PenTest Reports That Bring Value to your Customer
Penetration Test Reports must bring value to your clients. There are key elements every proper pentest report must include.
Articles
News
419 articles, newest first.
The Basics of IT Security Audit
An IT security audit is an evaluation of the security of a company's information systems by measuring how well they conform to a set of established and agreed-upon criteria.
Famous mobile apps are spying on you!
During the last few weeks there have been several occasions where famous and widely used mobile applications have been caught on spying on your device's
US Secret Service: Rise in hacks of managed service providers (MSPs)
The US Secret Service sent out a security alert last month to the US private sector and government organizations warning about an increase in hacks of managed service providers (MSPs).
Compliance Does Not Equal Security
Do not assume that being compliant with a security framework your organization is secure. You need to understand how compliance differs from security.
Hackers extorted $1.14m from University of California, San Francisco
A leading medical-research institution working on a cure for Covid-19 has admitted it paid hackers a $1.14m (£910,000) ransom after a covert negotiation
Indian government hack exposes 80,000 coronavirus patients’ data
Indian hackers claim to have accessed more than 80,000 coronavirus patients' healthcare records that were insecurely stored on government servers.
Fileless Malware Are NOT New But Are Still Dangerous
File-less malware is an advanced threat that can use legitimate software to compromise systems to steal information.
South African bank to replace 12m cards after employees stole the master key
The Sunday Times of South Africa, which revealed the story, said the incident took place in December 2018 when someone printed the bank's master key on a
Google faces $5 billion lawsuit for tracking people in incognito mode
Google faces a lawsuit that accuses the company of invading people's privacy and tracking internet use even when browsers are set to "private" mode.
How to be Anonymous Online
Tools and techniques for the protection of your identity online. Be as anonymous as possible. Protect your personal data.
How to Detect and Prevent Crypto Mining in your Environment
Cryptojacking has become increasingly popular and you have to be aware of the protection measures you must take to protect your environment from it.
Malware Opens RDP Ports for Future Access
The Sarwent malware is a lesser-known backdoor trojan that has been around since 2018. In a recent campaign it received two critical updates.
Microsoft Confirms Serious Vulnerability
Microsoft has confirmed the risk that "an attacker with physical access to a system can use Thunderspy to read and copy data even from systems
Cloud Threat Report 2020
The "Cloud Threat and Security Report 2020" which identifies the key risks and challenges that organizations face as they implement and maintain cloud solutions
Hackers Threaten to Reveal “Dirty Laundry” on Donald Trump
Mr. Trump, if you want to stay president, poke a sharp stick at the guys, otherwise, you may forget this ambition forever. And to you voters, we can let you know that after such a publication, you certainly don't want to see him as president. The deadline is one week.
“Thunderspy” Attack Impacts Millions of Apple, Windows, Linux Machines
A researcher discovered a security flaw in Intel's Thunderbolt ports, common to many laptops produced before 2019.
Penetration Testing: Pre-Engagement Interactions
There are many important actions you should focus on prior to diving into a penetration test. PenTests are not just point-and-shoot activities.