A security misconfiguration is a setting left wrong, not a software bug. Here is how they happen, the ten most common types, and how to find and fix them.
Category:
Blog & Articles
-
-
What a penetration test involves for an accountancy practice, what it should cover, how often to run one and how to pick a tester.
-
Cross site scripting lets attackers run their own code in your visitors’ browsers. Here are the three types, what the damage looks like and how to fix it.
-
What penetration testing means for a UK solicitors’ practice, what the SRA expects, what a test should cover and how to get value from the report.
-
A ransomware readiness assessment checks whether you could stop, contain and recover from an attack. Here is what it covers and the questions to ask first.
-
UK insurers increasingly ask for evidence of penetration testing before they will quote or pay out on cyber cover. Here is what they actually require and how to get ready …
-
MFA blocks the vast majority of account takeovers, but attackers now have working playbooks against weaker forms of it. Here is how MFA works, how it gets bypassed, and a …
-
Fixing what a pen test found is only half the job. Here’s how to prioritise remediation, and why retesting is what actually proves the fix worked.
-
Phishing simulation testing shows exactly who clicks and who reports, but NCSC and UK GDPR both set limits on how to run it fairly. Here is how the process works.
-
A buyer’s checklist for vetting a mobile app penetration testing quote, covering what should be in scope, what questions to ask, and what a useful report looks like.