Skip to content

Blog

Working from Home? 5 Steps to Secure Your Home Network

Introduction With a large amount of confidential and/or proprietary information residing on and flowing through a...

Implementing a Fine-grained Password Policy for Domain Admins

Introduction With ever more integration of applications and systems into Active Directory, hardening the security of a...

Unauthenticated RCE on all GNU/Linux system – Should you be concerned?

Introduction On September 26th an Italian security researcher released details regarding an unauthenticated remote...

iRedAdmin Multiple Vulnerabilities – CVE-2024-47227

TL;DR CSA identified multiple vulnerabilities within iRedAdmin <= 2.5 which are tracked under CVE-2024-47227. iRedAdmin...

Exploiting Microsoft Kernel Applocker Driver (CVE-2024-38041)

Overview In recent July Patch Tuesday Microsoft patched a vulnerability in the Microsoft Kernel driver appid.sys, which...

Why Red Teaming Should be an Essential Pillar of your Organization’s Cybersecurity Strategy

The financial and reputational damage caused by a cyberattack can be devastating for governments and organizations....

DORA: The Digital Operational Resilience Act

What is DORA? The Digital Operational Resilience Act is a European framework that establishes a uniform approach...

How CSA Empowers Organizations in Transitioning to PCI DSS Version 4 Compliance

It’s time for your organization to take action and transition to PCI DSS v4.0 Compliance. The Payment Card Industry...

Microsoft announces solution to detect suspicious processes running on hidden desktops

Overview With remote desktop protocol (RDP) compromises on the rise, Microsoft Defender for Endpoint has introduced a...

CSA are members of the Armed Forces Covenant

We commit to uphold the Armed Forces Covenant and support the Armed Forces Community. We recognise the contribution...

Cyber Siege: The NHS Data Breach and Its Ripple Effects on Patient Care

Once more, we are in the midst of a cyber ransomware attack. Today's target is Synnovis, an NHS blood testing provider...

Cyber Threat Briefing: Implementing Ransomware Controls

In recent months ransomware attacks have undoubtedly picked up pace as well as impact. There have been high-profile...

Cybersecurity’s lights and shadows of e-vote

Electronic voting or e-vote is the process of casting a vote electronically from a computer phone or tablet.

Direct Memory Access Attacks: An easy way to hack into memory, bypass logon screens and ignore device encryption

Have you ever come across a laptop, server or desktop computer that has Full Device Encryption (FDE) and protected by a...

Threat Hunting Report: GoldPickaxe

Executive Summary The purpose of this report is to document the current form and methodologies used by the GoldFactory...

The Vital Role of Incident Response Testing in Organizations’ Security

Do you take your security seriously? In this blog, you’ll learn why incident response testing is vital to your...

The Benefits of Combining your ISMS Program with a Penetration Testing Cycle

What is an ISMS program? The NCSC defines penetration testing as “A method for gaining assurance in the security of an...

Vulnerability Management Program: What Makes it Good and What Does Success Look Like?

Cybercrime isn’t going anywhere, and its impact continues to have devastating consequences for individuals and...

Threat Hunting Report: Volt Typhoon

Executive Summary The purpose of this report is to document the current form and methodologies used by the Volt Typhoon...

PCI DSS v4.0 – Where are we now?

The long-awaited latest iteration of the Payment Card Industry (PCI) Data Security Standard (DSS) is here! What is PCI...

FluidOne and its Cyber Security Associates division (CSA) acquire SureCloud Cyber Services

London, UK – 13th March 2024 - FluidOne, the market-leading provider of Connected Cloud Solutions, announced today that...