The recent ASOS incident has got me thinking about a problem I’ve seen repeatedly over the years in penetration testing and security assurance. We often define “critical” systems based on what customers can see. Payment page? Critical. Login page? Critical. Checkout process? Critical. So that’s what gets tested. The problem is that modern businesses are
Stop Testing What Customers Can See Read More »
As the season of spooks and spectres approaches, we find ourselves knee-deep in the eerie embrace of Halloween. While our thoughts turn to carved pumpkins, ghastly costumes, and haunted houses, it’s also a good time to spare a thought for something a bit less tangible but equally haunting: the world of cyber threats. Just as
Cyber Scares: Protecting Your Digital Haunt On Halloween Read More »
The world today is characterized by an ever-growing reliance on digital technologies and interconnected systems. However, the same era is also marked by an alarming increase in the frequency and intensity of natural disasters. From hurricanes and wildfires to floods and earthquakes, these events can have profound and far-reaching consequences. One often overlooked consequence is
The Perfect Storm: How Natural Disasters Impact Cybersecurity Read More »
ISSA-UK Annual Summer Conference – Pitch on the Ship The bustling city of London is renowned for its dynamic tech scene, where innovation and collaboration thrive like nowhere else. It’s a place where startups and established companies converge, sharing their ideas, connecting with industry leaders, and forging the future of technology. Amidst the array of
As summer arrives, many of us are excited about the prospect of holidays, outdoor activities, and relaxation. However, amidst the sun and fun, it’s still important to think about cybersecurity. In this blog, we’ll explore essential tips and best practices to help you stay cyber-secure during the summer months and protect your digital world. Be
Staying Cyber Secure During the Summer: Protecting Your Digital World Read More »
What is a phishing attack? A phishing attack is a type of cyber attack that involves sending fraudulent messages to individuals in order to trick them into revealing sensitive information. These messages can take many forms, such as emails, text messages, or social media messages, and they often appear to come from a trusted source,
Businesses are experiencing an increase in the number of sophisticated and sustained threats carried out by organised criminals in the UK. This also includes the possibility of opportunistic attackers and potentially disgruntled ex-employees who are determined to ruin a company’s reputation by using your current employees to infiltrate your business systems. The attempt to obtain
Social Engineering Read More »
In House Security Training In-house security training is often a knee-jerk, last-minute moment for most companies, and course development is typically crammed into a CISO’s workload, which is already sitting at 110%. It’s not that the content isn’t good, or the trainer is inexperienced, it’s just that companies don’t really have the time to develop,
Cyber training is useless without staff empowerment Read More »
As you may have heard, there was recently a change in the requirements for Cyber Essentials (CE) and Cyber Essentials PLUS (CE+) on the 24 th of January 2022. This has been described as the “biggest overhaul of the scheme’s technical controls since its launch”. These changes were implemented to reflect modern businesses and their
Cyber Essentials and Cyber Essentials Plus Read More »
