – a (relatively) new SSH honeypot – has been my obsession for the week. I took a quick first glimpse at Cowrie, and I thought before I pro...

Cowrie – written by Michel Oosterhof – is a medium interaction SSH honeypot designed to log brute force attacks and shell interactions performed by the attac...

Under the umbrella of cybersecurity, it has become more and more common and accepted to discuss national security and indeed push forward the concept of nati...

One of the most thrilling developments in the privacy and security world is the ongoing drafting of the UK Investigatory Bill. That will regulate much of wha...

Public spaces are dangerous, are they not? At least many cyber training programmes declare that coffee shops are the most dangerous when it comes to online s...

At the end of March 2015, the Ministry of Commerce of the People’s Republic of China announced the publication of a manifesto to put new efforts into enforci...