Skip to main content

Posts

Showing posts from April, 2023

SQL injection: Basics - Tip for Developers Part 1/

  In many forums, and articles available on the internet you always find some articles about what called "dorks" which is a method used by attackers to identify the sql injection possibility on your sql app. Tip for Developers , after the setup of the Anti-DDOS procedures you should secure your code by some basics stuff if you see that something can be possible from the given example. Often using sql operate to a database system: Back-up procedures and the use of secure hardware are as important as comprehensive protection measures against external access, "So-called SQL injections", on the other hand, represent a great danger especially for classic relational database models and the information implemented there. What is an SQL injection? The term SQL injection refers to the exploitation of a security flaw in relational database systems that refer to the SQL language. The attacker uses data entered by the user on the database interface which is not s

Ransomware Prevention - Checklist 04/2023

  The authorities have always recommended not to give up & pay a ransom, “you may encourage attackers to target other organizations”, and there is no guarantee that stolen files will be recovered, so prevention is a best Tool , here is some checklists you must check in 2023 when you manage your work flow make sure you are using the right procedures. - Use Advanced Threat Intelligence - Implement Continuous Monitoring of Systems - Use Behavioral Analysis - Use 'Software-Defined' Perimeter - Use Zero-Trust Architecture - Security Orchestration & Automation Response - Implementing Browser Isolation or Virtual Browser Solutions - Spam Filters/Email Content Filtering - Implementing DNS Security - Use Security Information and Event Management systems Always keep monitoring & logs / backup procedures ON. WhiteHat Alliance Source : Discover The White Hat Alliance on Reddit https://www.reddit.com/r/White_Hat_Alliance/comments/12f7ey3/ransomware_prevention_chec