Published in Dark Roast Security·PinnedMember-onlyWhy You Need to Delete Your TikTok AccountEverything you need to know about the app that knows everything about you. — As someone who has lost hours of her life scrolling through Instagram Reels, I get it. You don’t want to give up the app that has you cracking up at night or entertaining you during long car rides. But what if I told you using TikTok can lead to the…Cybersecurity7 min readCybersecurity7 min read
Published in Dark Roast Security·PinnedMember-only7 Security Frameworks Every InfoSec Professional Should KnowA look at the common frameworks and standards that shape Information Security programs. — Five years ago I was a junior, going on senior, in college, and had just landed my first job in the tech field. …Cybersecurity9 min readCybersecurity9 min read
Published in Dark Roast Security·PinnedMember-onlyUnderstanding the Information Security IndustrySecOps, Incident Response, Vulnerability Management, Risk Analysis…where do I start? — The information security industry is very large and there are many different career paths to be considered. Googling “jobs in information security” likely results in something like this:Cybersecurity7 min readCybersecurity7 min read
Published in Dark Roast Security·PinnedMember-onlyIs the CISSP Certification Worth It?Reflecting on the CISSP exam and the excitement two years later when I officially became certified. — I took the CISSP exam back in November of 2019, so you can say it’s been quite a long journey. …Cybersecurity8 min readCybersecurity8 min read
Published in Code Like A Girl·PinnedMember-onlyWhy Is There a Lack of Women in Cyber?An analysis of the gender gap in cybersecurity and tech careers alike. — The fact that there are so few women in the cybersecurity industry isn’t news to anyone. This has been an issue for years and years but has become more of a popular topic in parallel with the rise in popularity of the profession. One would think that as cybersecurity becomes…Women In Tech10 min readWomen In Tech10 min read
Published in Dark Roast Security·6 days agoMember-onlyCyberattack Against DraftKings, the Delivery of Qbot & a Google Chrome Zero-DayDark Roast Intelligence | November 28, 2022 — Welcome to this week’s edition of Dark Roast Intelligence. In this article, you’ll find overviews of a recent cyberattack on a sports betting organization, how threat actors are using a Windows zero-day vulnerability to deliver Qbot malware, and the latest vulnerability in Google Chrome. DraftKings Falls Victim to Credential Stuffing Attack On November 19th, many DraftKings customers…Dark Roast6 min readDark Roast6 min read
Published in Dark Roast Security·Nov 21Member-onlyAmazon RDS Data Exposure, Breach of a Federal Network & the Rise of DTrack MalwareDark Roast Intelligence | November 21, 2022 — Welcome to this week’s edition of Dark Roast Intelligence. In this article, you’ll find summaries of recent cyber events, overviews of trending malware variants and vulnerabilities, and key takeaways for those who wish to action on this information within their organizations. Amazon Relational Database: Sensitive Data Exposure On November 16, 2022, security researchers at Mitiga, a…Threat Intelligence6 min readThreat Intelligence6 min read
Published in Dark Roast Security·Nov 15Member-onlyIntroducing Dark Roast IntelligenceThe newest section of Dark Roast Security. — Dark Roast Security readers, Before I get into the purpose of this article, I want to thank you for your support over the last two years. If you would have told me back then that this blog would have upwards of 25,000 minutes read on average over three months time…Dark Roast5 min readDark Roast5 min read
Published in Dark Roast Security·Nov 10Member-onlyLight Roast 117: Intro to MFA FatigueWhat It Is and How to Avoid It. — This article was originally published on Built In. Multifactor authentication, or MFA, is a mechanism used to secure user accounts. Unsurprisingly, however, malicious actors have found ways to bypass it, making the technology merely a small obstacle for many attackers. Although many methods can bypass MFA, a technique called MFA…Light Roast6 min readLight Roast6 min read
Published in Dark Roast Security·Oct 24Member-onlyThere’s a New PhaaS Platform in Town: CaffeineAn overview of the latest Phishing-as-a-Service platform and how it differs from others. — Earlier in the month, security professionals across the globe began seeing references to Caffeine, and, although we would’ve liked to see it be nothing but a new Starbucks order trend, that wasn’t the case. …Cybersecurity7 min readCybersecurity7 min read
