As a stock market investor you have two primary ways of making money. The first is through capital appreciation, this is where you buy a stock at a certain price, and over time the stock goes up in value. For example, if you buy one share of apple for $100…

Introduction OWASP stands for the open web application security project and it’s an online community that creates free content on securing web applications. One of their most famous projects is the OWASP top 10, which is a list of the top 10 web applications vulnerabilities that they have found through their…

Introduction For part two in our series on the Executive Order (EO) 14028 this article focuses on the minimum testing standards for software vendors or developers. Software vulnerabilities are extremely common in commercial applications with as much as 76% of applications having at least one security flaw. With most businesses and…

The National Institute of Standards and Technology (NIST) under Executive Order (EO) 14028 has launched an initiative to improve the United States Cybersecurity on May 12th, 2021. As part of this initiative, NIST is publishing its definition of the term critical software, which is software that is essential to running…

NIST stands for the National Institute of Standards and Technology. They were founded in 1901 and are now a part of the US Department of Defense (DoD). NIST is well known for providing standards on all sorts of technologies and they are one of the leaders when it comes to…

Continuing with our series on initial access techniques, this blog post is going to be focusing on credential access. When we talk about credentials this means things like usernames, passwords, PINs, and any other piece of authentication material you would use to login to an account. When attackers use credential…

In a penetration test the first stage of exploitation is getting initial access, this means gaining an entry point into the company’s network or application. This step is essential for a hacker to successfully hack into the company and can be done in many different ways. As the owner of…

What is application security and why is it critical Application security also known as AppSec is the process of securing your company’s software applications so that critical data within those applications are protected from external threats. Application security occurs throughout every phase of the software development life cycle (SDLC). It begins in the preparation phase and continues all the…

Home Staging for Real Estate within the Greater Toronto Area (GTA) The real estate market in the Greater Toronto Area(GTA) is a very lucrative market. Toronto has a huge number of condos and apartment buildings, much like any big city such as New York and Los Angeles. …