The warning signs that separate a genuine penetration test from a scan with a report template, and how to choose a penetration testing company that won’t disappoint.
-
-
A second maximum-severity flaw in Kemp LoadMaster in two years shows why load balancers need the same patch discipline as public web servers.
-
Commissioning PCI DSS penetration testing? What Requirement 11.4 actually obliges you to buy, and the questions to ask before you sign a quote.
-
Ransomware via search results is now a documented attack route. A Bing search for IT software led to full network encryption in 44 hours. Here is why your download policy …
-
StegoAd infected 2.6 million users through official browser stores using steganography to hide payloads in images. Here is what UK businesses should audit and lock down.
-
Many organisations receive pen test reports they cannot act on. This guide explains what a thorough penetration test report looks like and the red flags that indicate a poor one.
-
Russian intelligence services exploited Signal’s linked device feature and fake support texts to access thousands of accounts. Here is the exact technique and what to change in your settings today.
-
Russian intelligence is stealing Signal backup recovery keys to read encrypted message histories, without breaking the encryption. Here’s what that means for how UK businesses use secure messaging.
-
Adblock for YouTube has a dormant script injection capability that its owners could activate with one server change. Here is what it means for your organisation and what to do …
-
Operation Endgame disrupted Amadey and StealC infrastructure on a significant scale. But with no arrests, the operators survive intact. Here is what that means for UK businesses building their security …