Innovative Minds - On Point - One Group  

3 Post(s) By: Matt Westfall

03
Apr
2018

CloudFront Hijacking

By:

I recently spent some time exploring the issue of CloudFront domain hijacking. This is not a new issue but I think it has gone mostly unnoticed for a few reasons: CloudFront’s default behavior is not intuitive. Some standard DNS configurations can mislead users into thinking that their vulnerable domains are configured correctly.   In the

Read More

22
Apr
2015

Are You Under Attack? Exploring the Home Network Perimeter

By:

Discovering remote hosts used to involve dialing every number in a telephone exchange until you got a carrier tone. Finding one was pretty exciting. Today that process is largely automated, with fewer network explorers stopping to admire the welcome banners. Modern network scans are largely opportunistic – attackers are constantly probing the address space for

Read More

25
Nov
2013

Training for Application Security

By:

Many working in the information security field have seen companies make an increasing commitment to software security. The job offerings associated with these efforts suggest that organizations are primarily focused on testing. Training providers have mirrored this trend by expanding courses that focus on penetration testing and offensive security. Even the public sector has gotten

Read More