SecureTeam

How Poor Library Hygiene Compromises your Application Security

Modern software development makes extensive use of open-source libraries that save development time and money. However, 79% of developers fail to keep those libraries up to date leaving their code vulnerable to newly discovered flaws and vulnerabilities. A new report from testing firm Veracode reveals some worrying trends that Security Managers should discuss with their […]

How Poor Library Hygiene Compromises your Application Security Read More »

What is Cyber Supply Chain Risk Management?

Articles, Infrastructure / Ian Reynolds

Recent high-profile security incidents, such as the compromises at SolarWinds and CodeCov and the vulnerabilities in Microsoft Exchange Server, have drawn attention to the risks posed by the software we invite into the heart of our networks and often trust implicitly. The processes and procedures for identifying and mitigating the risks posed by these third-party

What is Cyber Supply Chain Risk Management? Read More »

Browsers block more ports to prevent NAT Slipstream attacks

News, Tools / Ian Reynolds

Web browsers are adding more TCP ports to their block lists in an attempt to prevent exploitation of NAT Slipstream attacks. NAT Slipstreaming is an attack which tricks the NAT router into allowing external traffic through the NAT firewall to target any internal network device by abusing protocols such as SIP or H.323 where this

Browsers block more ports to prevent NAT Slipstream attacks Read More »

What is a dependency confusion attack?

News / Ian Reynolds

A new whitepaper from Microsoft highlights the risks of software supply chain attacks for organisations that pull package dependencies from public repositories like npm, RubyGems and PIP. A dependency confusion attack or supply chain substitution attack occurs when a software installer script is tricked into pulling a malicious code file from a public repository instead

What is a dependency confusion attack? Read More »

software development

How Poor Library Hygiene Compromises your Application Security

What is Cyber Supply Chain Risk Management?

Browsers block more ports to prevent NAT Slipstream attacks

What is a dependency confusion attack?

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch