https://www.naushad.co.uk/ Naushad Saboor — founder of QuantumHandshake™ and AiiDIS™, building post-quantum trust infrastructure for regulated systems. Two decades in offensive security, SOC leadership and digital forensics. en-GB https://www.naushad.co.uk/udemy/ https://www.naushad.co.uk/udemy/ Wed, 04 Nov 2020 17:20:24 +0000 https://www.naushad.co.uk/a-majority-of-attacks-successfully-infiltrate-enterprise-environments-without-detection/ https://www.naushad.co.uk/a-majority-of-attacks-successfully-infiltrate-enterprise-environments-without-detection/ Sat, 09 May 2020 12:46:21 +0000 FireEye  released  the  Mandiant® Security Effectiveness Report   2020  which reveals data about how well organizations are protecting themselves against cyber threats and the overall effectiveness of their security infrastructure. The report summarizes the results of thousands of tests performed by experts from the Mandiant Security Validation (previously known as Verodin) team. The tests consist https://www.naushad.co.uk/malicious-raspberry-pi-in-the-network-closet/ https://www.naushad.co.uk/malicious-raspberry-pi-in-the-network-closet/ Fri, 18 Jan 2019 16:13:55 +0000 Last week I discovered two Mysterious devices in our server room an image attached. Message from my co-worker I asked him to unplug it, store it in a safe location, take photos of all parts and to make an image from the SD card (since I mostly work remote). I have worked on many Raspberry Pi projects and I felt confident I could find out what it does. At this point nobody thought it was going to b https://www.naushad.co.uk/threat-intelligence/ https://www.naushad.co.uk/threat-intelligence/ Fri, 04 Jan 2019 19:07:51 +0000 NOTE: This document incomplete, still DRAFT Mode… The intelligence, in terms of security, is a collection of security-related information which when analysed provides meaningful foresight. The threat intelligence likewise is an analysis of information collected about the cyber threat so that it provides reliable and structured information about cybersecurity threats. Thus, threat intelligence form https://www.naushad.co.uk/application-security-mine-map/ https://www.naushad.co.uk/application-security-mine-map/ Sat, 23 Jun 2018 12:29:23 +0000 Application security encompasses measures taken to improve the security of an application often by finding, fixing and preventing security vulnerabilities. From the risk management strategic point of view, the mitigation of application security risks is not a one time exercise; rather it is an ongoing activity that requires paying close attention to emerging threats and planning ahead for the depl https://www.naushad.co.uk/darkweb-deepweb-threat-intelligence/ https://www.naushad.co.uk/darkweb-deepweb-threat-intelligence/ Sun, 29 Apr 2018 16:18:49 +0000 Many of your company’s most valuable assets are at risk to criminal activities carried out on the Dark Web – and you don’t even know it. Turning a blind eye to this will impact your: Brand and reputation Customer loyalty Intellectual Property Legal defenses Sales IT baselines Cybersecurity strategy And much more! Monitoring the Dark Web Working out whether your data is being sold on the dark web i https://www.naushad.co.uk/canadas-first-cybersecurity-law-bill-c-59-secure-knowledge-management/ https://www.naushad.co.uk/canadas-first-cybersecurity-law-bill-c-59-secure-knowledge-management/ Wed, 25 Apr 2018 11:38:25 +0000 Canada’s First Cybersecurity Law | BILL C-59 – Secure Knowledge Management SUMMARY Part 1 enacts the National Security and Intelligence Review Agency Act, which establishes the National Security and Intelligence Review Agency and sets out its composition, mandate and powers. It repeals the provisions of the Canadian Security Intelligence Service Actestablishing the Security Intelligence Review Com https://www.naushad.co.uk/top-100-hacking-books/ https://www.naushad.co.uk/top-100-hacking-books/ Mon, 23 Apr 2018 11:06:17 +0000 A hundred books on offensive security, reverse engineering, network defence and forensics — assembled in 2018 from the titles that came up most often when practitioners were asked what they actually learned from. This is a reading list, nothing more. There are no downloads here. Every one of these is in print or sold as an ebook by its publisher, and that is where they should come from — the peopl https://www.naushad.co.uk/database-of-abuse-ip-address-for-sysadmins/ https://www.naushad.co.uk/database-of-abuse-ip-address-for-sysadmins/ Mon, 26 Mar 2018 12:34:35 +0000 Here is my personal collection of IP addresses engaging in abusive behavior on the networks, for webmasters and sysadmins to block IP addresses engaging in abusive behavior on their networks. BLOCK ALL AbuseIP’s 93.115.86.8 93.115.86.4 185.112.157.135 172.105.231.26 40.69.62.87 144.217.161.119 92.222.207.228 2001:4ba0:cafe:9f::1 62.141.39.47 2001:470:d:6dd:11::beef 64.27.17.140 51.15.81.222 208.11 https://www.naushad.co.uk/first-fix-the-plumbing-whats-broken-in-cyberspace-and-how-to-fix-it/ https://www.naushad.co.uk/first-fix-the-plumbing-whats-broken-in-cyberspace-and-how-to-fix-it/ Sun, 25 Mar 2018 14:44:22 +0000 Live webinar: http://goo.gl/VVKxS3 Way back in 2000 it was common practice to spend considerable time configuring and tinkering the plumbing of what we today call cyberspace. The technology was embryonic, immature and often hours were spent ensuring nothing broke and that the business operations carried on smoothly. Today, those flaky technologies are settled and stable. – AI and Machine Learning https://www.naushad.co.uk/creating-an-ip-based-rate-limiter/ https://www.naushad.co.uk/creating-an-ip-based-rate-limiter/ Mon, 12 Mar 2018 16:21:38 +0000 Basic rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset. A brute-force protection middleware for express routes that rate-limits incoming requests, increasing the delay with each request in a fibonacci-like sequence. Here is the full control functions; store An instance of ExpressBrute.MemoryStore or some other ExpressBrute https://www.naushad.co.uk/test/ https://www.naushad.co.uk/test/ Sun, 11 Feb 2018 22:29:38 +0000 Mitigate-DDoS https://www.naushad.co.uk/gdpr-audit-checklist/ https://www.naushad.co.uk/gdpr-audit-checklist/ Wed, 07 Feb 2018 13:51:35 +0000 The first steps towards GDPR compliance are understanding your obligations, what your current processes are and identifying any gaps. Undertaking a data protection audit is essential to achieving compliance. This checklist is intended to provide a starting point, rather than providing an exhaustive audit. GDPR Audit Checklist https://www.naushad.co.uk/cyberlympic/ https://www.naushad.co.uk/cyberlympic/ Mon, 30 Oct 2017 17:25:28 +0000 Today, the best hackers in the world competed in the Global CyberLympics final during Cyber Security Week in The Hague. This is an international online hacking competition aimed at improving the level of national cyber security and strengthening international cooperation. The Dutch Team Hack.ERS came out as the glorious number one. The Global CyberLympics consists of a series of ‘ethical hacking’ https://www.naushad.co.uk/autoblock-ips-that-do-a-dictionary-attack-on-your-ssh-server/ https://www.naushad.co.uk/autoblock-ips-that-do-a-dictionary-attack-on-your-ssh-server/ Thu, 05 Oct 2017 19:41:25 +0000 https://www.naushad.co.uk/google-safe-browsing/ https://www.naushad.co.uk/google-safe-browsing/ Tue, 26 Sep 2017 19:46:51 +0000 Why is Ubuntu desktop download (17.04) redirecting me to a supposedly known malicious domain/mirror? Google Safe Browsing recently detected malware on mirror.scalabledns.com . Websites that are normally safe are sometimes infected with malware. Read More: https://transparencyreport.google.com/safe-browsing/search?url=http:%2F%2Fmirror.scalabledns.com%2Fubuntu-releases%2F17.04%2Fubuntu-17.04-deskto https://www.naushad.co.uk/blocking-tor-proxy-users-to-your-linux-server/ https://www.naushad.co.uk/blocking-tor-proxy-users-to-your-linux-server/ Sun, 10 Sep 2017 19:59:04 +0000 https://www.naushad.co.uk/gdpr-will-require-28000-dpos/ https://www.naushad.co.uk/gdpr-will-require-28000-dpos/ Thu, 24 Aug 2017 22:19:22 +0000 [pdfviewer width=”600px” height=”849px” beta=”true/false”]https://www.naushad.co.uk/pdf/library/EUR_0616_ezine_19pp.pdf[/pdfviewer] https://www.naushad.co.uk/cciso-table-of-contents/ https://www.naushad.co.uk/cciso-table-of-contents/ Mon, 21 Aug 2017 22:03:17 +0000 [pdfviewer width=”600px” height=”849px” beta=”true/false”]https://www.naushad.co.uk/pdf/library/CCISO-Table-of-Contents.pdf[/pdfviewer] https://www.naushad.co.uk/nmap/ https://www.naushad.co.uk/nmap/ Mon, 29 May 2017 16:30:43 +0000 Nmap is a great tool for discovering the network services and ports that your server is exposing to the network. In this guide, we will discuss some basic information, network scanning and advanced techniques covers how to use one of the most powerful and flexible network scanners available. 1 NMAP Flags……………………………………………………….. 2 Common Nmap Uses………………………………………………….. 3 Scan Types………………………………………………… https://www.naushad.co.uk/gchq-certified-cyber-incident-planning-response/ https://www.naushad.co.uk/gchq-certified-cyber-incident-planning-response/ Sun, 28 May 2017 14:08:05 +0000 The recent WannaCry ransomware attack not only affected computers and billboards but actually impacted human life on a mass scale as hundreds of operations had to be delayed or cancelled. Organisations continue to suffer from external and internal attacks yet Cyber Incident Management is an afterthought in most companies. Is your organisation prepared to respond to a data breach? Questions you may https://www.naushad.co.uk/stop-blaming-russia-china-for-all-cyber-attacks/ https://www.naushad.co.uk/stop-blaming-russia-china-for-all-cyber-attacks/ Sun, 28 May 2017 13:31:52 +0000 Cyber-attacks can originate from anywhere, but there appears to be an unabated trend of pointing the finger on either “sophisticated attackers” or, more blatantly, naming and blaming nation-states like Russia, China and now North Korea (alright, maybe even Iran). The truth about attribution (who is the attacker) is often overlooked for something more dramatic, especially in situations where sensit https://www.naushad.co.uk/nsa-wasnt-creating-these-exploits-to-act-as-proof-of-concepts/ https://www.naushad.co.uk/nsa-wasnt-creating-these-exploits-to-act-as-proof-of-concepts/ Sun, 16 Apr 2017 10:08:10 +0000 In particular, one thing that perfectly ties Snowden’s latest documents with this toolkit is a note of tracking an exploit through a 16-character string (ace02468bdf13579) which happens to be found in the code of one exploit from the collection, called SECONDDATE. Previously leaked NSA documents painted a picture of such exploits infecting millions of PCs, so it’s clear that an exploit like SECOND https://www.naushad.co.uk/most-2fa-solutions/ https://www.naushad.co.uk/most-2fa-solutions/ Thu, 02 Mar 2017 19:56:18 +0000 Everyone knows two-factor authentication right? or do you just know how to use it? Something you know and something you own is a phrase we can all recite but very few actually understand two-factor authentication and its true benefits. How it works, why two solutions are not alike or what to look for in a true secure solution are just some of the conversation topics covered in this webinar. Full V https://www.naushad.co.uk/phd-in-cybersecurity/ https://www.naushad.co.uk/phd-in-cybersecurity/ Mon, 30 Jan 2017 11:02:29 +0000 Research Interests: Computer and Network Security, Authentication protocols and Cryptography, VoIP Security and QoS, Secure protocol(s) implementation and testing for real-time traffic, Trust and security issues in Cloud environments.