Why human error is the top threat to cyber security

Employee error still reigns as the number one threat for data breaches even with modern day security solutions. The numbers don’t lie, with anywhere from 70 – 80% of all breaches being attributed to staff. Yet many organisations do not have a mature information & cyber security awareness programme in place. As we mentioned in […]

Spear Phishing – Why you should “Fear the Spear”

SPEAR PHISHING, WHALING, BUSINESS EMAIL COMPROMISE AND CEO FRAUD IS ON THE RISE AND COSTING COMPANIES BILLIONS Have you heard of the acronym: FUD? It stands for ‘Fear, Uncertainty & Doubt.’ Unfortunately, the Information Security industry has a bit of a bad rep for selling their services off the back of FUD: “Don’t want the […]

Google’s Quantum Supremacy – Anyone else feeling underwhelmed?

I noticed on the news the other day that there is (yet another) Terminator film out: Dark Fate, where Sarah Connor is back, now looking like a cross-between The Golden Girls meets Super Gran. …And of course, good old Arnie has come good with his famous promise: “I’ll be back” although perhaps it would be […]

Top challenges for the CISO in 2020

an image of a ciso talking to a member of staff

Being a CISO in today’s rapidly changing and evolving technological landscape is no easy task. Add to that the constant and increasing threat of attack by rapidly more sophisticated and devious malicious actors and you begin to understand the talk of sleepless nights, high attrition and incredibly high-stress rates attributed to the profession. Like fighting […]

Red Team Testing – not just a Penetration Test in a posh hat

Penetration Testing is not Red Team Testing

The term Red Team Testing has been around for a while, its origins are from the military, wherein simple terms, team A (the Blue Team) would be tasked with defending a specified zone and team B (the Red Team) would be tasked with attacking it. Thus, highlighting deficiencies in both the Blue Team and Red […]

No, it won’t automatically make you GDPR compliant, but it will help…

If you’re about to embark on the journey to ISO 27001, or if you’ve achieved the certification and are now in the process of maintaining it, then the new privacy information management extension to ISO 27001 could be something you may want to consider. It was purposefully developed to address and assist organisations in meeting […]

The business case for penetration testing – Preaching to the unconverted:

demonstrating statistics

How do you communicate ROI on Penetration Testing to gain buy-in? Did you get your car insurance renewal quote in recently? Chances are it’s gone up and chances are you are wondering whether it’s worth it. For non-tech savvy finance folk and to be fair, some tech-savvy non-finance folk, you can understand why they might […]

You sank my YouTube Channel!

‘Massive’ YouTube content creator hack confirmed – 23 million influencers and creators could be affected. If you, like me have memories of just three TV channels, recording the Top 40 on your cassette player and of course the board game Battleship then the phrase social media influencer may have you scratching your head, set your teeth on edge or something in-between.  It turns out […]

IoT Home “security” cameras: Are you having a laugh!?

camera =/= secure, jeff bezos is peeking through the corner and there are floating Ring Security cameras

Here’s an easy experiment for you Go to Google, and type “Home Security Cameras” into the search window. At the top of the page you’ll be presented with paid for results of various WI-FI connected IP cameras. For the second part of this task take the first manufacturer, in my case it was the Amazon […]

The British Airways Data Breach “fine”

A fake news parody making fun of the clickbait around the BA and Marriott Group breach fines

Sometimes the truth grows wings and takes flight How UK media reported the ICO’s intention to fine BA & Marriott Hotels and a penetration tester’s view on what BA could of and should of done. Oh, and what’s happened so far with the fine that they actually did issue to Facebook On the 8th July, […]

Do NOT follow this link or you will be banned from the site!