--- title: blog description: Discover insights on cybersecurity trends, vulnerabilities, and innovations through expert articles covering topics from identity security to quantum readiness and emerging threats. --- [Skip to content](https://csacyber.com/blog/all#main-content) [![CSA Cyber - Cyber Security Solutions to Protect your People](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=300&height=108&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber - Cyber Security Solutions to Protect your People")](https://csacyber.com/) - Services - [Offensive Security Services](https://csacyber.com/offensive-security-services) - [Penetration Testing](https://csacyber.com/penetration-testing) - [Red Teaming and attack simulations](https://csacyber.com/offensive-security-services#red-teaming) - [Continuous testing](https://csacyber.com/offensive-security-services#continuous-assurance) - [Managed offensive security](https://csacyber.com/offensive-security-services#managed-offensive) - [Consultancy Services](https://csacyber.com/cyber-consultancy-services) - [Frameworks & assessments](https://csacyber.com/cyber-consultancy-services/frameworks-and-assessments) - [Data protection](https://csacyber.com/cyber-consultancy-services#data-protection) - [Virtual leadership](https://csacyber.com/cyber-consultancy-services#virtual-leadership) - [Technical security consulting](https://csacyber.com/cyber-consultancy-services#technical-consultancy) - [Governance, Risk & Compliance (GRC)](https://csacyber.com/cyber-consultancy-services/governance-risk-and-compliance-services) - [Extended Managed Security Services](https://csacyber.com/extended-managed-security-services) - [Microsoft Sentinel SIEM](https://csacyber.com/extended-managed-security-services#microsoft-sentinel) - [SOC services](https://csacyber.com/extended-managed-security-services#soc-services) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/extended-managed-security-services#cyber-helpdesk) - [Incident Response Services](https://csacyber.com/incident-response-services) - [Emergency Incident Response](https://csacyber.com/urgent/emergency-incident-response) - [Incident Response Retainer](https://csacyber.com/incident-response-services) - [Cyber Incident Readiness & Response Planning](https://csacyber.com/incident-response-services) - [Tabletop Exercises & Live-Range Engagements](https://csacyber.com/incident-response-services) - [Specialist Security Services](https://csacyber.com/specialist-services) - [AI Security](https://csacyber.com/cyber-services-for-ai) - [Operational Technology (OT)](https://csacyber.com/specialist-services#operational-technology) - [Cyber security for Private Equity](https://csacyber.com/specialist-services#mergers-and-acquisitions) - [Cyber training and education](https://csacyber.com/specialist-services#training-and-education) - [Virtual leadership](https://csacyber.com/specialist-services#leadership) - [Cyber Technologies](https://csacyber.com/cyber-technologies) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/cyber-technologies#sentinelone) - [AppGuard Endpoint & Server Zero Trust Protection](https://csacyber.com/cyber-technologies#appguard) - [Qualys Vulnerability Management as a Service (VMaaS)](https://csacyber.com/cyber-technologies#qualys-vmaas) - [Lookout Mobile Device Protection](https://csacyber.com/cyber-technologies#lookout) - [ThreatER DNS Protection](https://csacyber.com/cyber-technologies#threater-dns) - [Cyber Security Awareness & Training platform](https://csacyber.com/cyber-technologies#boxphish) - [About](https://csacyber.com/about-us) - [Careers](https://csacyber.com/careers) - [Certifications](https://csacyber.com/certifications-and-awards) - [Blog](https://csacyber.com/blog) - [Support Centre](https://csacyber.com/support) - Resources - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Partners](https://csacyber.com/partners) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) - [Contact](https://csacyber.com/contact-us) - Search Search Search # Blog - [All](https://csacyber.com/blog/all) - [Article](https://csacyber.com/blog/tag/article) - [Consultancy](https://csacyber.com/blog/tag/consultancy) - [Security Operations](https://csacyber.com/blog/tag/security-operations) - [News](https://csacyber.com/blog/tag/news) - [Penetration Testing](https://csacyber.com/blog/tag/penetration-testing) - [Threat Briefing](https://csacyber.com/blog/tag/threat-briefing) [![](https://csacyber.com/hubfs/20230510-N1005919-Edit1.jpg)](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 24, 2026 ### [FluidOne Group appoints Charly Davis as Managing Director of CSA Cyber to advance its security-first strategy](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) Experienced industry leader joins FluidOne to strengthen integrated cyber, IT and secure networking services as the... [Read more](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) [![](https://csacyber.com/hubfs/Untitled%20design.jpg)](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 20, 2026 ### [CSA Cyber and FluidOne named as suppliers on G-Cloud 15](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) CSA Cyber (CSA), part of the FluidOne Group, has been named as a supplier on Government Commercial Agency’s RM1557.15... [Read more](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) [![](https://csacyber.com/hubfs/Engineered%20to%20Endure%20Campaign%20Assets%20(2).png)](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 20, 2026 ### [Why organisations lose security visibility without realising it](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) Before an organisation can understand risk, maintain control or respond effectively to emerging issues, it needs a... [Read more](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) [![](https://csacyber.com/hubfs/NEW%20CSA%20Blog%20images%20(2026)%20(1).png)](https://csacyber.com/blog/the-interconnected-forces-driving-a-new-era-of-third-party-assurance) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 18, 2026 ### [Chain of effect: The interconnected forces driving a new era of third-party assurance](https://csacyber.com/blog/the-interconnected-forces-driving-a-new-era-of-third-party-assurance) Where does your supply chain really end? For many organisations, the answer is no longer obvious. 🔗 A supplier may... [Read more](https://csacyber.com/blog/the-interconnected-forces-driving-a-new-era-of-third-party-assurance) [![](https://csacyber.com/hubfs/Social%20engineering%20IMG%20(1).png)](https://csacyber.com/blog/the-evolution-of-social-engineering-in-2026) - [Jack Gilmore](https://csacyber.com/blog/author/jack-gilmore) - August 5, 2026 ### [The evolution of social engineering in 2026: How attackers are exploiting human trust](https://csacyber.com/blog/the-evolution-of-social-engineering-in-2026) For years, social engineering has been one of the most effective techniques in a threat actor's arsenal. Rather than... [Read more](https://csacyber.com/blog/the-evolution-of-social-engineering-in-2026) [![](https://csacyber.com/hubfs/WinSxS%20img%20%281%29.png)](https://csacyber.com/blog/winsxs-the-6000-binary-blind-spot-in-your-edr) - [Steve Velcev](https://csacyber.com/blog/author/steve-velcev) - July 30, 2026 ### [WinSxS: The 6,000-binary blind spot in your EDR](https://csacyber.com/blog/winsxs-the-6000-binary-blind-spot-in-your-edr) Every Windows 10 and 11 machine ships with thousands of Microsoft-signed executables in “C:\\Windows\\WinSxS” that can be... [Read more](https://csacyber.com/blog/winsxs-the-6000-binary-blind-spot-in-your-edr) [![](https://csacyber.com/hubfs/Cyber%20Pledge%20Image.png)](https://csacyber.com/blog/csa-cyber-signs-the-uks-cyber-resilience-pledge) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - July 21, 2026 ### [CSA Cyber signs the UK's Cyber Resilience Pledge: What it means and why it matters](https://csacyber.com/blog/csa-cyber-signs-the-uks-cyber-resilience-pledge) CSA Cyber has signed the UK Government's Cyber Resilience Pledge, joining the first wave of organisations supporting a... [Read more](https://csacyber.com/blog/csa-cyber-signs-the-uks-cyber-resilience-pledge) [![Responsive FileManager Version 9.14.0 Multiple Vulnerabilities – CVE-2026-3726](https://csacyber.com/hubfs/AI-Generated%20Media/Images/Security%20Alert%20File%20Management%20System%20Vulnerability%20Warning.png)](https://csacyber.com/blog/responsive-filemanager-version-9-14-0-multiple-vulnerabilities-cve-2026-37266) - [Julian Nguyen](https://csacyber.com/blog/author/julian-nguyen) - May 28, 2026 ### [Responsive FileManager Version 9.14.0 Multiple Vulnerabilities – CVE-2026-37266](https://csacyber.com/blog/responsive-filemanager-version-9-14-0-multiple-vulnerabilities-cve-2026-37266) TL;DR CSA Cyber identified a Local File Inclusion (LFI) and arbitrary file creation issue within Responsive FileManager... [Read more](https://csacyber.com/blog/responsive-filemanager-version-9-14-0-multiple-vulnerabilities-cve-2026-37266) [![Claude Mythos](https://csacyber.com/hubfs/Claude_FeaturedIMG2.jpg)](https://csacyber.com/blog/claude-mythos-the-fact-and-the-fiction) - [Arron Dowdeswell](https://csacyber.com/blog/author/arron-dowdeswell) - April 15, 2026 ### [Claude Mythos: The fact and the fiction](https://csacyber.com/blog/claude-mythos-the-fact-and-the-fiction) What is Claude Mythos? Anthropic announced Claude Mythos and project Glasswing on April 7th 2026. [Read more](https://csacyber.com/blog/claude-mythos-the-fact-and-the-fiction) [![](https://csacyber.com/hubfs/bluepad_1200x627.png)](https://csacyber.com/blog/osticket-timing-vulnerability-understanding-the-risk) - [Ruben Ferreira](https://csacyber.com/blog/author/reuben-ferreira) - April 1, 2026 ### [osTicket timing vulnerability: Understanding the risk](https://csacyber.com/blog/osticket-timing-vulnerability-understanding-the-risk) osTicket password reset endpoint timing side‑channel enables user enumeration – CVE‑2026‑26895 Summary: CSA Cyber... [Read more](https://csacyber.com/blog/osticket-timing-vulnerability-understanding-the-risk) [![](https://csacyber.com/hubfs/undefined-Mar-20-2026-11-17-32-4411-AM.png)](https://csacyber.com/blog/how-identity-estates-fuel-modern-breaches) - [Jack Gilmore](https://csacyber.com/blog/author/jack-gilmore) - March 20, 2026 ### [Hybrid identity, fragmented security: How identity estates fuel modern breaches](https://csacyber.com/blog/how-identity-estates-fuel-modern-breaches) In this article, I will cover why hybrid identities can lead to fragmented security and reduced visibility when strong... [Read more](https://csacyber.com/blog/how-identity-estates-fuel-modern-breaches) [![](https://csacyber.com/hubfs/social-engineering.jpg)](https://csacyber.com/blog/preparing-for-the-quantum-shift-why-post-quantum-readiness-cannot-wait) - [David Woodfine](https://csacyber.com/blog/author/david-woodfine) - February 6, 2026 ### [Preparing for the quantum shift: Why post-quantum readiness cannot wait](https://csacyber.com/blog/preparing-for-the-quantum-shift-why-post-quantum-readiness-cannot-wait) The debate around quantum risk is gathering momentum, and rightly so. Research such as Mastercard’s recent exploration... [Read more](https://csacyber.com/blog/preparing-for-the-quantum-shift-why-post-quantum-readiness-cannot-wait) [![](https://csacyber.com/hubfs/blog-banner-logo.png)](https://csacyber.com/blog/cve-2026-21509-analysis-the-ghost-in-the-document) - [Steve Velcev](https://csacyber.com/blog/author/steve-velcev) - February 2, 2026 ### [CVE-2026-21509 Analysis: The ghost in the document](https://csacyber.com/blog/cve-2026-21509-analysis-the-ghost-in-the-document) In January 2026, Microsoft confirmed active exploitation of a high-severity zero-day, CVE-2026-21509, targeting the... [Read more](https://csacyber.com/blog/cve-2026-21509-analysis-the-ghost-in-the-document) [![](https://csacyber.com/hubfs/CSR-bill.jpg)](https://csacyber.com/blog/cyber-security-and-resilience-bill-what-it-means) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - January 5, 2026 ### [Cyber Security and Resilience Bill: What it means for UK businesses](https://csacyber.com/blog/cyber-security-and-resilience-bill-what-it-means) On 12 November 2025, the Government introduced the Cyber Security and Resilience (Network and Information Systems) Bill... [Read more](https://csacyber.com/blog/cyber-security-and-resilience-bill-what-it-means) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size5.png)](https://csacyber.com/blog/how-does-cyber-security-enhance-it-security) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - October 3, 2025 ### [How does cyber security enhance IT security?](https://csacyber.com/blog/how-does-cyber-security-enhance-it-security) With cyber threats achieving increasing complexity, organisations can no longer rely solely on IT security to protect... [Read more](https://csacyber.com/blog/how-does-cyber-security-enhance-it-security) [![](https://csacyber.com/hubfs/large-CAF%20image.jpg)](https://csacyber.com/blog/caf-4.0-explained) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - September 2, 2025 ### [CAF 4.0 Explained: What's new and why it matters](https://csacyber.com/blog/caf-4.0-explained) The NCSC have recently released version 4.0 of the Cyber Assessment Framework (CAF), a common framework to enable... [Read more](https://csacyber.com/blog/caf-4.0-explained) [![phishing threats](https://csacyber.com/hubfs/Emerging%20phishing%20threats%20and%20mitigations%20in%202025.jpg)](https://csacyber.com/blog/emerging-phishing-threats-and-mitigations-in-2025) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 25, 2025 ### [Emerging phishing threats and mitigations in 2025](https://csacyber.com/blog/emerging-phishing-threats-and-mitigations-in-2025) If you’ve been defending organisations for more than a few years, phishing used to be straightforward: spray and pray... [Read more](https://csacyber.com/blog/emerging-phishing-threats-and-mitigations-in-2025) [![vCISO](https://csacyber.com/hubfs/vCISO%20vs%20Fractional%20CISO%20Which%20is%20best%20for%20your%20business.jpg)](https://csacyber.com/blog/vciso-vs-fractional-ciso) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 21, 2025 ### [vCISO vs Fractional CISO? Which is best for your business?](https://csacyber.com/blog/vciso-vs-fractional-ciso) Introduction to virtual services Businesses today are increasingly turning to virtual services to meet their cyber... [Read more](https://csacyber.com/blog/vciso-vs-fractional-ciso) [![access control](https://csacyber.com/hubfs/The%20importance%20of%20authorisation%20controls%20%28Access%20Control%29-1.jpg)](https://csacyber.com/blog/the-importance-of-authorisation-controls-access-control) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - July 14, 2025 ### [The importance of authorisation controls (Access Control)](https://csacyber.com/blog/the-importance-of-authorisation-controls-access-control) Overview Access controls are essential in ensuring that only the authorised users are able to access certain resources.... [Read more](https://csacyber.com/blog/the-importance-of-authorisation-controls-access-control) [![multi factor authentication](https://csacyber.com/hubfs/The%20importance%20of%20Multi-Factor%20Authentication%20%28MFA%29-1.jpg)](https://csacyber.com/blog/the-importance-of-multi-factor-authentication-mfa) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - July 1, 2025 ### [The importance of Multi-Factor Authentication (MFA)](https://csacyber.com/blog/the-importance-of-multi-factor-authentication-mfa) Overview [Read more](https://csacyber.com/blog/the-importance-of-multi-factor-authentication-mfa) [![cyber MFA protection ](https://csacyber.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20digital%20landscape%20illustrating%20the%20concept%20of%20Perfect%20Forward%20Secrecy%20PFS%20in%20cryptography%20In%20the%20foreground%20a%20sleek%20digital%20padlock%20symbolizes%20security%20surrounded%20by%20glowing%20lines%20of%20binary%20code%20that%20flow%20seamlessly%20across.png)](https://csacyber.com/blog/perfect-forward-secrecy-pfs-the-way-to-further-strengthen-confidentiality-of-data-in-transit) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - June 27, 2025 ### [Perfect Forward Secrecy (PFS): The way to further strengthen confidentiality of data in transit](https://csacyber.com/blog/perfect-forward-secrecy-pfs-the-way-to-further-strengthen-confidentiality-of-data-in-transit) Overview [Read more](https://csacyber.com/blog/perfect-forward-secrecy-pfs-the-way-to-further-strengthen-confidentiality-of-data-in-transit) [![Why preventing username enumeration is important](https://csacyber.com/hubfs/Why%20preventing%20username%20enumeration%20is%20important.jpg)](https://csacyber.com/blog/why-preventing-username-enumeration-is-important) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - June 24, 2025 ### [Why preventing username enumeration is important?](https://csacyber.com/blog/why-preventing-username-enumeration-is-important) Overview [Read more](https://csacyber.com/blog/why-preventing-username-enumeration-is-important) [![CSA Cyber](https://csacyber.com/hubfs/csa-cyber-news.jpg)](https://csacyber.com/blog/csa-cyber-named-trusted-cyber-advisor-in-bgfs-investment-in-pmc) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - June 23, 2025 ### [CSA Cyber Named Trusted Cyber Advisor in BGF's Investment in PMC](https://csacyber.com/blog/csa-cyber-named-trusted-cyber-advisor-in-bgfs-investment-in-pmc) London, UK – 23rd June 2025: CSA Cyber is proud to confirm its role as the trusted cyber advisor in BGF’s recent... [Read more](https://csacyber.com/blog/csa-cyber-named-trusted-cyber-advisor-in-bgfs-investment-in-pmc) [![sql injections](https://csacyber.com/hubfs/SQL%20injections.jpg)](https://csacyber.com/blog/sql-injections) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - June 3, 2025 ### [SQL injections](https://csacyber.com/blog/sql-injections) Overview SQL queries are often used retrieve or update data on a database server, which means that if attackers could... [Read more](https://csacyber.com/blog/sql-injections) [![](https://csacyber.com/hubfs/Post-breach.jpg)](https://csacyber.com/blog/post-breach-navigating-security-after-a-cyber-attack) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - May 28, 2025 ### [Post-breach: Navigating security after a cyber attack](https://csacyber.com/blog/post-breach-navigating-security-after-a-cyber-attack) The recent cyber attacks on several famous UK brands may have loosened its grip on the headlines, but that does not... [Read more](https://csacyber.com/blog/post-breach-navigating-security-after-a-cyber-attack) [![](https://csacyber.com/hubfs/CSA%20image%20doorbell.jpg)](https://csacyber.com/blog/taking-apart-a-smart-doorbell-with-a-hacker-mindset-part-1) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - May 28, 2025 ### [Taking apart a smart doorbell with a hacker mindset - Part 1](https://csacyber.com/blog/taking-apart-a-smart-doorbell-with-a-hacker-mindset-part-1) Welcome to our journey into the world of smart doorbell security. In this article, we will take you through our thought... [Read more](https://csacyber.com/blog/taking-apart-a-smart-doorbell-with-a-hacker-mindset-part-1) [![](https://csacyber.com/hubfs/37838_Crest%20icons_2022_4_SOC.jpg)](https://csacyber.com/blog/csa-cybers-soc-receives-crest-accreditation) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - May 27, 2025 ### [CSA Cyber’s SOC receives CREST accreditation](https://csacyber.com/blog/csa-cybers-soc-receives-crest-accreditation) As of Wednesday 14th May 2025 CSA Cyber’s Security Operations Centre (SOC) services are accredited by CREST – the... [Read more](https://csacyber.com/blog/csa-cybers-soc-receives-crest-accreditation) [![](https://csacyber.com/hubfs/Untitled-2.jpg)](https://csacyber.com/blog/uk-retail-cyber-attacks-isolated-incident-or-warning-for-other-sectors) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - May 7, 2025 ### [UK retail cyber attacks: Isolated incident or warning for other sectors?](https://csacyber.com/blog/uk-retail-cyber-attacks-isolated-incident-or-warning-for-other-sectors) The furore surrounding the recent cyber-attacks in the UK retail sector has attracted a great deal of attention and has... [Read more](https://csacyber.com/blog/uk-retail-cyber-attacks-isolated-incident-or-warning-for-other-sectors) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size4.png)](https://csacyber.com/blog/enhancing-your-security-posture-with-compliance-consultancy) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - March 13, 2025 ### [Enhancing your security posture with Compliance Consultancy](https://csacyber.com/blog/enhancing-your-security-posture-with-compliance-consultancy) Year on year, cyber security continues to be a top priority for business leaders – and it’s plain to see why. As new... [Read more](https://csacyber.com/blog/enhancing-your-security-posture-with-compliance-consultancy) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size3.png)](https://csacyber.com/blog/seven-things-to-look-out-for-in-a-good-soc-provider) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - March 5, 2025 ### [Seven things to look out for in a good SOC provider](https://csacyber.com/blog/seven-things-to-look-out-for-in-a-good-soc-provider) Cyber threats have evolved to the point where firewalls and antivirus software, although still essential, are no longer... [Read more](https://csacyber.com/blog/seven-things-to-look-out-for-in-a-good-soc-provider) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size2.png)](https://csacyber.com/blog/streamlining-pci-compliance-in-a-cloud-native-serverless-world) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - February 26, 2025 ### [Streamlining PCI compliance in a cloud-native & serverless world](https://csacyber.com/blog/streamlining-pci-compliance-in-a-cloud-native-serverless-world) Last month, CSA Cyber’s very own senior consultant and compliance expert Sam Greaves presented his talk, “Streamlining... [Read more](https://csacyber.com/blog/streamlining-pci-compliance-in-a-cloud-native-serverless-world) [![](https://csacyber.com/hubfs/MISA%20Member%20badge_white%20background_MS%20Security%20logo-1.jpg)](https://csacyber.com/blog/csa-cyber-joins-the-microsoft-intelligent-security-association) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - February 24, 2025 ### [CSA Cyber joins the Microsoft Intelligent Security Association](https://csacyber.com/blog/csa-cyber-joins-the-microsoft-intelligent-security-association) Gloucester, United Kingdom — \[24/02/2025\] — CSA Cyber today announced it has become a member of the Microsoft... [Read more](https://csacyber.com/blog/csa-cyber-joins-the-microsoft-intelligent-security-association) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size.png)](https://csacyber.com/blog/offensive-security-is-penetration-testing-or-red-teaming-right-for-you) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - February 21, 2025 ### [Offensive Security: Is Penetration Testing or Red Teaming right for you?](https://csacyber.com/blog/offensive-security-is-penetration-testing-or-red-teaming-right-for-you) Cyber security and cyber threats have a history spanning over half a century, beginning with the development of secure... [Read more](https://csacyber.com/blog/offensive-security-is-penetration-testing-or-red-teaming-right-for-you) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size7.png)](https://csacyber.com/blog/get-ahead-of-pci-dss-4.0.1-with-continuous-compliance) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - February 12, 2025 ### [Get ahead of PCI DSS 4.0.1 with continuous compliance](https://csacyber.com/blog/get-ahead-of-pci-dss-4.0.1-with-continuous-compliance) As further changes to the Payment Card Industry Data Security Standard (PCI DSS) come into force by March 31st 2025,... [Read more](https://csacyber.com/blog/get-ahead-of-pci-dss-4.0.1-with-continuous-compliance) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size6.png)](https://csacyber.com/blog/pcs-dss-saq-a-changes-announced) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - February 5, 2025 ### [PCI DSS: SAQ A – Changes Announced](https://csacyber.com/blog/pcs-dss-saq-a-changes-announced) Last Thursday, The PCI Council released an update to Self-Assessment Questionnaire (SAQ) A. [Read more](https://csacyber.com/blog/pcs-dss-saq-a-changes-announced) [![](https://csacyber.com/hubfs/home-network-security.jpg)](https://csacyber.com/blog/working-from-home-5-steps-to-secure-your-home-network) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - October 30, 2024 ### [Working from Home? 5 Steps to Secure Your Home Network](https://csacyber.com/blog/working-from-home-5-steps-to-secure-your-home-network) Introduction With a large amount of confidential and/or proprietary information residing on and flowing through a... [Read more](https://csacyber.com/blog/working-from-home-5-steps-to-secure-your-home-network) [![](https://csacyber.com/hubfs/password-policy.png)](https://csacyber.com/blog/implementing-a-fine-grained-password-policy-for-domain-admins) - [Mark Wardlow](https://csacyber.com/blog/author/mark-wardlow) - October 24, 2024 ### [Implementing a Fine-grained Password Policy for Domain Admins](https://csacyber.com/blog/implementing-a-fine-grained-password-policy-for-domain-admins) Introduction With ever more integration of applications and systems into Active Directory, hardening the security of a... [Read more](https://csacyber.com/blog/implementing-a-fine-grained-password-policy-for-domain-admins) [![](https://csacyber.com/hubfs/1727384720922.png)](https://csacyber.com/blog/unauthenticated-rce-on-all-gnu/linux-system-should-you-be-concerned) - [Simone Q](https://csacyber.com/blog/author/simone-q) - September 26, 2024 ### [Unauthenticated RCE on all GNU/Linux system – Should you be concerned?](https://csacyber.com/blog/unauthenticated-rce-on-all-gnu/linux-system-should-you-be-concerned) Introduction On September 26th an Italian security researcher released details regarding an unauthenticated remote... [Read more](https://csacyber.com/blog/unauthenticated-rce-on-all-gnu/linux-system-should-you-be-concerned) [![](https://csacyber.com/hubfs/1727177358237.jpg)](https://csacyber.com/blog/iredadmin-multiple-vulnerabilities-cve-2024-47227) - [Simone Q](https://csacyber.com/blog/author/simone-q) - September 24, 2024 ### [iRedAdmin Multiple Vulnerabilities – CVE-2024-47227](https://csacyber.com/blog/iredadmin-multiple-vulnerabilities-cve-2024-47227) TL;DR CSA identified multiple vulnerabilities within iRedAdmin \<= 2.5 which are tracked under CVE-2024-47227. iRedAdmin... [Read more](https://csacyber.com/blog/iredadmin-multiple-vulnerabilities-cve-2024-47227) [![](https://csacyber.com/hubfs/kernelapp.png)](https://csacyber.com/blog/exploiting-microsoft-kernel-applocker-driver-cve-2024-38041) - [Erwin Krazek](https://csacyber.com/blog/author/erwin-krazek) - September 16, 2024 ### [Exploiting Microsoft Kernel Applocker Driver (CVE-2024-38041)](https://csacyber.com/blog/exploiting-microsoft-kernel-applocker-driver-cve-2024-38041) Overview In recent July Patch Tuesday Microsoft patched a vulnerability in the Microsoft Kernel driver appid.sys, which... [Read more](https://csacyber.com/blog/exploiting-microsoft-kernel-applocker-driver-cve-2024-38041) [![](https://csacyber.com/hubfs/red-team.jpg)](https://csacyber.com/blog/why-red-teaming-should-be-an-essential-pillar-of-your-organizations-cybersecurity-strategy) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - September 11, 2024 ### [Why Red Teaming Should be an Essential Pillar of your Organization’s Cybersecurity Strategy](https://csacyber.com/blog/why-red-teaming-should-be-an-essential-pillar-of-your-organizations-cybersecurity-strategy) The financial and reputational damage caused by a cyberattack can be devastating for governments and organizations.... [Read more](https://csacyber.com/blog/why-red-teaming-should-be-an-essential-pillar-of-your-organizations-cybersecurity-strategy) [![](https://csacyber.com/hubfs/DORA-blog-thumbnail-770x400.png)](https://csacyber.com/blog/dora-the-digital-operational-resilience-act) - [Henry Kibirige](https://csacyber.com/blog/author/henry-kibirige) - July 30, 2024 ### [DORA: The Digital Operational Resilience Act](https://csacyber.com/blog/dora-the-digital-operational-resilience-act) What is DORA? The Digital Operational Resilience Act is a European framework that establishes a uniform approach... [Read more](https://csacyber.com/blog/dora-the-digital-operational-resilience-act) [![](https://csacyber.com/hubfs/pci-case.jpg)](https://csacyber.com/blog/how-csa-empowers-organizations-in-transitioning-to-pci-dss-version-4-compliance) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - July 16, 2024 ### [How CSA Empowers Organizations in Transitioning to PCI DSS Version 4 Compliance](https://csacyber.com/blog/how-csa-empowers-organizations-in-transitioning-to-pci-dss-version-4-compliance) It’s time for your organization to take action and transition to PCI DSS v4.0 Compliance. The Payment Card Industry... [Read more](https://csacyber.com/blog/how-csa-empowers-organizations-in-transitioning-to-pci-dss-version-4-compliance) [![](https://csacyber.com/hubfs/standard-quality-control-concept-m.jpg)](https://csacyber.com/blog/microsoft-announces-solution-to-detect-suspicious-processes-running-on-hidden-desktops) - [Aidan Matthews](https://csacyber.com/blog/author/aidan-matthews) - July 2, 2024 ### [Microsoft announces solution to detect suspicious processes running on hidden desktops](https://csacyber.com/blog/microsoft-announces-solution-to-detect-suspicious-processes-running-on-hidden-desktops) Overview With remote desktop protocol (RDP) compromises on the rise, Microsoft Defender for Endpoint has introduced a... [Read more](https://csacyber.com/blog/microsoft-announces-solution-to-detect-suspicious-processes-running-on-hidden-desktops) [![](https://csacyber.com/hubfs/AFC__Proudly_Supporting__Graphic-2.png)](https://csacyber.com/blog/csa-are-members-of-the-armed-forces-covenant) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - July 1, 2024 ### [CSA are members of the Armed Forces Covenant](https://csacyber.com/blog/csa-are-members-of-the-armed-forces-covenant) We commit to uphold the Armed Forces Covenant and support the Armed Forces Community. We recognise the contribution... [Read more](https://csacyber.com/blog/csa-are-members-of-the-armed-forces-covenant) [![](https://csacyber.com/hubfs/synnovis-logo.png.jpeg)](https://csacyber.com/blog/cyber-siege-the-nhs-data-breach-and-its-ripple-effects-on-patient-care) - [Simone Q](https://csacyber.com/blog/author/simone-q) - June 26, 2024 ### [Cyber Siege: The NHS Data Breach and Its Ripple Effects on Patient Care](https://csacyber.com/blog/cyber-siege-the-nhs-data-breach-and-its-ripple-effects-on-patient-care) Once more, we are in the midst of a cyber ransomware attack. Today's target is Synnovis, an NHS blood testing provider... [Read more](https://csacyber.com/blog/cyber-siege-the-nhs-data-breach-and-its-ripple-effects-on-patient-care) [![](https://csacyber.com/hubfs/Cyber-threat-blog-ep-3-800x500.jpg)](https://csacyber.com/blog/cyber-threat-briefing-implementing-ransomware-controls) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - June 20, 2024 ### [Cyber Threat Briefing: Implementing Ransomware Controls](https://csacyber.com/blog/cyber-threat-briefing-implementing-ransomware-controls) In recent months ransomware attacks have undoubtedly picked up pace as well as impact. There have been high-profile... [Read more](https://csacyber.com/blog/cyber-threat-briefing-implementing-ransomware-controls) [![](https://csacyber.com/hubfs/evote.jpg)](https://csacyber.com/blog/cybersecuritys-lights-and-shadows-of-e-vote) - [Simone Q](https://csacyber.com/blog/author/simone-q) - May 30, 2024 ### [Cybersecurity’s lights and shadows of e-vote](https://csacyber.com/blog/cybersecuritys-lights-and-shadows-of-e-vote) Electronic voting or e-vote is the process of casting a vote electronically from a computer phone or tablet. [Read more](https://csacyber.com/blog/cybersecuritys-lights-and-shadows-of-e-vote) [![](https://csacyber.com/hubfs/direct-memory-access-attack-close-up-programmer-typing-keyboard-2.jpg)](https://csacyber.com/blog/direct-memory-access-attacks-an-easy-way-to-hack-into-memory-bypass-logon-screens-and-ignore-device-encryption) - [Steve Velcev](https://csacyber.com/blog/author/steve-velcev) - May 28, 2024 ### [Direct Memory Access Attacks: An easy way to hack into memory, bypass logon screens and ignore device encryption](https://csacyber.com/blog/direct-memory-access-attacks-an-easy-way-to-hack-into-memory-bypass-logon-screens-and-ignore-device-encryption) Have you ever come across a laptop, server or desktop computer that has Full Device Encryption (FDE) and protected by a... [Read more](https://csacyber.com/blog/direct-memory-access-attacks-an-easy-way-to-hack-into-memory-bypass-logon-screens-and-ignore-device-encryption) [![](https://csacyber.com/hubfs/Gold-Pickaxe-img.jpg)](https://csacyber.com/blog/threat-hunting-report-goldpickaxe) - [Patryk Przybocki](https://csacyber.com/blog/author/patryk-przybocki) - April 25, 2024 ### [Threat Hunting Report: GoldPickaxe](https://csacyber.com/blog/threat-hunting-report-goldpickaxe) Executive Summary The purpose of this report is to document the current form and methodologies used by the GoldFactory... [Read more](https://csacyber.com/blog/threat-hunting-report-goldpickaxe) [![](https://csacyber.com/hubfs/ir1.jpg)](https://csacyber.com/blog/the-vital-role-of-incident-response-testing-in-organizations-security) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 23, 2024 ### [The Vital Role of Incident Response Testing in Organizations’ Security](https://csacyber.com/blog/the-vital-role-of-incident-response-testing-in-organizations-security) Do you take your security seriously? In this blog, you’ll learn why incident response testing is vital to your... [Read more](https://csacyber.com/blog/the-vital-role-of-incident-response-testing-in-organizations-security) [![](https://csacyber.com/hubfs/isms.jpg)](https://csacyber.com/blog/the-benefits-of-combining-your-isms-program-with-a-penetration-testing-cycle) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 17, 2024 ### [The Benefits of Combining your ISMS Program with a Penetration Testing Cycle](https://csacyber.com/blog/the-benefits-of-combining-your-isms-program-with-a-penetration-testing-cycle) What is an ISMS program? The NCSC defines penetration testing as “A method for gaining assurance in the security of an... [Read more](https://csacyber.com/blog/the-benefits-of-combining-your-isms-program-with-a-penetration-testing-cycle) [![](https://csacyber.com/hubfs/Vulnerability-Management.jpg)](https://csacyber.com/blog/vulnerability-management-program-what-makes-it-good-and-what-does-success-look-like) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 16, 2024 ### [Vulnerability Management Program: What Makes it Good and What Does Success Look Like?](https://csacyber.com/blog/vulnerability-management-program-what-makes-it-good-and-what-does-success-look-like) Cybercrime isn’t going anywhere, and its impact continues to have devastating consequences for individuals and... [Read more](https://csacyber.com/blog/vulnerability-management-program-what-makes-it-good-and-what-does-success-look-like) [![](https://csacyber.com/hubfs/Volt-Typhoon.png)](https://csacyber.com/blog/threat-hunting-report-volt-typhoon) - [Bilal Mohammed](https://csacyber.com/blog/author/bilal-mohammed) - April 12, 2024 ### [Threat Hunting Report: Volt Typhoon](https://csacyber.com/blog/threat-hunting-report-volt-typhoon) Executive Summary The purpose of this report is to document the current form and methodologies used by the Volt Typhoon... [Read more](https://csacyber.com/blog/threat-hunting-report-volt-typhoon) [![](https://csacyber.com/hubfs/Edited-images-5.png)](https://csacyber.com/blog/pci-dss-v4.0-where-are-we-now) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - March 20, 2024 ### [PCI DSS v4.0 – Where are we now?](https://csacyber.com/blog/pci-dss-v4.0-where-are-we-now) The long-awaited latest iteration of the Payment Card Industry (PCI) Data Security Standard (DSS) is here! What is PCI... [Read more](https://csacyber.com/blog/pci-dss-v4.0-where-are-we-now) [![](https://csacyber.com/hubfs/SCCS-CSA-FluidOne-jigsaw-puzzle.png)](https://csacyber.com/blog/fluidone-and-its-cyber-security-associates-division-csa-acquire-surecloud-cyber-services) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - March 13, 2024 ### [FluidOne and its Cyber Security Associates division (CSA) acquire SureCloud Cyber Services](https://csacyber.com/blog/fluidone-and-its-cyber-security-associates-division-csa-acquire-surecloud-cyber-services) London, UK – 13th March 2024 - FluidOne, the market-leading provider of Connected Cloud Solutions, announced today that... [Read more](https://csacyber.com/blog/fluidone-and-its-cyber-security-associates-division-csa-acquire-surecloud-cyber-services) [![](https://csacyber.com/hubfs/password.jpg)](https://csacyber.com/blog/why-prioritizing-password-management-and-good-cyber-hygiene-is-key-to-reducing-risk) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 14, 2024 ### [Why Prioritizing Password Management and Good Cyber Hygiene is Key to Reducing Risk](https://csacyber.com/blog/why-prioritizing-password-management-and-good-cyber-hygiene-is-key-to-reducing-risk) According to the National Cyber Security Centre (NCSC) there were 6.4 million reports of suspicious email activity in... [Read more](https://csacyber.com/blog/why-prioritizing-password-management-and-good-cyber-hygiene-is-key-to-reducing-risk) [![](https://csacyber.com/hubfs/Edited-images-4.png)](https://csacyber.com/blog/enterprise-architecture-and-its-role-against-security-threats) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 13, 2024 ### [Enterprise Architecture and Its Role Against Security Threats](https://csacyber.com/blog/enterprise-architecture-and-its-role-against-security-threats) Last year, Gartner forecast that worldwide spending on security and risk management would soon exceed $150 billion, a... [Read more](https://csacyber.com/blog/enterprise-architecture-and-its-role-against-security-threats) [![](https://csacyber.com/hubfs/library-attack.jpg)](https://csacyber.com/blog/british-library-cyber-attack-sends-shockwaves-through-business-community) - [Saif Bhoja](https://csacyber.com/blog/author/saif-bhoja) - January 19, 2024 ### [British Library Cyber-attack Sends Shockwaves Through Business Community](https://csacyber.com/blog/british-library-cyber-attack-sends-shockwaves-through-business-community) British Library Cyber-attack Sends Shockwaves Through Business Community In a startling turn of events, the British... [Read more](https://csacyber.com/blog/british-library-cyber-attack-sends-shockwaves-through-business-community) [![](https://csacyber.com/hubfs/12-1.png)](https://csacyber.com/blog/cyber-threat-briefing-an-organizations-susceptibility-to-supply-chain-attacks) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 16, 2024 ### [Cyber Threat Briefing: An Organization’s Susceptibility to Supply Chain Attacks](https://csacyber.com/blog/cyber-threat-briefing-an-organizations-susceptibility-to-supply-chain-attacks) In a new report published by the World Economic Forum, entitled Global Cybersecurity Outlook 2022, more than 40% of... [Read more](https://csacyber.com/blog/cyber-threat-briefing-an-organizations-susceptibility-to-supply-chain-attacks) [![](https://csacyber.com/hubfs/zero-click-attack.png)](https://csacyber.com/blog/unseen-threats-navigating-the-landscape-of-zero-click-attacks-in-cyberspace) - [James Rowley](https://csacyber.com/blog/author/james-rowley) - January 15, 2024 ### [Unseen Threats: Navigating the Landscape of Zero-Click Attacks in Cyberspace](https://csacyber.com/blog/unseen-threats-navigating-the-landscape-of-zero-click-attacks-in-cyberspace) Unseen Threats: Navigating the Landscape of Zero-Click Attacks in Cyberspace In our interconnected global landscape... [Read more](https://csacyber.com/blog/unseen-threats-navigating-the-landscape-of-zero-click-attacks-in-cyberspace) [![](https://csacyber.com/hubfs/11-e1644932665609.png)](https://csacyber.com/blog/cybersecurity-maturity-model-certification-cmmc-what-how-when-and-why) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 9, 2024 ### [Cybersecurity Maturity Model Certification (CMMC): What, How, When and Why?](https://csacyber.com/blog/cybersecurity-maturity-model-certification-cmmc-what-how-when-and-why) For almost two years now, the US Department of Defense (DOD) has been reviewing a process designed to ensure defense... [Read more](https://csacyber.com/blog/cybersecurity-maturity-model-certification-cmmc-what-how-when-and-why) [![](https://csacyber.com/hubfs/SureCloud-Blue-maze-Branded-750x750.png)](https://csacyber.com/blog/cyber-threat-briefing-defending-against-ransomware) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 9, 2024 ### [Cyber Threat Briefing: Defending Against Ransomware](https://csacyber.com/blog/cyber-threat-briefing-defending-against-ransomware) The past eighteen months have been tumultuous to say the least. As well as struggling with the fallout from a global... [Read more](https://csacyber.com/blog/cyber-threat-briefing-defending-against-ransomware) [![](https://csacyber.com/hubfs/C2-FrameworkMuddyC2Go.jpg)](https://csacyber.com/blog/c2-framework-muddyc2go) - [Ayman Khan](https://csacyber.com/blog/author/ayman-khan) - November 17, 2023 ### [C2 Framework - MuddyC2Go](https://csacyber.com/blog/c2-framework-muddyc2go) C2 Framework - MuddyC2Go A C2 Framework (Command and Control) is a set of tools and protocols which allow red teamers... [Read more](https://csacyber.com/blog/c2-framework-muddyc2go) [![](https://csacyber.com/hubfs/cryptojacking-menace.jpg)](https://csacyber.com/blog/elektra-leak-unmasking-the-cryptojacking-menace) - [Luke Smith](https://csacyber.com/blog/author/luke-smith) - November 2, 2023 ### [EleKtra-Leak: Unmasking the Cryptojacking Menace](https://csacyber.com/blog/elektra-leak-unmasking-the-cryptojacking-menace) In the ever-evolving landscape of cybersecurity threats, a new ongoing campaign has emerged, known as the Elektra-Leak.... [Read more](https://csacyber.com/blog/elektra-leak-unmasking-the-cryptojacking-menace) [![](https://csacyber.com/hubfs/ransomware-img.jpg)](https://csacyber.com/blog/ransomware-as-a-service-a-successful-business-model) - [Saif Bhoja](https://csacyber.com/blog/author/saif-bhoja) - October 12, 2023 ### [Ransomware as a service: A successful business model](https://csacyber.com/blog/ransomware-as-a-service-a-successful-business-model) As Ransomware groups continue to grow, they become increasingly sophisticated and organised, developing help centres... [Read more](https://csacyber.com/blog/ransomware-as-a-service-a-successful-business-model) [![](https://csacyber.com/hubfs/football.jpg)](https://csacyber.com/blog/from-professional-footballer-to-cybersecurity-consultant) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - October 10, 2023 ### [From Professional Footballer to Cybersecurity Consultant](https://csacyber.com/blog/from-professional-footballer-to-cybersecurity-consultant) October is Cybersecurity Awareness Month, which is an initiative led by the Cybersecurity and Infrastructure Security... [Read more](https://csacyber.com/blog/from-professional-footballer-to-cybersecurity-consultant) [![](https://csacyber.com/hubfs/sharks.jpg)](https://csacyber.com/blog/cyber-threat-briefing-real-world-cyber-threats) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - October 3, 2023 ### [Cyber Threat Briefing: Real-World Cyber Threats](https://csacyber.com/blog/cyber-threat-briefing-real-world-cyber-threats) Ransomware attacks have been taking up a large proportion of the news headlines, but that doesn’t mean there haven’t... [Read more](https://csacyber.com/blog/cyber-threat-briefing-real-world-cyber-threats) [![](https://csacyber.com/hubfs/images-9.png)](https://csacyber.com/blog/the-changing-compliance-landscape-preparing-for-pci-dss-v4.0) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - September 28, 2023 ### [The Changing Compliance Landscape: Preparing for PCI DSS v4.0](https://csacyber.com/blog/the-changing-compliance-landscape-preparing-for-pci-dss-v4.0) Organizations’ compliance programs have had to evolve over recent years to incorporate new ways of working, new... [Read more](https://csacyber.com/blog/the-changing-compliance-landscape-preparing-for-pci-dss-v4.0) [![](https://csacyber.com/hubfs/QR-Phishing.jpg)](https://csacyber.com/blog/qr-phishing-the-scam-thats-sneaking-up-behind-you) - [Patryk Machowiak](https://csacyber.com/blog/author/patryk-machowiak) - September 27, 2023 ### [QR Phishing: The Scam That's Sneaking Up Behind You](https://csacyber.com/blog/qr-phishing-the-scam-thats-sneaking-up-behind-you) QR codes, also known as Quick Response codes, have become increasingly popular in recent years. They are a convenient... [Read more](https://csacyber.com/blog/qr-phishing-the-scam-thats-sneaking-up-behind-you) [![](https://csacyber.com/hubfs/edited-images-.svg)](https://csacyber.com/blog/what-is-the-strengthening-american-cybersecurity-act-and-what-do-i-need-to-know) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - September 26, 2023 ### [What is the Strengthening American Cybersecurity Act and what do I need to know?](https://csacyber.com/blog/what-is-the-strengthening-american-cybersecurity-act-and-what-do-i-need-to-know) Since the Biden administration took office in the US, cybersecurity has been a top government priority. Major cyber... [Read more](https://csacyber.com/blog/what-is-the-strengthening-american-cybersecurity-act-and-what-do-i-need-to-know) [![](https://csacyber.com/hubfs/wearable.jpg)](https://csacyber.com/blog/cyber-threat-briefing-how-secure-is-your-wearable-tech) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - September 20, 2023 ### [Cyber Threat Briefing: How secure is your wearable tech?](https://csacyber.com/blog/cyber-threat-briefing-how-secure-is-your-wearable-tech) It’s no secret that wearable technology, such as smartwatches and fitness trackers, are increasingly becoming a key... [Read more](https://csacyber.com/blog/cyber-threat-briefing-how-secure-is-your-wearable-tech) [![](https://csacyber.com/hubfs/ism.png)](https://csacyber.com/blog/a-brief-insight-into-the-responsibilities-of-an-information-security-manager-ism) - [Emilio Vancheri](https://csacyber.com/blog/author/emilio-vancheri) - September 16, 2023 ### [A brief insight into the responsibilities of an Information Security Manager (ISM)](https://csacyber.com/blog/a-brief-insight-into-the-responsibilities-of-an-information-security-manager-ism) Information security is a very broad field. It spans across misuse of enterprise information, disruption, unauthorised... [Read more](https://csacyber.com/blog/a-brief-insight-into-the-responsibilities-of-an-information-security-manager-ism) [![](https://csacyber.com/hubfs/car-hacking.png)](https://csacyber.com/blog/hit-and-run-electric-cars-and-the-chips-susceptible-to-hardware-hacks) - [Lewis Setherton](https://csacyber.com/blog/author/lewis-setherton) - August 25, 2023 ### [’Hit and Run’ Electric cars and the chips susceptible to hardware hacks](https://csacyber.com/blog/hit-and-run-electric-cars-and-the-chips-susceptible-to-hardware-hacks) When we park or store our cars overnight, we often give thought to the valuable items, careful not to leave them in... [Read more](https://csacyber.com/blog/hit-and-run-electric-cars-and-the-chips-susceptible-to-hardware-hacks) [![](https://csacyber.com/hubfs/PCI-DSS-customised.jpg)](https://csacyber.com/blog/pci-dss-v4.0-the-customized-approach) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 23, 2023 ### [PCI DSS v4.0: The Customized Approach](https://csacyber.com/blog/pci-dss-v4.0-the-customized-approach) Organizations needing to comply with the Payment Card Industry Data Security Standard (PCI DSS) will already be... [Read more](https://csacyber.com/blog/pci-dss-v4.0-the-customized-approach) [![](https://csacyber.com/hubfs/5G-Next-Gen-Networking.jpg)](https://csacyber.com/blog/5g-the-next-generation-of-networking) - [Patryk Przybocki](https://csacyber.com/blog/author/patryk-przybocki) - August 18, 2023 ### [5G, the Next Generation of Networking?](https://csacyber.com/blog/5g-the-next-generation-of-networking) With the increased commonplace of 5G technology around the country, interesting and unique challenges have come... [Read more](https://csacyber.com/blog/5g-the-next-generation-of-networking) [![](https://csacyber.com/hubfs/infi.jpg)](https://csacyber.com/blog/optimizing-pci-dss-compliance-the-role-of-infi-in-continuous-compliance-improvement) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 17, 2023 ### [Optimizing PCI DSS Compliance: The Role of INFI in Continuous Compliance Improvement](https://csacyber.com/blog/optimizing-pci-dss-compliance-the-role-of-infi-in-continuous-compliance-improvement) As the world transitions to PCI DSS v4.0, both enterprises and assessors are adjusting their operational strategies to... [Read more](https://csacyber.com/blog/optimizing-pci-dss-compliance-the-role-of-infi-in-continuous-compliance-improvement) [![](https://csacyber.com/hubfs/ctb.jpg)](https://csacyber.com/blog/cyber-threat-briefing-russian-hackers-godaddys-cyberattack-and-reddits-open-communication) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 16, 2023 ### [Cyber Threat Briefing: Russian Hackers, GoDaddy’s Cyberattack, and Reddit’s Open Communication](https://csacyber.com/blog/cyber-threat-briefing-russian-hackers-godaddys-cyberattack-and-reddits-open-communication) It’s been a busy first half of the year for the cybersecurity sector. The threat landscape remains increasingly... [Read more](https://csacyber.com/blog/cyber-threat-briefing-russian-hackers-godaddys-cyberattack-and-reddits-open-communication) [![](https://csacyber.com/hubfs/cloud-security.jpg)](https://csacyber.com/blog/cyber-threat-briefing-cloud-security) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 16, 2023 ### [Cyber Threat Briefing: Cloud Security](https://csacyber.com/blog/cyber-threat-briefing-cloud-security) [Read more](https://csacyber.com/blog/cyber-threat-briefing-cloud-security) [![](https://csacyber.com/hubfs/Battling-mfa-fatigue.png)](https://csacyber.com/blog/battling-mfa-fatigue-a-rising-challenge-in-the-current-threat-landscape) - [Bilal Mohammed](https://csacyber.com/blog/author/bilal-mohammed) - August 11, 2023 ### [Battling MFA Fatigue: A Rising Challenge in the Current Threat Landscape](https://csacyber.com/blog/battling-mfa-fatigue-a-rising-challenge-in-the-current-threat-landscape) Imagine that after a hard day’s work, you suddenly receive a multitude of multifactor authentication (MFA) prompts... [Read more](https://csacyber.com/blog/battling-mfa-fatigue-a-rising-challenge-in-the-current-threat-landscape) [![](https://csacyber.com/hubfs/cyber-blue-pci-800x500.jpg)](https://csacyber.com/blog/common-pci-dss-mistakes) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 2, 2023 ### [Common PCI DSS Mistakes](https://csacyber.com/blog/common-pci-dss-mistakes) When it comes to the Payment Card Industry Data Security Standard (PCI DSS), there are common mistakes that every QSA... [Read more](https://csacyber.com/blog/common-pci-dss-mistakes) [![](https://csacyber.com/hubfs/keyboard-pentest-1-800x500-1.jpg)](https://csacyber.com/blog/pentesting-keycloak-part-2) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - July 20, 2023 ### [Pentesting Keycloak – Part 2: Identifying Misconfiguration Using Risk Management Tools](https://csacyber.com/blog/pentesting-keycloak-part-2) Pentesting Keycloak – Part 2 This is part 2/2 of “Pentesting Keycloak”, this section will cover: [Read more](https://csacyber.com/blog/pentesting-keycloak-part-2) [![](https://csacyber.com/hubfs/Security%20Logo.png)](https://csacyber.com/blog/cyber-security-associates-becomes-a-microsoft-solutions-partner-for-security) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - July 14, 2023 ### [Cyber Security Associates becomes a Microsoft Solutions Partner for Security](https://csacyber.com/blog/cyber-security-associates-becomes-a-microsoft-solutions-partner-for-security) Just over 18 months ago, Cyber Security Associates Limited (CSA) took the decision to use the Microsoft Security stack... [Read more](https://csacyber.com/blog/cyber-security-associates-becomes-a-microsoft-solutions-partner-for-security) [![](https://csacyber.com/hubfs/blackcat1.png)](https://csacyber.com/blog/blackcat-operators-distributing-ransomware-disguised-as-winscp-via-malvertising) - [Alex Babbage](https://csacyber.com/blog/author/alex-babbage) - July 12, 2023 ### [BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising](https://csacyber.com/blog/blackcat-operators-distributing-ransomware-disguised-as-winscp-via-malvertising) Threat actors linked to the BlackCat ransomware have been seen using malvertising strategies to propagate malicious... [Read more](https://csacyber.com/blog/blackcat-operators-distributing-ransomware-disguised-as-winscp-via-malvertising) [![](https://csacyber.com/hubfs/mobile-malware.jpg)](https://csacyber.com/blog/mobile-phone-malware-and-the-possible-effects-of-hijackings) - [Patryk Przybocki](https://csacyber.com/blog/author/patryk-przybocki) - July 7, 2023 ### [Mobile phone malware and the possible effects of hijackings](https://csacyber.com/blog/mobile-phone-malware-and-the-possible-effects-of-hijackings) Our reliance on mobile phones has soared to unprecedented heights. We entrust them with everything; from banking to... [Read more](https://csacyber.com/blog/mobile-phone-malware-and-the-possible-effects-of-hijackings) [![](https://csacyber.com/hubfs/keyboard-pentest-1-800x500.jpg)](https://csacyber.com/blog/pentesting-keycloak-part-1-identifying-misconfiguration-using-risk-management-tools) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - July 4, 2023 ### [Pentesting Keycloak Part 1: Identifying Misconfiguration Using Risk Management Tools](https://csacyber.com/blog/pentesting-keycloak-part-1-identifying-misconfiguration-using-risk-management-tools) What is Keycloak? Keycloak is an open-source Identity and Access Management (IAM) solution. It allows easy... [Read more](https://csacyber.com/blog/pentesting-keycloak-part-1-identifying-misconfiguration-using-risk-management-tools) [![](https://csacyber.com/hubfs/images-11.png)](https://csacyber.com/blog/practical-steps-to-embedding-and-measuring-continuous-compliance) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - June 22, 2023 ### [Practical Steps to Embedding and Measuring Continuous Compliance](https://csacyber.com/blog/practical-steps-to-embedding-and-measuring-continuous-compliance) Trying to stay fully compliant today can be like trying to hit a moving target. The regulatory landscape is now... [Read more](https://csacyber.com/blog/practical-steps-to-embedding-and-measuring-continuous-compliance) [![](https://csacyber.com/hubfs/manage-risk2.png)](https://csacyber.com/blog/managing-cyber-security-risks-from-third-parties) - [Sohaib Saif](https://csacyber.com/blog/author/sohaib-saif) - June 22, 2023 ### [Managing Cyber Security Risks from Third Parties](https://csacyber.com/blog/managing-cyber-security-risks-from-third-parties) You may have heard the saying “A chain is only as strong as its weakest link”. Recent cyber security attacks have shown... [Read more](https://csacyber.com/blog/managing-cyber-security-risks-from-third-parties) [![](https://csacyber.com/hubfs/sentinelone.jpg)](https://csacyber.com/blog/csa-partners-with-sentinelone-for-endpoint-protection) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - June 18, 2023 ### [CSA partners with SentinelOne for Endpoint Protection](https://csacyber.com/blog/csa-partners-with-sentinelone-for-endpoint-protection) SentinelOne Managed Security Service Prodiver (MSSP) Cyber Security Associates has partnered with SentinelOne to... [Read more](https://csacyber.com/blog/csa-partners-with-sentinelone-for-endpoint-protection) [![](https://csacyber.com/hubfs/capita2.png)](https://csacyber.com/blog/nice-capita-incident-impact-research) - [Patryk Machowiak](https://csacyber.com/blog/author/patryk-machowiak) - June 17, 2023 ### [Nice Capita: Incident Impact Research](https://csacyber.com/blog/nice-capita-incident-impact-research) Executive Summary Capita is a British multinational company that specializes in business process outsourcing and... [Read more](https://csacyber.com/blog/nice-capita-incident-impact-research) [![](https://csacyber.com/hubfs/log4j.jpg)](https://csacyber.com/blog/log4j-/-log4shell-/-cve-2021-44228) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - June 6, 2023 ### [Log4j / Log4Shell / CVE-2021-44228](https://csacyber.com/blog/log4j-/-log4shell-/-cve-2021-44228) What is it? CVE-2021-44228, also known as Log4Shell, is a remote code execution (RCE) vulnerability affecting Apache... [Read more](https://csacyber.com/blog/log4j-/-log4shell-/-cve-2021-44228) [![](https://csacyber.com/hubfs/qr-code.jpg)](https://csacyber.com/blog/the-dark-side-of-qr-codes) - [Sarah Lane](https://csacyber.com/blog/author/sarah-lane) - June 2, 2023 ### [The Dark Side of QR Codes](https://csacyber.com/blog/the-dark-side-of-qr-codes) Executive Summary The modern day era is constantly changing and we are increasingly integrating technology into our... [Read more](https://csacyber.com/blog/the-dark-side-of-qr-codes) [![](https://csacyber.com/hubfs/dark-side-of-ai.jpeg)](https://csacyber.com/blog/the-dark-side-of-ai-unravelling-the-next-wave-of-cyber-threats) - [Bilal Mohammed](https://csacyber.com/blog/author/bilal-mohammed) - May 11, 2023 ### [The Dark Side of AI: Unravelling The Next Wave of Cyber Threats](https://csacyber.com/blog/the-dark-side-of-ai-unravelling-the-next-wave-of-cyber-threats) Executive Summary It comes as no surprise that as artificial intelligence (AI) rapidly evolve and becomes more widely... [Read more](https://csacyber.com/blog/the-dark-side-of-ai-unravelling-the-next-wave-of-cyber-threats) [![](https://csacyber.com/hubfs/malverposting.jpg)](https://csacyber.com/blog/the-rise-of-malverposting) - [Sohaib Saif](https://csacyber.com/blog/author/sohaib-saif) - May 4, 2023 ### [The Rise of Malverposting](https://csacyber.com/blog/the-rise-of-malverposting) Executive Summary In recent years, the internet has become a hub for many activities, ranging from online shopping to... [Read more](https://csacyber.com/blog/the-rise-of-malverposting) [![](https://csacyber.com/hubfs/outdated-wordpress.jpeg)](https://csacyber.com/blog/outdated-wordpress-plugin-eval-php) - [Jake Dancey](https://csacyber.com/blog/author/jake-dancey) - April 28, 2023 ### [Outdated WordPress Plugin – Eval PHP](https://csacyber.com/blog/outdated-wordpress-plugin-eval-php) Executive Summary In April 2023, a surge in the use of an outdated WordPress plugin called Eval PHP was reported by... [Read more](https://csacyber.com/blog/outdated-wordpress-plugin-eval-php) [![](https://csacyber.com/hubfs/capita-ransomware-main.jpg)](https://csacyber.com/blog/capita-ransomware-incident-summary) - [Patryk Machowiak](https://csacyber.com/blog/author/patryk-machowiak) - April 27, 2023 ### [Capita Ransomware Incident Summary](https://csacyber.com/blog/capita-ransomware-incident-summary) Executive Summary On the 31st of March at 2:00pm, The Times reporter, Katie Prescott, published an article speculating... [Read more](https://csacyber.com/blog/capita-ransomware-incident-summary) [![](https://csacyber.com/hubfs/Edited-images-2.png)](https://csacyber.com/blog/everything-you-need-to-know-about-cmmc-2.0) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 19, 2023 ### [Everything You Need To Know About CMMC 2.0](https://csacyber.com/blog/everything-you-need-to-know-about-cmmc-2.0) In a recent online briefing, SureCloud’s Risk Advisory Senior Director, Craig Moores, sat down with Senior Consultant... [Read more](https://csacyber.com/blog/everything-you-need-to-know-about-cmmc-2.0) [![](https://csacyber.com/hubfs/Main-nav-images-4-min-555x312.png)](https://csacyber.com/blog/time-to-update-your-video-conference-software) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 11, 2023 ### [Time To Update your Video Conference Software](https://csacyber.com/blog/time-to-update-your-video-conference-software) Jitsi-Meet Authentication Bypass (CVE-2021-33506) At CSA, one of our most vital services is penetration testing. We... [Read more](https://csacyber.com/blog/time-to-update-your-video-conference-software) [![](https://csacyber.com/hubfs/tiktok.jpeg)](https://csacyber.com/blog/are-social-media-apps-like-tiktok-spying-on-us) - [Sohaib Saif](https://csacyber.com/blog/author/sohaib-saif) - March 30, 2023 ### [Are Social Media Apps Like TikTok Spying on us?](https://csacyber.com/blog/are-social-media-apps-like-tiktok-spying-on-us) Executive Summary During the Covid-19 pandemic, TikTok quickly became one of the most popular social media platforms... [Read more](https://csacyber.com/blog/are-social-media-apps-like-tiktok-spying-on-us) [![](https://csacyber.com/hubfs/purecrypter1.jpg)](https://csacyber.com/blog/purecrypter-malware-targets-government-entities-in-asia-pacific-and-north-america) - [Alex Babbage](https://csacyber.com/blog/author/alex-babbage) - March 3, 2023 ### [PureCrypter Malware Targets Government Entities in Asia-Pacific and North America](https://csacyber.com/blog/purecrypter-malware-targets-government-entities-in-asia-pacific-and-north-america) Executive Summary An unidentified threat actor was identified by Menlo Labs using Discord to spread an evasive threat... [Read more](https://csacyber.com/blog/purecrypter-malware-targets-government-entities-in-asia-pacific-and-north-america) [![](https://csacyber.com/hubfs/Edited-images-6.png)](https://csacyber.com/blog/cyber-threat-briefing-assessing-the-russian-cyber-threat-landscape) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 15, 2023 ### [Cyber Threat Briefing: Assessing the Russian Cyber Threat Landscape](https://csacyber.com/blog/cyber-threat-briefing-assessing-the-russian-cyber-threat-landscape) For some years now, geopolitical conflicts have been as much about bits and bytes as they have boots and bullets. The... [Read more](https://csacyber.com/blog/cyber-threat-briefing-assessing-the-russian-cyber-threat-landscape) [![](https://csacyber.com/hubfs/images-15-e1655723792523.png)](https://csacyber.com/blog/pwnkit-/-cve-2021-4034-local-privilege-escalation-in-pkexec) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 15, 2023 ### [PwnKit / CVE-2021-4034 – Local Privilege Escalation in pkexec](https://csacyber.com/blog/pwnkit-/-cve-2021-4034-local-privilege-escalation-in-pkexec) What is it? WPwnKit, discovered by the Qualys Research Team, is a local privilege escalation vulnerability affecting a... [Read more](https://csacyber.com/blog/pwnkit-/-cve-2021-4034-local-privilege-escalation-in-pkexec) [![](https://csacyber.com/hubfs/dev-0569.jpg)](https://csacyber.com/blog/dev-0569-google-ads) - [Thomas Hope](https://csacyber.com/blog/author/thomas-hope) - January 30, 2023 ### [DEV-0569 & Google Ads](https://csacyber.com/blog/dev-0569-google-ads) Executive Summary One of the most important tasks for an attacker using malware to successfully compromise a target, is... [Read more](https://csacyber.com/blog/dev-0569-google-ads) [![](https://csacyber.com/hubfs/cyber-warfre.jpg)](https://csacyber.com/blog/the-use-of-cyber-warfare-alongside-kinetic-warfare) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 17, 2023 ### [The use of Cyber Warfare alongside Kinetic Warfare](https://csacyber.com/blog/the-use-of-cyber-warfare-alongside-kinetic-warfare) Executive Summary Although the ongoing war between Russia and Ukraine is well known since the invasion in February... [Read more](https://csacyber.com/blog/the-use-of-cyber-warfare-alongside-kinetic-warfare) [![](https://csacyber.com/hubfs/trade-mission.jpg)](https://csacyber.com/blog/cyber-security-associates-joins-cyber-trade-mission-to-estonia) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 29, 2022 ### [Cyber Security Associates Joins Cyber Trade Mission to Estonia](https://csacyber.com/blog/cyber-security-associates-joins-cyber-trade-mission-to-estonia) The Founders of Cyber Security Associates (CSA), Dave Woodfine and James Griffiths recently joined members of BPE and... [Read more](https://csacyber.com/blog/cyber-security-associates-joins-cyber-trade-mission-to-estonia) [![](https://csacyber.com/hubfs/images-13.png)](https://csacyber.com/blog/cyber-essentials-evendine-question-set) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 20, 2022 ### [Cyber Essentials Evendine Question Set](https://csacyber.com/blog/cyber-essentials-evendine-question-set) IASME is bringing in a new question set and marking scheme for 2022. These changes will affect both Cyber Essentials... [Read more](https://csacyber.com/blog/cyber-essentials-evendine-question-set) [![](https://csacyber.com/hubfs/trends-ai.jpg)](https://csacyber.com/blog/top-cybersecurity-trends-your-organization-needs-to-watch-out-for-in-2023-and-beyond) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 1, 2022 ### [Top Cybersecurity Trends your Organization Needs to Watch Out for in 2023 and Beyond](https://csacyber.com/blog/top-cybersecurity-trends-your-organization-needs-to-watch-out-for-in-2023-and-beyond) The cybersecurity landscape is more challenging and complex than ever before. The development of intelligent new... [Read more](https://csacyber.com/blog/top-cybersecurity-trends-your-organization-needs-to-watch-out-for-in-2023-and-beyond) [![](https://csacyber.com/hubfs/2022.jpg)](https://csacyber.com/blog/key-cyber-moments-of-2022-what-happened-and-what-have-we-learned) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 1, 2022 ### [Key Cyber Moments Of 2022: What Happened And What Have We Learned?](https://csacyber.com/blog/key-cyber-moments-of-2022-what-happened-and-what-have-we-learned) Whether it’s governments, big corporations, or individuals, any organization with an internet connection is a possible... [Read more](https://csacyber.com/blog/key-cyber-moments-of-2022-what-happened-and-what-have-we-learned) [![](https://csacyber.com/hubfs/apt1.png)](https://csacyber.com/blog/cyber-threat-briefing-through-the-eyes-of-an-advanced-persistent-threat) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - November 23, 2022 ### [Cyber Threat Briefing: Through The Eyes Of An Advanced Persistent Threat](https://csacyber.com/blog/cyber-threat-briefing-through-the-eyes-of-an-advanced-persistent-threat) Today’s threat landscape is more sophisticated than ever before, with every business a potential target. Broadly... [Read more](https://csacyber.com/blog/cyber-threat-briefing-through-the-eyes-of-an-advanced-persistent-threat) [![](https://csacyber.com/hubfs/dcms1.png)](https://csacyber.com/blog/key-findings-from-the-dcms-cyber-security-breaches-survey-2022) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - November 15, 2022 ### [Key findings from the DCMS Cyber Security Breaches Survey 2022](https://csacyber.com/blog/key-findings-from-the-dcms-cyber-security-breaches-survey-2022) The UK government’s Department for Digital, Culture, Media and Sport (DCMS) has released its 2022 Cyber Security... [Read more](https://csacyber.com/blog/key-findings-from-the-dcms-cyber-security-breaches-survey-2022) [![](https://csacyber.com/hubfs/ransomware-seriously.jpg)](https://csacyber.com/blog/every-business-is-a-target) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - November 8, 2022 ### [Every Business is a Target](https://csacyber.com/blog/every-business-is-a-target) Despite ransomware incidents continuing to dominate the cyber-related headlines, there seems to be a misconception... [Read more](https://csacyber.com/blog/every-business-is-a-target) [![](https://csacyber.com/hubfs/vm1.jpg)](https://csacyber.com/blog/successful-vulnerability-management-the-must-know-vulnerabilities-your-business-needs-to-fix) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - September 24, 2022 ### [Successful Vulnerability Management: The Must-Know Vulnerabilities Your Business Needs to Fix](https://csacyber.com/blog/successful-vulnerability-management-the-must-know-vulnerabilities-your-business-needs-to-fix) The Cybersecurity and Infrastructure Security Agency (CISA) in the US recently released its annual top routinely... [Read more](https://csacyber.com/blog/successful-vulnerability-management-the-must-know-vulnerabilities-your-business-needs-to-fix) [![](https://csacyber.com/hubfs/12-1-1.png)](https://csacyber.com/blog/cybersecurity-essentials-for-cloud-environments) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - September 8, 2022 ### [Cybersecurity Essentials for Cloud Environments](https://csacyber.com/blog/cybersecurity-essentials-for-cloud-environments) According to Statista, as of 2022, over 60% of all corporate data is stored in the cloud. This is up from just 30% in... [Read more](https://csacyber.com/blog/cybersecurity-essentials-for-cloud-environments) [![](https://csacyber.com/hubfs/confluence.png)](https://csacyber.com/blog/examining-the-follina-and-confluence-vulnerabilities-risks-remediation-and-vulnerability-management) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 16, 2022 ### [Examining the Follina and Confluence Vulnerabilities: Risks, Remediation, and Vulnerability Management](https://csacyber.com/blog/examining-the-follina-and-confluence-vulnerabilities-risks-remediation-and-vulnerability-management) No single piece of software is perfect, and vulnerabilities are common; but when you consider that the average cost of... [Read more](https://csacyber.com/blog/examining-the-follina-and-confluence-vulnerabilities-risks-remediation-and-vulnerability-management) [![](https://csacyber.com/hubfs/google-play-store.png)](https://csacyber.com/blog/google-play-store-malware) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - July 25, 2022 ### [Google Play Store Malware](https://csacyber.com/blog/google-play-store-malware) Fraudulent Google Play Store Applications are Infecting Unsuspecting Users with Malware Although many users consider it... [Read more](https://csacyber.com/blog/google-play-store-malware) [![](https://csacyber.com/hubfs/bitcoin1.png)](https://csacyber.com/blog/the-devaluing-of-crypto-currency) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - July 4, 2022 ### [The Devaluing of Crypto Currency](https://csacyber.com/blog/the-devaluing-of-crypto-currency) The Ongoing Devaluing of Cryptocurrencies and Potential Impact on Cybercrime “All the \[businesses\] shared a common... [Read more](https://csacyber.com/blog/the-devaluing-of-crypto-currency) [![](https://csacyber.com/hubfs/emotet.png)](https://csacyber.com/blog/google-chrome-emotet-malware) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - June 17, 2022 ### [Google Chrome Emotet Malware](https://csacyber.com/blog/google-chrome-emotet-malware) Google Chrome users are at risk to a new Emotet malware variant that steals Credit Card details If Google Chrome is... [Read more](https://csacyber.com/blog/google-chrome-emotet-malware) [![](https://csacyber.com/hubfs/conti.png)](https://csacyber.com/blog/how-a-ransomware-gang-caused-a-national-emergency) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - May 23, 2022 ### [How A Ransomware Gang Caused A National Emergency](https://csacyber.com/blog/how-a-ransomware-gang-caused-a-national-emergency) Executive Summary Conti are a ransomware group who have been hitting the headlines in recent months, but you might have... [Read more](https://csacyber.com/blog/how-a-ransomware-gang-caused-a-national-emergency) [![](https://csacyber.com/hubfs/metaverse1.png)](https://csacyber.com/blog/why-the-future-of-the-metaverse-depends-on-its-security) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - May 16, 2022 ### [Why The Future Of The Metaverse Depends On Its Security](https://csacyber.com/blog/why-the-future-of-the-metaverse-depends-on-its-security) Executive Summary The metaverse has been making headlines recently, with its promises of merging the digital and... [Read more](https://csacyber.com/blog/why-the-future-of-the-metaverse-depends-on-its-security) [![](https://csacyber.com/hubfs/common-phishing.png)](https://csacyber.com/blog/the-most-common-phishing-themes) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - May 5, 2022 ### [The Most Common Phishing Themes](https://csacyber.com/blog/the-most-common-phishing-themes) Executive Summary Although we’re already a quarter of the way through the year, the cyber security company Zscaler has... [Read more](https://csacyber.com/blog/the-most-common-phishing-themes) [![](https://csacyber.com/hubfs/27001.jpg)](https://csacyber.com/blog/why-should-iso-27001-be-central-to-your-information-security-strategy) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - May 1, 2022 ### [Why Should ISO 27001 Be Central to Your Information Security Strategy?](https://csacyber.com/blog/why-should-iso-27001-be-central-to-your-information-security-strategy) Consumer data privacy has become a key priority for lawmakers across the globe. As a result, regulators are taking a... [Read more](https://csacyber.com/blog/why-should-iso-27001-be-central-to-your-information-security-strategy) [![](https://csacyber.com/hubfs/assessment1.png)](https://csacyber.com/blog/why-you-should-consider-a-cyber-assessment) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 26, 2022 ### [Why You Should Consider A Cyber Assessment](https://csacyber.com/blog/why-you-should-consider-a-cyber-assessment) Executive Summary Most systems evolve over time, especially when it comes to subscriptions to services such as... [Read more](https://csacyber.com/blog/why-you-should-consider-a-cyber-assessment) [![](https://csacyber.com/hubfs/easteregg1.png)](https://csacyber.com/blog/uncovering-the-cracks-in-easter-egg-attacks) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 14, 2022 ### [Uncovering the cracks in Easter egg attacks](https://csacyber.com/blog/uncovering-the-cracks-in-easter-egg-attacks) Executive Summary Hear the phrase ‘Easter egg’, and we bet the first thing that pops into your head is a sweet treat.... [Read more](https://csacyber.com/blog/uncovering-the-cracks-in-easter-egg-attacks) [![](https://csacyber.com/hubfs/appsec.jpg)](https://csacyber.com/blog/how-can-your-organization-implement-its-own-successful-appsec-program) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 5, 2022 ### [How Can Your Organization Implement Its Own Successful AppSec Program?](https://csacyber.com/blog/how-can-your-organization-implement-its-own-successful-appsec-program) Simone Q., Principal Security Consultant, took Nick Hayes, Senior Director of Cyber Solutions at SureCloud, through... [Read more](https://csacyber.com/blog/how-can-your-organization-implement-its-own-successful-appsec-program) [![](https://csacyber.com/hubfs/skimming.jpg)](https://csacyber.com/blog/combating-e-commerce-data-skimming-with-pci-standard-v4.0) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 5, 2022 ### [Combating E-Commerce Data Skimming With PCI Standard v4.0](https://csacyber.com/blog/combating-e-commerce-data-skimming-with-pci-standard-v4.0) It’s been a relatively long time since the Security Standard Council released its last update: The Payment Card... [Read more](https://csacyber.com/blog/combating-e-commerce-data-skimming-with-pci-standard-v4.0) [![](https://csacyber.com/hubfs/stong-auth1.png)](https://csacyber.com/blog/the-new-strong-customer-authentication-rules-for-online-purchases) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - April 1, 2022 ### [The New Strong Customer Authentication Rules for Online Purchases](https://csacyber.com/blog/the-new-strong-customer-authentication-rules-for-online-purchases) Executive Summary Strong Customer Authentication (SCA) became compulsory for services taking all types of electronic... [Read more](https://csacyber.com/blog/the-new-strong-customer-authentication-rules-for-online-purchases) [![](https://csacyber.com/hubfs/okta1.png)](https://csacyber.com/blog/csas-understanding-of-the-okta-data-breach-so-far) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - March 29, 2022 ### [CSA’s Understanding Of The Okta Data Breach So Far](https://csacyber.com/blog/csas-understanding-of-the-okta-data-breach-so-far) Executive Summary When it comes to the Lapsus$ hacking group’s recent breach of Okta, the access management software... [Read more](https://csacyber.com/blog/csas-understanding-of-the-okta-data-breach-so-far) [![](https://csacyber.com/hubfs/connected-medical1.png)](https://csacyber.com/blog/the-cyber-risks-of-connected-medical-devices) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - March 23, 2022 ### [The Cyber Risks of Connected Medical Devices](https://csacyber.com/blog/the-cyber-risks-of-connected-medical-devices) Executive Summary Internet of Things (IoT) devices have become ubiquitous in recent years - there are almost as many of... [Read more](https://csacyber.com/blog/the-cyber-risks-of-connected-medical-devices) [![](https://csacyber.com/hubfs/ransomware-gang1.png)](https://csacyber.com/blog/the-ransomware-gang-that-you-should-be-watching-out-for) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - March 15, 2022 ### [The Ransomware Gang That You Should Be Watching Out For](https://csacyber.com/blog/the-ransomware-gang-that-you-should-be-watching-out-for) Executive Summary Late last year, the FBI issued a warning about the Cuba ransomware group. You may not have heard of... [Read more](https://csacyber.com/blog/the-ransomware-gang-that-you-should-be-watching-out-for) [![](https://csacyber.com/hubfs/cyber-hygine1.png)](https://csacyber.com/blog/emergency-cyber-hygiene-advice) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - March 2, 2022 ### [Emergency Cyber Hygiene Advice](https://csacyber.com/blog/emergency-cyber-hygiene-advice) Executive Summary Many businesses are looking to bolster their cyber defences at the moment, as a result of the... [Read more](https://csacyber.com/blog/emergency-cyber-hygiene-advice) [![](https://csacyber.com/hubfs/critical-infra1.png)](https://csacyber.com/blog/critical-infrastructure-attacks-considerations-for-small-to-medium-enterprises) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 28, 2022 ### [Critical Infrastructure Attacks: Considerations for Small-to-Medium Enterprises](https://csacyber.com/blog/critical-infrastructure-attacks-considerations-for-small-to-medium-enterprises) Executive Summary In the UK, Critical National Infrastructure (CNI) is defined by the National Cyber Security Centre as... [Read more](https://csacyber.com/blog/critical-infrastructure-attacks-considerations-for-small-to-medium-enterprises) [![](https://csacyber.com/hubfs/home-office1.png)](https://csacyber.com/blog/the-cybersecurity-risks-of-remote-working-potential-consequences-and-mitigations) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 18, 2022 ### [The Cybersecurity Risks of Remote Working, Potential Consequences and Mitigations](https://csacyber.com/blog/the-cybersecurity-risks-of-remote-working-potential-consequences-and-mitigations) Executive Summary When the UK government announced all staff could return to offices on the 27th of January 2022, it... [Read more](https://csacyber.com/blog/the-cybersecurity-risks-of-remote-working-potential-consequences-and-mitigations) [![](https://csacyber.com/hubfs/qr-phishing1.png)](https://csacyber.com/blog/qr-code-phishing-attacks-could-be-on-the-rise) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 11, 2022 ### [QR Code Phishing Attacks Could be on the Rise](https://csacyber.com/blog/qr-code-phishing-attacks-could-be-on-the-rise) Executive Summary In the world of phishing, there’s a new(ish) player in the game. A survey conducted by Ivanti... [Read more](https://csacyber.com/blog/qr-code-phishing-attacks-could-be-on-the-rise) [![](https://csacyber.com/hubfs/brata1.png)](https://csacyber.com/blog/why-you-should-be-on-the-lookout-for-brata) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 7, 2022 ### [Why you should be on the lookout for BRATA](https://csacyber.com/blog/why-you-should-be-on-the-lookout-for-brata) Executive Summary IA common misconception is that only Windows, macOS, and Linux computers need cyber security in 2022.... [Read more](https://csacyber.com/blog/why-you-should-be-on-the-lookout-for-brata) [![](https://csacyber.com/hubfs/data-facebook1.png)](https://csacyber.com/blog/your-data-that-facebook-could-be-tracking-in-2022) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - February 3, 2022 ### [Your data that Facebook could be tracking in 2022](https://csacyber.com/blog/your-data-that-facebook-could-be-tracking-in-2022) Executive Summary It’s well-known that Facebook is one of the biggest players in the Information and Big Data industry.... [Read more](https://csacyber.com/blog/your-data-that-facebook-could-be-tracking-in-2022) [![](https://csacyber.com/hubfs/smart-speaker1.png)](https://csacyber.com/blog/the-security-risks-of-smart-speakers) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 25, 2022 ### [The Security Risks Of Smart Speakers](https://csacyber.com/blog/the-security-risks-of-smart-speakers) Executive Summary The IoT, or Internet of Things, encompasses everything connected to the internet, but is increasingly... [Read more](https://csacyber.com/blog/the-security-risks-of-smart-speakers) [![](https://csacyber.com/hubfs/cyber-essentials2.png)](https://csacyber.com/blog/cyber-essentials-changes-what-you-need-to-know) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 24, 2022 ### [Cyber Essentials Changes: What You Need To Know](https://csacyber.com/blog/cyber-essentials-changes-what-you-need-to-know) Executive Summary The Cyber Essentials scheme provides business and organisations with a certification that assures... [Read more](https://csacyber.com/blog/cyber-essentials-changes-what-you-need-to-know) [![](https://csacyber.com/hubfs/ce-critical.png)](https://csacyber.com/blog/cyber-essentials-changes-critical-updates) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 20, 2022 ### [Cyber Essentials Changes: Critical Updates](https://csacyber.com/blog/cyber-essentials-changes-critical-updates) Executive Summary Cyber Essentials is set to receive its biggest update yet soon, on 24th January 2022. The... [Read more](https://csacyber.com/blog/cyber-essentials-changes-critical-updates) [![](https://csacyber.com/hubfs/ce-mfa1.png)](https://csacyber.com/blog/cyber-essentials-changes-multi-factor-authentication) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 18, 2022 ### [Cyber Essentials Changes: Multi-factor Authentication](https://csacyber.com/blog/cyber-essentials-changes-multi-factor-authentication) Executive Summary On 24th January 2022, the newest requirements for the Cyber Essentials scheme will come into force,... [Read more](https://csacyber.com/blog/cyber-essentials-changes-multi-factor-authentication) [![](https://csacyber.com/hubfs/ce-cloud1.png)](https://csacyber.com/blog/cyber-essentials-changes-cloud-services) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 13, 2022 ### [Cyber Essentials Changes: Cloud Services](https://csacyber.com/blog/cyber-essentials-changes-cloud-services) Executive Summary On 24th January 2022, the newest requirements for the Cyber Essentials scheme will come into force,... [Read more](https://csacyber.com/blog/cyber-essentials-changes-cloud-services) [![](https://csacyber.com/hubfs/ce-router1.png)](https://csacyber.com/blog/cyber-essentials-changes-home-routers) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 6, 2022 ### [Cyber Essentials Changes: Home Routers](https://csacyber.com/blog/cyber-essentials-changes-home-routers) Executive Summary Since it launched back in 2014, Cyber Essentials has become the cyber security standard for companies... [Read more](https://csacyber.com/blog/cyber-essentials-changes-home-routers) [![](https://csacyber.com/hubfs/squir1.png)](https://csacyber.com/blog/what-is-squirrelwaffle) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 29, 2021 ### [What is SquirrelWaffle?](https://csacyber.com/blog/what-is-squirrelwaffle) Executive Summary SquirrelWaffle is known as a dropper malware, where it would be used to download additional and... [Read more](https://csacyber.com/blog/what-is-squirrelwaffle) [![](https://csacyber.com/hubfs/cyber-warfare.jpg)](https://csacyber.com/blog/how-can-your-organization-stay-safe-in-the-age-of-cyber-warfare) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 28, 2021 ### [How Can Your Organization Stay Safe in the Age of Cyber Warfare?](https://csacyber.com/blog/how-can-your-organization-stay-safe-in-the-age-of-cyber-warfare) The past decade has seen more than 500 large-scale, state-sponsored cyberattacks, and those are just the ones that have... [Read more](https://csacyber.com/blog/how-can-your-organization-stay-safe-in-the-age-of-cyber-warfare) [![](https://csacyber.com/hubfs/lilac-vulnerability-blog-scaled.jpg)](https://csacyber.com/blog/stored-xss-vulnerability-in-open-edx-platform-lilac-release-2021-08-02-19.11) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 14, 2021 ### [Stored XSS Vulnerability in Open edX Platform Lilac Release-2021-08-02-19.11](https://csacyber.com/blog/stored-xss-vulnerability-in-open-edx-platform-lilac-release-2021-08-02-19.11) TL;DR SureCloud identified a stored cross-site scripting vulnerability (XSS) within the Open edX platform \< Lilac... [Read more](https://csacyber.com/blog/stored-xss-vulnerability-in-open-edx-platform-lilac-release-2021-08-02-19.11) [![](https://csacyber.com/hubfs/akka.jpg)](https://csacyber.com/blog/dos-vulnerability-in-akka-http-10.2.6) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 9, 2021 ### [DoS Vulnerability in Akka-http \<= 10.2.6](https://csacyber.com/blog/dos-vulnerability-in-akka-http-10.2.6) TL;DR SureCloud Cyber identified a denial of service (DoS) vulnerability in Akka-http prior to 10.2.6. An Akka-http... [Read more](https://csacyber.com/blog/dos-vulnerability-in-akka-http-10.2.6) [![](https://csacyber.com/hubfs/12-days2.png)](https://csacyber.com/blog/csa-12-days-of-cyber-christmas) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 8, 2021 ### [CSA 12 Days of Cyber Christmas](https://csacyber.com/blog/csa-12-days-of-cyber-christmas) Executive Summary As the end of the year fast approaches, we wanted to share a little refresher on ways to ensure your... [Read more](https://csacyber.com/blog/csa-12-days-of-cyber-christmas) [![](https://csacyber.com/hubfs/phish2.png)](https://csacyber.com/blog/planning-to-shop-online-this-holiday-season-here-are-the-cybercrimes-you-need-to-be-aware-of) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 1, 2021 ### [Planning To Shop Online This Holiday Season? Here Are The Cybercrimes You Need To Be Aware Of](https://csacyber.com/blog/planning-to-shop-online-this-holiday-season-here-are-the-cybercrimes-you-need-to-be-aware-of) Executive Summary Black Friday and Christmas are considered a blessing and a curse within the retail industry. It’s a... [Read more](https://csacyber.com/blog/planning-to-shop-online-this-holiday-season-here-are-the-cybercrimes-you-need-to-be-aware-of) [![](https://csacyber.com/hubfs/airtag2.png)](https://csacyber.com/blog/this-apple-airtag-vulnerability-could-be-harvesting-your-credentials) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - October 20, 2021 ### [This Apple “AirTag” Vulnerability could be harvesting your credentials](https://csacyber.com/blog/this-apple-airtag-vulnerability-could-be-harvesting-your-credentials) Executive Summary During late September, the headlines were hit with the news of a vulnerability within Apple’s AirTag.... [Read more](https://csacyber.com/blog/this-apple-airtag-vulnerability-could-be-harvesting-your-credentials) [![](https://csacyber.com/hubfs/data2.png)](https://csacyber.com/blog/is-data-more-valuable-than-jewels-the-a-list-cyber-heist-thats-putting-ransomware-attacks-on-the-map) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - October 10, 2021 ### [Is Data More Valuable Than Jewels? The A-List Cyber Heist That’s Putting Ransomware Attacks On The Map](https://csacyber.com/blog/is-data-more-valuable-than-jewels-the-a-list-cyber-heist-thats-putting-ransomware-attacks-on-the-map) Executive Summary Cybercriminals don’t discriminate. It doesn’t matter how famous you are, if your information is... [Read more](https://csacyber.com/blog/is-data-more-valuable-than-jewels-the-a-list-cyber-heist-thats-putting-ransomware-attacks-on-the-map) [![](https://csacyber.com/hubfs/lookout2.png)](https://csacyber.com/blog/csa-adds-lookout-mobile-endpoint-security-to-growing-solutions-portfolio) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - October 6, 2021 ### [CSA adds Lookout Mobile Endpoint Security to growing solutions portfolio](https://csacyber.com/blog/csa-adds-lookout-mobile-endpoint-security-to-growing-solutions-portfolio) Executive Summary Following the global pandemic, the mass migration to remote working was a necessary move. As things... [Read more](https://csacyber.com/blog/csa-adds-lookout-mobile-endpoint-security-to-growing-solutions-portfolio) [![](https://csacyber.com/hubfs/Mina_Blog.jpg)](https://csacyber.com/blog/see-yourself-in-cyber-this-cybersecurity-awareness-month-interview-with-mina-khatun) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - October 5, 2021 ### [See Yourself in Cyber this Cybersecurity Awareness Month: Interview With Mina Khatun](https://csacyber.com/blog/see-yourself-in-cyber-this-cybersecurity-awareness-month-interview-with-mina-khatun) In the penultimate installment of our special Cybersecurity Awareness Month interviews, we sit down with one of CSA’s... [Read more](https://csacyber.com/blog/see-yourself-in-cyber-this-cybersecurity-awareness-month-interview-with-mina-khatun) [![](https://csacyber.com/hubfs/nft2.png)](https://csacyber.com/blog/the-rising-popularity-of-nfts-and-the-rising-security-threat) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - September 15, 2021 ### [The Rising Popularity of NFTs and The Rising Security Threat](https://csacyber.com/blog/the-rising-popularity-of-nfts-and-the-rising-security-threat) Executive Summary The art world is known for being ahead of the curve, adopting new and interesting technologies to... [Read more](https://csacyber.com/blog/the-rising-popularity-of-nfts-and-the-rising-security-threat) [![](https://csacyber.com/hubfs/cyber-training2.png)](https://csacyber.com/blog/is-cyber-training-and-education-working) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 19, 2021 ### [Is Cyber Training and Education working?](https://csacyber.com/blog/is-cyber-training-and-education-working) Executive Summary The report from the ICO on the ‘surprising’ decline in personal data breaches has certainly opened up... [Read more](https://csacyber.com/blog/is-cyber-training-and-education-working) [![](https://csacyber.com/hubfs/tg1021-2.png)](https://csacyber.com/blog/tg1021-praying-mantis-the-new-threat-actor-group-that-could-be-targeting-your-iis-servers) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 19, 2021 ### [TG1021 (Praying Mantis): The new threat actor group that could be targeting your IIS servers!](https://csacyber.com/blog/tg1021-praying-mantis-the-new-threat-actor-group-that-could-be-targeting-your-iis-servers) Executive Summary Recently, an infamous threat actor group going by the name of TG1021 or Praying Mantis, has been... [Read more](https://csacyber.com/blog/tg1021-praying-mantis-the-new-threat-actor-group-that-could-be-targeting-your-iis-servers) [![](https://csacyber.com/hubfs/hacker-600mil.png)](https://csacyber.com/blog/how-did-an-unknown-hacker-steal-over-600m-in-cryptocurrencies-in-the-biggest-ever-crypto-based-cyber-attack) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - August 13, 2021 ### [How did an unknown hacker steal over $600M in cryptocurrencies in the biggest ever crypto based cyber-attack?](https://csacyber.com/blog/how-did-an-unknown-hacker-steal-over-600m-in-cryptocurrencies-in-the-biggest-ever-crypto-based-cyber-attack) Executive Summary On 10th August 2021, Poly Network announced in a tweet that it had been attacked. Not only had their... [Read more](https://csacyber.com/blog/how-did-an-unknown-hacker-steal-over-600m-in-cryptocurrencies-in-the-biggest-ever-crypto-based-cyber-attack) [![](https://csacyber.com/hubfs/prevent-ransom1.png)](https://csacyber.com/blog/how-to-prevent-a-ransomware-attack) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - May 12, 2021 ### [How to Prevent a Ransomware Attack](https://csacyber.com/blog/how-to-prevent-a-ransomware-attack) Executive Summary According to a 2020 survey by Sophos, 51% of organisations were hit by Ransomware in the last year.... [Read more](https://csacyber.com/blog/how-to-prevent-a-ransomware-attack) [![](https://csacyber.com/hubfs/m365-1.png)](https://csacyber.com/blog/is-your-microsoft-m365-service-secure-from-attackers-are-you-sure) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - March 23, 2021 ### [Is your Microsoft M365 service secure from attackers? Are you sure?](https://csacyber.com/blog/is-your-microsoft-m365-service-secure-from-attackers-are-you-sure) Executive Summary The mass migration to remote working as a result of the coronavirus pandemic has seen many... [Read more](https://csacyber.com/blog/is-your-microsoft-m365-service-secure-from-attackers-are-you-sure) [![](https://csacyber.com/hubfs/remote-working1.png)](https://csacyber.com/blog/covid-19-how-to-prepare-your-staff-for-remote-working) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - January 10, 2021 ### [Covid-19: How to prepare your staff for remote working](https://csacyber.com/blog/covid-19-how-to-prepare-your-staff-for-remote-working) Executive Summary Since the initial Covid-19 outbreak, the nation’s workforce had to learn to quickly learn to adapt to... [Read more](https://csacyber.com/blog/covid-19-how-to-prepare-your-staff-for-remote-working) [![](https://csacyber.com/hubfs/cyber-virus1.png)](https://csacyber.com/blog/covid-19-cyber-criminals-launch-their-own-virus) - [Cyber Security Associates](https://csacyber.com/blog/author/cyber-security-associates) - December 13, 2020 ### [Covid-19: Cyber Criminals Launch Their Own ‘Virus’](https://csacyber.com/blog/covid-19-cyber-criminals-launch-their-own-virus) Executive Summary Whilst the world is currently preoccupied with public health, cyber attackers have taken advantage of... [Read more](https://csacyber.com/blog/covid-19-cyber-criminals-launch-their-own-virus) [![CSA Cyber Logo FNL\_Full Logo](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=3463&height=1248&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber Logo FNL_Full Logo")](https://csacyber.com/) Established in 2013, Cyber Security Associates Limited trading as CSA Cyber provides cyber consultancy and cyber managed services which help to detect, protect and educate against the ever-changing cyber threat. We have built our team from a foundation of Government (ex-Military) and Commercially experienced specialists all holding current and relevant cyber certifications. Today our core services are based around a 24/7 Security Operations Centre (SOC) based in Gloucester. #### News & Resources - [Blog](https://csacyber.com/blog) - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Careers](https://csacyber.com/careers) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) #### Quick Links - [About Us](https://csacyber.com/about-us) - [Certifications](https://csacyber.com/certifications-and-awards) - [Our Parent Company](https://www.fluidone.com) - [Partners](https://csacyber.com/partners) - [Contact Us](https://csacyber.com/contact-us) - [Anti Bribery Policy](https://csacyber.com/hubfs/CSAAnti-BriberyPolicy.pdf) - [Complaints Policy](https://csacyber.com/hubfs/CSAComplaintsPolicy.pdf) - [Corporate Social Responsibility Policy](https://csacyber.com/hubfs/CSACorporateSocialResponsibilityPolicy.pdf) - [Slavery and Human Trafficking Statement](https://csacyber.com/hubfs/CSASlaveryandHumanTraffickingStatement.pdf) - [NCSC CHECK Status Verification](https://www.ncsc.gov.uk/organisation/csa-cyber/check-penetration-testing) - [CREST Approved Certification Verification](https://www.crest-approved.org/member_companies/csa-cyber/) #### Contact Information **United Kingdom - London** Cyber Security Associates Ltd 5 Hatfields, London, SE1 9PG   **United Kingdom - Gloucester** Cyber Security Associates Ltd Unit 11, Wheatstone Court, Waterwells Business Park, GL2 2AQ   **Phone:** [+44(0) 300 303 4691](tel:03003034691) **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   **United States of America** Cyber Security Associates Inc. 6010 W. Spring Creek Pkwy, Plano, Texas, 75024   **Phone:** [+1 469 750 1695](tel:14697501695)  **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   [![trust-pilot](https://csacyber.com/hs-fs/hubfs/trust-pilot.png?width=178&height=104&name=trust-pilot.png)](https://uk.trustpilot.com/review/csa.limited)   --- - [Website Terms of Use](https://csacyber.com/website-terms-of-use) - [Website Privacy Policy](https://csacyber.com/privacy-notice) - [Website Cookie Policy](https://csacyber.com/cookie-policy) Copyright 2026. Cyber Security Associates Ltd [Follow us on Facebook](https://www.facebook.com/CSALIMITED/) [Follow us on LinkedIn](https://www.linkedin.com/company/csa-cyber/) [Follow us on Twitter](https://twitter.com/cybersecurityis) [Follow us on Facebook](https://www.youtube.com/@cybersecurityassociateslim) [Follow us on Facebook](https://www.instagram.com/cybersecurityassociates)