Trusted Cyber Security Experts
25+ Years Industry Experience
Ethical, Professional & Pragmatic
Securing the Buy-In: Building Cyber Awareness at Board Level
One of the biggest challenges that organisation’s face when applying cybersecurity measures effectively is ensuring that senior board members understand the real-world risks that are present. In many cases, there
Exploring the OWASP Software Assurance Maturity Model (SAMM)
The OWASP Software Assurance Maturity Model (SAMM) was first introduced in 2009 by Pravir Chandra as a practical guide to developing secure software. Since its inception, SAMM has evolved to
Avoiding Business Email Compromise (BEC) Attacks in Microsoft 365
Business Email Compromise (BEC) is a sophisticated form of cybercrime where attackers impersonate trusted individuals or organisations to manipulate victims into transferring money, sharing sensitive information, or taking other actions
Strela Stealer Malware – From Invoice Phishing to Thread Hijacking
In recent months, a notable wave of cyber-attacks has swept across Europe, orchestrated by the cybercriminal group known as Hive0145. This group, also referred to by various threat intelligence entities
Cyber Essentials – What’s Changed in the Latest Willow Question Set?
Recently, IASME has introduced their latest Willow question set for the NCSC Cyber Essentials Self-Assessment Certification, which will replace the current (Montpelier) questions on the 28th April, 2025. The updates
MITRE’s Top 25 Most Dangerous CWEs for 2023
A list of the top 25 most dangerous common weakness enumeration (CWE) software weaknesses for 2023 has been compiled by MITRE to inform people of the “most common and impactful”
Managing Supply Chain Attacks with Cyber Security
Supply chain security is an important but often overlooked step of cyber security risk management. Incidents that affect your suppliers can have as much of a damaging impact on your
New Botnet Campaign uses Critical Ruckus Flaw
Researchers at Fortinet have identified a new botnet campaign that utilises a Ruckus remote code execution (RCE) vulnerability to install malware and perform distributed denial of service (DDoS) attacks. This
EvilExtractor Sold as ‘Educational Tool’ is Info Stealer
EvilExtractor is an info stealer malware tool designed for data theft attacks on Windows operating systems. Researchers at Fortinet’s threat research group FortiGuard Labs have published an analysis of this
Vice Society Use Automated Data Exfiltration
The threat actor known as Vice Society, a ransomware gang known for their attacks against the education sector in the USA, has recently been found to use a custom Microsoft
Open-Source Phishing Kit Used in AiTM Attacks
Adversary in the middle (AiTM) is a phishing attack technique in which a proxy server is deployed between the victim and the website they are attempting to access. This allows
LastPass Hack Due to Unpatched Software
LastPass suffered two large-scale and public data breaches last year, the first in August to steal source code, and the second in November where partially encrypted password vault data and
Subscribe to our monthly newsletter today
If you’d like to stay up-to-date with the latest cyber security news and articles from our technical team, you can sign up to our monthly newsletter.
We hate spam as much as you do, so we promise not to bombard you with emails. We’ll send you a single, curated email each month that contains all of our cyber security news and articles for that month.