Security programmes often look great on paper. But, post implementation, have you confirmed that: You’ve chosen the right measures? You’ve implemented them effectively? As your risks change with time, your defences remain effective? Security or penetration testing can provide valuable insights. DORA: digital operational resilience testing ‘Digital operational resilience testing’ is a DORA (Digital Operational Resilience Act) pillar –…
Category: penetration testing
AWS, cyber security, Global Security News, penetration testing, security testing
What AWS and Cloudflare Outages Teach Us About Cloud Configuration Risks
On Tuesday, 18 November, a Cloudflare outage took a significant part of the Internet offline, including major sites, enterprise platforms and public-facing services. Ironically, even Downdetector – the platform that provides real-time information about service outages – apparently went down for a time. This wasn’t an isolated incident, either: an AWS (Amazon Web Services) outage…
Global Security News, Guest blog, MedusaLocker, penetration testing, Ransomware, vulnerability
The MedusaLocker ransomware gang is hiring penetration testers
MedusaLocker, the ransomware-as-a-service group that has been active since 2019 is openly recruiting for penetration testers to help it compromise more businesses. Read more in my article on the Fortra blog.
cyber security, Expert insight, Exploits, Global Security News, penetration testing, security testing
What are the Different Types of Penetration Test?
And how do you choose the right one for your needs? Penetration testing (also known as ‘pen testing’ or ‘ethical hacking’) offers a vital tool for identifying gaps and opportunities to strengthen your security programme. We asked our head of security testing, James Pickard, to explain the different types of test. In this interview Is…
cyber security, Expert insight, Exploits, Global Security News, penetration testing, security testing
What are the Different Types of Penetration Test?
And how do you choose the right one for your needs? Penetration testing (also known as ‘pen testing’ or ‘ethical hacking’) offers a vital tool for identifying gaps and opportunities to strengthen your security programme. We asked our head of security testing, James Pickard, to explain the different types of test. In this interview Is…
cyber security, Expert insight, Exploits, Global Security News, penetration testing, security testing
What are the Different Types of Penetration Test?
And how do you choose the right one for your needs? Penetration testing (also known as ‘pen testing’ or ‘ethical hacking’) offers a vital tool for identifying gaps and opportunities to strengthen your security programme. We asked our head of security testing, James Pickard, to explain the different types of test. In this interview Is…
cyber security, Exploits, Global Security News, penetration testing
Penetration Testing for SaaS Providers: Building Trust and Security
In today’s rapidly evolving digital landscape, SaaS (software as a service) providers face increasing scrutiny regarding the security of their platforms. And with increasing numbers of customers entrusting sensitive data to Cloud-based solutions, penetration testing has become an essential component of a comprehensive security strategy. In a recent webinar, Penetration Testing for SaaS Providers, our…
cyber security, Exploits, Global Security News, penetration testing
Penetration Testing for SaaS Providers: Building Trust and Security
In today’s rapidly evolving digital landscape, SaaS (software as a service) providers face increasing scrutiny regarding the security of their platforms. And with increasing numbers of customers entrusting sensitive data to Cloud-based solutions, penetration testing has become an essential component of a comprehensive security strategy. In a recent webinar, Penetration Testing for SaaS Providers, our…
cyber security, Exploits, Global Security News, penetration testing
Penetration Testing for SaaS Providers: Building Trust and Security
In today’s rapidly evolving digital landscape, SaaS (software as a service) providers face increasing scrutiny regarding the security of their platforms. And with increasing numbers of customers entrusting sensitive data to Cloud-based solutions, penetration testing has become an essential component of a comprehensive security strategy. In a recent webinar, Penetration Testing for SaaS Providers, our…
cyber security, Exploits, Global Security News, penetration testing
Penetration Testing for SaaS Providers: Building Trust and Security
In today’s rapidly evolving digital landscape, SaaS (software as a service) providers face increasing scrutiny regarding the security of their platforms. And with increasing numbers of customers entrusting sensitive data to Cloud-based solutions, penetration testing has become an essential component of a comprehensive security strategy. In a recent webinar, Penetration Testing for SaaS Providers, our…
cyber security, Exploits, GDPR, Global Security News, penetration testing, security testing
Lessons Learned from the Legal Aid Agency Data Breach
The MoJ (Ministry of Justice) has disclosed that the LAA (Legal Aid Agency) suffered a data breach last month, in which criminals accessed data relating to hundreds of thousands of people, dating back to 2010. Exfiltrated data may have included “contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history,…
cyber security, Exploits, GDPR, Global Security News, penetration testing, security testing
Lessons Learned from the Legal Aid Agency Data Breach
The MoJ (Ministry of Justice) has disclosed that the LAA (Legal Aid Agency) suffered a data breach last month, in which criminals accessed data relating to hundreds of thousands of people, dating back to 2010. Exfiltrated data may have included “contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history,…
cyber security, Exploits, GDPR, Global Security News, penetration testing, security testing
Lessons Learned from the Legal Aid Agency Data Breach
The MoJ (Ministry of Justice) has disclosed that the LAA (Legal Aid Agency) suffered a data breach last month, in which criminals accessed data relating to hundreds of thousands of people, dating back to 2010. Exfiltrated data may have included “contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history,…
cyber security, Exploits, GDPR, Global Security News, penetration testing, security testing
Lessons Learned from the Legal Aid Agency Data Breach
The MoJ (Ministry of Justice) has disclosed that the LAA (Legal Aid Agency) suffered a data breach last month, in which criminals accessed data relating to hundreds of thousands of people, dating back to 2010. Exfiltrated data may have included “contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history,…
cyber security, Global Security News, penetration testing, security testing
The Co-Op, M&S, Harrods… You? Mitigating the Risk of Ransomware
The recent DragonForce cyber attacks on the Co-Op, Marks & Spencer and Harrods show the threat of ransomware is as prevalent as ever – and, despite warnings from the attackers that they’re “putting UK retailers on the Blacklist”, it’s obviously not just the retail sector that needs to be concerned. For all organisations, it can…
cyber security, Global Security News, penetration testing, security testing
The Co-Op, M&S, Harrods… You? Mitigating the Risk of Ransomware
The recent DragonForce cyber attacks on the Co-Op, Marks & Spencer and Harrods show the threat of ransomware is as prevalent as ever – and, despite warnings from the attackers that they’re “putting UK retailers on the Blacklist”, it’s obviously not just the retail sector that needs to be concerned. For all organisations, it can…
cyber security, Global Security News, penetration testing, security testing
The Co-Op, M&S, Harrods… You? Mitigating the Risk of Ransomware
The recent DragonForce cyber attacks on the Co-Op, Marks & Spencer and Harrods show the threat of ransomware is as prevalent as ever – and, despite warnings from the attackers that they’re “putting UK retailers on the Blacklist”, it’s obviously not just the retail sector that needs to be concerned. For all organisations, it can…
cyber security, Global Security News, penetration testing, security testing
The Co-Op, M&S, Harrods… You? Mitigating the Risk of Ransomware
The recent DragonForce cyber attacks on the Co-Op, Marks & Spencer and Harrods show the threat of ransomware is as prevalent as ever – and, despite warnings from the attackers that they’re “putting UK retailers on the Blacklist”, it’s obviously not just the retail sector that needs to be concerned. For all organisations, it can…
Application Security, Global Security News, penetration testing, Security Bloggers Network, Web application Penetration Testing Tools, web application pentesting
The Web application Penetration Testing Tools That Actually Works
If your website handles any kind of user data, chances are it’s being watched. And not just by customers. Hackers, too. That’s why web application penetration testing tools is no… The post The Web application Penetration Testing Tools That Actually Works appeared first on Strobes Security. The post The Web application Penetration Testing Tools That…
Application Security, Global Security News, penetration testing, Security Bloggers Network, Web application Penetration Testing Tools, web application pentesting
The Web application Penetration Testing Tools That Actually Works
If your website handles any kind of user data, chances are it’s being watched. And not just by customers. Hackers, too. That’s why web application penetration testing tools is no… The post The Web application Penetration Testing Tools That Actually Works appeared first on Strobes Security. The post The Web application Penetration Testing Tools That…
AI, Application Security, CISO Suite, cyber security, cyber threat, Cybersecurity, Data Privacy, Data Security, Digital Privacy, Episodes, Global Security News, Governance, Risk & Compliance, Information Security, infosec, IT Security Collaboration, Managing Cybersecurity Data, penetration testing, PlexTrac, Podcast, Podcasts, privacy, purple teaming, Red Teaming, Risk Management, risk scoring, Security, security best practices, Security Bloggers Network, Social Engineering, Technology, Threat Intelligence, vulnerability remediation, Weekly Edition
From Spreadsheets to Solutions: How PlexTrac Enhances Security Workflows
In this special episode of the Shared Security Podcast, join Tom Eston and Dan DeCloss, CTO and founder of PlexTrac, as they discuss the challenges of data overload in vulnerability remediation. Discover how PlexTrac addresses these issues by integrating various data sources, providing customized risk scoring, and enhancing remediation workflows. The episode offers an insightful…
AI, Application Security, CISO Suite, cyber security, cyber threat, Cybersecurity, Data Privacy, Data Security, Digital Privacy, Episodes, Global Security News, Governance, Risk & Compliance, Information Security, infosec, IT Security Collaboration, Managing Cybersecurity Data, penetration testing, PlexTrac, Podcast, Podcasts, privacy, purple teaming, Red Teaming, Risk Management, risk scoring, Security, security best practices, Security Bloggers Network, Social Engineering, Technology, Threat Intelligence, vulnerability remediation, Weekly Edition
Tackling Data Overload: Strategies for Effective Vulnerability Remediation
In part one of our three part series with PlexTrac, we address the challenges of data overload in vulnerability remediation. Tom hosts Dahvid Schloss, co-founder and course creator at Emulated Criminals, and Dan DeCloss, CTO and founder of PlexTrac. They share their expertise on the key data and workflow hurdles that security teams face today.…
Application Security, Cybersecurity, cybersecurity training, Exploits, Global Security News, Offensive Security, OSCP, penetration testing, Security Bloggers Network
Getting the Most Value Out of the OSCP: The PEN-200 Course
In this second post of a five-part series, I provide advice on how to best utilize the PEN-200 course material for a successful career in ethical hacking. Disclaimer: All opinions expressed in this article are solely my own. I have reviewed the content to ensure compliance with OffSec’s copyright policies and agreements. I have not been…
Cloud Security, Global Security News, penetration testing, Penetration Testing Tools, Security
Top 8 Penetration Testing Tools to Enhance Your Security
Penetration testing is vital in keeping an organization’s digital assets secure. Here are the top picks among the latest pen testing tools and software.
cyber security, Expert insight, Exploits, Global Security News, penetration testing, security testing
Breaking In to Keep Hackers Out: The Essential Work of Penetration Testers
The penetration test process and types of penetration test It may sound counterintuitive, but organisations actually pay people to break into their networks. The reason is simple: to catch a thief, you must think like a thief. Organisations hire ethical hackers – aka ‘penetration testers’ or ‘pen testers’ – to identify weaknesses in their defences…
cyber security, Expert insight, Exploits, Global Security News, penetration testing, security testing
Breaking In to Keep Hackers Out: The Essential Work of Penetration Testers
The penetration test process and types of penetration test It may sound counterintuitive, but organisations actually pay people to break into their networks. The reason is simple: to catch a thief, you must think like a thief. Organisations hire ethical hackers – aka ‘penetration testers’ or ‘pen testers’ – to identify weaknesses in their defences…
cyber security, Expert insight, Exploits, Global Security News, penetration testing, security testing
Breaking In to Keep Hackers Out: The Essential Work of Penetration Testers
The penetration test process and types of penetration test It may sound counterintuitive, but organisations actually pay people to break into their networks. The reason is simple: to catch a thief, you must think like a thief. Organisations hire ethical hackers – aka ‘penetration testers’ or ‘pen testers’ – to identify weaknesses in their defences…
cyber security, Expert insight, Exploits, Global Security News, penetration testing, security testing
Breaking In to Keep Hackers Out: The Essential Work of Penetration Testers
The penetration test process and types of penetration test It may sound counterintuitive, but organisations actually pay people to break into their networks. The reason is simple: to catch a thief, you must think like a thief. Organisations hire ethical hackers – aka ‘penetration testers’ or ‘pen testers’ – to identify weaknesses in their defences…