Showing 97–108 of 121 articles
Page 9 of 11
What the padlock in the address bar means
HTTPS helps protect the connection to the address you opened. It does not establish that the organization behind that address is honest or that a payment request is legitimate.
Read the visual guide
How to start using a password manager
A password manager helps you use a different strong password for each service. The first task is protecting the vault and making sure you can recover access to it.
Read the visual guide
What to do in the first hour after you click a bad link
What happened after the click matters. Simply opening a page, entering a password, approving a request, and running a file call for different responses.
Read the visual guide
What to do when a text says it is from your bank
A message that looks like it came from your bank may be trying to lead you elsewhere. Open the bank’s usual app or use a number you already trust to check the claim.
Read the visual guide
Brute force or password spraying? Read the sign-in pattern
Repeated guesses against one account and a few guesses across many accounts create different patterns. Review events across identities and time, rather than looking only for one noisy username.
Read the visual guide
SSRF explained: when a server fetches a destination it should not
A server-side request feature can reach resources that the user cannot directly access. Review allowed destinations and the authority available to the fetching service.
Read the visual guide
Detection engineering: turn a threat idea into an actionable alert
An alert needs more than a matching indicator. Connect the behavior you want to detect to available telemetry, a tested rule, an owner, and a clear response.
Read the visual guide
Practical zero trust: verify access to each important service
For a small team, zero trust starts with explicit access decisions around important services. Identity, device context, least privilege, and review matter more than adopting a label.
Read the visual guide
Plugin and package risk: check the dependency you actually deploy
A useful dependency brings another project’s code into your environment. Review its source, maintenance, permissions, version, and update path before making it part of a critical service.
Read the visual guide
DDoS attacks: distinguish bandwidth floods from application overload
A service can fail because the network link is saturated or because expensive application requests consume its resources. The appropriate mitigation depends on where capacity is exhausted.
Read the visual guide
Incident logs: collect the evidence that answers your questions
A useful log source answers a specific incident question. Start with identities, affected services, and the actions you need to reconstruct, then preserve the records with their time context.
Read the visual guide
Living-off-the-land activity: spot misuse of legitimate tools
A familiar administration tool can be part of an intrusion. Judge its execution by the account, parent process, command context, destination, and business reason.
Read the visual guide