Rebecca Sutton

OSINT is the practice of turning public information into security insight. Here is how attackers and testers use it, what it reveals about your business and how to shrink your …

The Synnovis attack hit London hospitals through one supplier. Here are five questions that show whether your own suppliers could take you down.

What penetration testing for councils covers, how CHECK, PSN health checks and the Cyber Assessment Framework fit together, and how to scope and buy a test.

Purple teaming puts your attackers and defenders in the same live exercise. Here is how it works, how it differs from a red team engagement, and when it is worth …

WPA3 and a strong password aren’t proof your Wi-Fi is secure. Here’s what wireless penetration testing actually checks, and why the gaps are quiet ones.

Following the same path a real attacker takes through Active Directory, from one compromised account to full domain control.

Attackers reached refrigeration controllers at French supermarkets and warmed fridges overnight. Here is what is known, what is not, and what to check in your own premises.

A brute force attack guesses passwords until one works. Here is how the main variants differ, how to spot them, and the controls that actually stop them.

The latest North Korean IT worker case needed no exploit, only a convincing interview. Why hiring is now part of your security perimeter.

What penetration testing for healthcare involves, whether NHS suppliers must do it, how to scope a test around clinical systems and what to do with the report.