Cyber Security

Computer security, hacking ethics, prevention & protection countermeasures and best practices against viruses, malwares, ransomwares, DDoS attacks & more.

CryptoLocker, Locky e altri Ransomware: come eliminarli dal sistema e recuperare i file infetti senza pagare il riscatto
Cyber Security / Spam and Scam Alert / Windows

Disable Windows Script Host (WSH) to block .VBS malware How to securely prevent .VBS files (VBScript) from being executed by disabling Windows Script Host in Windows 7, Windows 8 and Windows 10

- by Ryan - Leave a Comment

Windows Script Host (or WSH) (also known as Windows Scripting Host) is a scripting language shipped with all major Windows and Windows Server distributions since Windows 98. Scripts made with …

Disable Windows Script Host (WSH) to block .VBS malware How to securely prevent .VBS files (VBScript) from being executed by disabling Windows Script Host in Windows 7, Windows 8 and Windows 10 Read More
Permalink e URL semantiche su Wordpress con IIS
Coding / Cyber Security / PHP / Web

Yuzo Related Posts WordPress Plugin - Major Security Flaw A critical vulnerability in the code of the well-known WordPress plugin Yuzo Related Post resulted in many malicious XSS redirects to harmful web sites such as hellofromhony.org and silken.ru

- by Ryan - Leave a Comment

Definitely a bad week for Lenin Zapata, author of the well-known Yuzo Related Post plugin for WordPress. The plugin, installed on over 60,000 websites, was removed from the WordPress.org plug-in …

Yuzo Related Posts WordPress Plugin - Major Security Flaw A critical vulnerability in the code of the well-known WordPress plugin Yuzo Related Post resulted in many malicious XSS redirects to harmful web sites such as hellofromhony.org and silken.ru Read More
Ivacy VPN - Promozione Game Of Thrones - 20% di sconto fino al 30 Aprile 2019
Cyber Security / Servers & Services / Web

Ivacy VPN - Game Of Thrones Promo - 20% discount until April 30th 2019 20% discount on any Ivacy VPN subscription plan to celebrate the eighth season of the successful TV series inspired by the fantasy saga written by George R. R. Martin

- by Ryan - 2 Comments.

Ivacy's April 2019 marketing campaign is definitely original: the VPN provider took inspiration from the imminent launch of the eighth season of the TV series inspired by the fantasy saga …

Ivacy VPN - Game Of Thrones Promo - 20% discount until April 30th 2019 20% discount on any Ivacy VPN subscription plan to celebrate the eighth season of the successful TV series inspired by the fantasy saga written by George R. R. Martin Read More
EaseUS Data Recovery Wizard - In-Depth Review
Applications / Cyber Security / Software / Tools & Utilities / Windows

EaseUS Data Recovery Wizard - In-Depth Review An extensive test-drive of Data Recovery Wizard, the new deleted file recovery software suite from EaseUS

- by Ryan - Leave a Comment

No matter if you're a seasoned System Administrator, a IT expert or a PC enthusiast, you've most likely already stumbled upon a EaseUS product at least once: we're talking about …

EaseUS Data Recovery Wizard - In-Depth Review An extensive test-drive of Data Recovery Wizard, the new deleted file recovery software suite from EaseUS Read More
What is a VPN and why you should definitely get one and use it
Cyber Security / Servers & Services / Tools & Utilities / Web

What is a VPN and why you should definitely get one and use it A useful guide explaining what a Virtual Private Network actually is, how it works and how it can greatly improve your online security

- by Ryan - 4 Comments.

In a world overcrowded by hackers, malwares, ransomwares and other malicious software or parties trying to steal your personal data without you even knowing it, increasing your online security and …

What is a VPN and why you should definitely get one and use it A useful guide explaining what a Virtual Private Network actually is, how it works and how it can greatly improve your online security Read More
Encryption in-transit and Encryption at-rest - Definitions and Best Practices
Cyber Security / Privacy & Compliance / Servers & Services / Web

Encryption in-transit and Encryption at-rest - Definitions and Best Practices An extensive overview of the two main encryption methods available today: how they work and how we can use them to protect our personal data from unauthorized access

- by Ryan - 1 Comment

In the latest few years the world wide web has experienced an exponential growth of hackers, malwares, ransomwares and other malicious software or parties which is constantly trying to find …

Encryption in-transit and Encryption at-rest - Definitions and Best Practices An extensive overview of the two main encryption methods available today: how they work and how we can use them to protect our personal data from unauthorized access Read More
6 Disaster Recovery fails you should avoid
Cyber Security / Privacy & Compliance

6 Disaster Recovery fails you should avoid A list of some typical mistakes that could seriously hinder your Disaster Recovery plan and what you can do to prevent them

- by Duncan Kingori - Leave a Comment

A majority of organizations know too well that it is essential to have a disaster recovery plan in place. However, most companies have difficulties with the creation and execution of …

6 Disaster Recovery fails you should avoid A list of some typical mistakes that could seriously hinder your Disaster Recovery plan and what you can do to prevent them Read More
What are HTTP Security Headers and how to properly implement them in IIS, Apache and Nginx to secure your web site
Cyber Security / Servers & Services / Web

Expect-CT - A new HTTP Security Header to be aware of A new HTTP header that allows web host operators to instruct user agents to expect valid Signed Certificate Timestamps (SCTs) to be served on connections to these hosts.

- by Ryan - 10 Comments.

I'm writing this post as a follow-up of this article about HTTP Security Headers that I wrote a year ago to introduce a new kid on the block: its name …

Expect-CT - A new HTTP Security Header to be aware of A new HTTP header that allows web host operators to instruct user agents to expect valid Signed Certificate Timestamps (SCTs) to be served on connections to these hosts. Read More
How to stop (or prevent) massive login attempts to Remote Desktop RDP on Windows Server
Cyber Security / Servers & Services / Web / Windows

IIS - How to restrict a web site access to some IP addresses Brief tutorial explaining how to use the IP Address and Domain Name Restrictions IIS feature to allow or deny access to web sites, folders, and/or files

- by Ryan - Leave a Comment

In this post we'll deal with one of the most undervalued and semi-unknown features of Internet Information Services, better known as IIS, the web server shipped with most Windows client …

IIS - How to restrict a web site access to some IP addresses Brief tutorial explaining how to use the IP Address and Domain Name Restrictions IIS feature to allow or deny access to web sites, folders, and/or files Read More
2-Factor Authentication (2FA): cos'è, come funziona, perché utilizzarla
Cyber Security / Privacy & Compliance / Web

2-Factor Authentication (2FA): what it is, how it works and why you should use it A brief tutorial explaining what 2FA (two-factor authentication) and MFA (multi-factor authentication) actually are and why you should turn them on wherever you can to make your e-life more secure

- by Ryan - Leave a Comment

Two-factor authentication (2FA), also known as two-step verification or two-factor authentication, is a security tool whereby the user is required to provide two different authentication factors to verify their identity. …

2-Factor Authentication (2FA): what it is, how it works and why you should use it A brief tutorial explaining what 2FA (two-factor authentication) and MFA (multi-factor authentication) actually are and why you should turn them on wherever you can to make your e-life more secure Read More