We do a lot of pen tests and red teaming at Red Siege . Part of reconnaissance includes gathering a list of employees from a target organiza...

Google just announced that beginning in July 2018, with the release of Chrome 68, web pages loaded without HTTPS will be marked as “not secure”. More than half of web visitors will soon see this warning when visiting unencrypted HTTP sites.

UK’s Information Commissioner’s Office (ICO) website was caught serving the CoinHive crypto miner to its users and it wasn't the only website affected. What could have been done?

1 points and 0 comments so far on reddit

2 points and 0 comments so far on reddit

Hey baby, nice little “abc123” ya got there.

The operation to disrupt the PyeongChang Winter Olympic Games was more extensive than originally reported. The Olympic Destroyer malware should be treated with a high level of concern.

A team of researchers from NVIDIA and Princeton University found new ways to exploit the Spectre and Meltdown CPU vulnerabilities.

Business email compromise emails or also known as the CEO email scams impact basically every organization. You are at risk of getting one and there is nothing you can do to prevent one from being delivered. This episode goes into what this scam is, why people…

Common Vulnerabilities and Exposures (CVE®) is a list of entries — each containing an identification number, a denoscription, and at least one public reference — for publicly known cybersecurity vulnerabilities. Assigned by CVE Numbering Authorities (CNAs)…

They could "conduct undetected espionage."

What sites have you found work well to check the reputation of an IP address? Any big difference between free and paid sites?

92% of IT pros concerned about risks of using public Wi-Fi on company-owned devices

The UK government has vowed to make Russia pay for the NotPetya ransomware attack that crippled critical infrastructure across Europe last year. The defence secretary Gavin Williamson accused the Russian government of “ripping up the rulebook” by “undermining…

Trojan Droppers Exploiting Symbolic Link Files Malicious actors routinely attempt to confuse recipients of messages with obscure file extensions to load malicious files on the victims machine. For …

Here we go again

2 points and 0 comments so far on reddit

Introduction At NVISO Labs, we are constantly trying to find better ways of understanding the data our analysts are looking at. This ranges from our SOC analysts looking at millions of collected da…

If your friend was put in charge of measuring cyber risk at their company, what advice would you give them? We created this Guide to advance the risk management conversation amongst cyber professionals. Many would claim they are able to pinpoint technical…

The number of reported vulnerabilities in Microsoft software has mounted from 325 in 2013 to 685 last year, a rise of 111 percent, according to new research.Moreover, there has also been a 54 perc