Security operations Archives

Exploring the OWASP Software Assurance Maturity Model (SAMM)

Articles, Information Assurance, Web Applications / Ian Reynolds

The OWASP Software Assurance Maturity Model (SAMM) was first introduced in 2009 by Pravir Chandra as a practical guide to developing secure software. Since its inception, SAMM has evolved to keep pace with emerging technologies, threats, and industry standards. The most recent iteration of SAMM (Version 2.0), refines its structure and expands its applicability to […]

Exploring the OWASP Software Assurance Maturity Model (SAMM) Read More »

The Current and Future Trends in Cyber Crime

Articles, Information Assurance / Ian Reynolds

The release of the 2022 Falcon OverWatch Threat Hunting Report from CrowdStrike has revealed the recent trends in cyber crime from July 2021 to June 2022. According to the report, the number of cyber crime campaigns has increased by 50% with financial crime accounting for 43% of all attacks. According to CrowdStrike’s analysis cyber crime

The Current and Future Trends in Cyber Crime Read More »

Microsoft Delays Default Ban of Macros

News, Vulnerabilities / Ian Reynolds

Microsoft is undoing a decision it made earlier this year to disable macros by default in Microsoft Office applications. In February an update was announced that Microsoft was introducing a new way in which VBA macros would be handled. This change is now being rolled back by Microsoft until further notice. This affects the Microsoft

Microsoft Delays Default Ban of Macros Read More »

10 Common Security Weaknesses and How To Defend Against Them

Articles, Information Assurance / Ian Reynolds

The mistakes we make and how to fix them – a new report co-authored by the NCSC reveals the 10 most common security weaknesses exploited by hackers. A joint security alert from the National Cyber Security Centre UK (NCSC-UK) was released earlier this month, co-authored by cybersecurity bodies from the USA, Canada, New Zealand, and

10 Common Security Weaknesses and How To Defend Against Them Read More »

Top 15 Most Exploited Vulnerabilities for 2021

Articles, Cyber Essentials, Information Assurance / Ian Reynolds

The 15 most targeted security vulnerabilities of 2021 have just been published in a joint advisory from the NCSC. These are the main ways hackers are attacking businesses around the world. Cybersecurity authorities across multiple nations co-authored this publication to provide insight into the exploited vulnerabilities and offer mitigation strategies to deal with the identified

Top 15 Most Exploited Vulnerabilities for 2021 Read More »

How to improve your supply chain security

Articles, Information Assurance / Ian Reynolds

The security of every business is dependent on the security of its suppliers. From the PCs on peoples desks, to the servers in cloud, the firewalls in the office and the experts that connect to your network to tune your database or manage your servers. A security failing at any of these suppliers could allow

How to improve your supply chain security Read More »

NCSC Updates Guidance on Russian cyber threat

News / Ian Reynolds

The NCSC has issued updated guidance on the evolving threat from Russian state actors and cyber criminals due to the ongoing war in Ukraine. The joint Cybersecurity Advisory (CSA) from the cybersecurity authorities in the UK, USA, Australia, Canada and New Zealand warns that: “Evolving intelligence indicates that the Russian government is exploring options for

NCSC Updates Guidance on Russian cyber threat Read More »

Stolen Nvidia certs uses to sign malware

News, Vulnerabilities / Ian Reynolds

When the LAPSUS$ ransomware group broke into the network of Nvidia, the data they stole included two code signing certificates which are now being used to sign malware to help it bypass security defences. In order to prove that an application or driver is genuine and really does come from the named developer, a digital

Stolen Nvidia certs uses to sign malware Read More »

What does the Russian invasion of Ukraine mean for UK cyber security?

Articles, Information Assurance / Ian Reynolds

Russia’s deployment of troops into Ukraine is the physical side of a war that has been raging for some time in cyber space. How might your UK business get caught in the crossfire of this cyber war? On the 15th and 16th of February, the Ukranian banking sector was subject to a distributed denial of

What does the Russian invasion of Ukraine mean for UK cyber security? Read More »

Microsoft upgrades security of Office and Windows

News, Tools, Vulnerabilities / Ian Reynolds

Microsoft has announced several steps they are taking to improve the default security of Office document and Windows systems by protecting them against malicious macros and LOL-bins attacks. Microsoft Office to block macros for all Internet documents Microsoft is changing the default behaviour of Office applications that can contain VBA macros. Currently when a

Microsoft upgrades security of Office and Windows Read More »

Security operations

Exploring the OWASP Software Assurance Maturity Model (SAMM)

The Current and Future Trends in Cyber Crime

Microsoft Delays Default Ban of Macros

10 Common Security Weaknesses and How To Defend Against Them

Top 15 Most Exploited Vulnerabilities for 2021

How to improve your supply chain security

NCSC Updates Guidance on Russian cyber threat

Stolen Nvidia certs uses to sign malware

What does the Russian invasion of Ukraine mean for UK cyber security?

Microsoft upgrades security of Office and Windows

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch