Blog

The 2021 Data Breach Investigations report provides insights from the analysis of over 29,000 real world cyber security incidents from 2020 helping Security Managers track the evolving behaviour and tactics of threat actors. The Verizon Data Breach Investigations report has become a regular fixture on the annual cyber security calendar over the last 14 years.Read more

The number of ransomware attacks in the first 6 months of 2021 exceeded the total number for all of the previous year and it shows no sign of slowing down. According to a new report from SonicWall – the number of Ransomware attacks in the second quarter of 2021 is up 150% compared to 2020.Read more

The world has changed, and the CIS Controls have evolved to reflect those changes.  The increased use of cloud computing, remote working, virtualisation, and outsourcing have all redefined and blurred the edges of the corporate network.  The latest version 8 of the CIS Controls provides a practical framework for organisations of all sizes to identifyRead more

Early use of digital technology has been shown to improve language skills in young children, as well as helping to promote their creativity and social development. However, it’s not without risks. Threats to children online include cyberbullying and harassment, invasions of privacy, exposure to inappropriate content and dangerous sexual online activities.  You might be askingRead more

As security professionals our job is to safeguard the Confidentiality, Integrity and Availability of the information and assets placed in our care.  A Security Incident is anything that happens which places one or more of those aspects at risk.  This usually will be as the result of a malicious act such as an attempted networkRead more

Java is used by 90% of the Fortune 500 companies, is the second most popular programming language on the planet.  So why does Java prompt users to uninstall it? Remove Java when it is no longer needed All software contains bugs and vulnerabilities, so one method to limit the number of ways your computer canRead more

Web shell attacks have doubled over the last 6 months according to Microsoft’s Detection And Response Team.  But, what are Web Shell Attacks and how can you defend against them? In a recent blog post, Microsoft’s DART detailed the rise in Web Shell Attacks that have been uncovered in Windows Defender telemetry- growing from anRead more

HTML smuggling is a technique for bypassing perimeter security devices by generating malicious HTML behind the firewall – within the browser on the target endpoint. HTML Smuggling techniques sidestep traditional network security solutions such as email scanners, proxies and sandboxes by using the features of HTML5 and Javascript.  This is done by generating the malicious HTMLRead more

Network segmentation is a powerful and essential tool in the security manager’s arsenal that improves the security of computer networks and makes them easier to manage.  Network segmentation provides protection against attackers who manage to breach the perimeter defences by limiting their ability to move laterally within the network. It can also protect key systemsRead more

What is a Next Generation Firewall and how can it help keep your network secure? The phrase ‘next generation firewall’ is increasingly being used by security vendors to describe their network security products. However, the definition of precise capabilities required to call a firewall next generation (or not) are far from universally agreed. This articleRead more