Introduction With a large amount of confidential and/or proprietary information residing on and flowing through a...
Introduction With ever more integration of applications and systems into Active Directory, hardening the security of a...
Introduction On September 26th an Italian security researcher released details regarding an unauthenticated remote...
TL;DR CSA identified multiple vulnerabilities within iRedAdmin <= 2.5 which are tracked under CVE-2024-47227. iRedAdmin...
Overview In recent July Patch Tuesday Microsoft patched a vulnerability in the Microsoft Kernel driver appid.sys, which...
The financial and reputational damage caused by a cyberattack can be devastating for governments and organizations....
What is DORA? The Digital Operational Resilience Act is a European framework that establishes a uniform approach...
It’s time for your organization to take action and transition to PCI DSS v4.0 Compliance. The Payment Card Industry...
Overview With remote desktop protocol (RDP) compromises on the rise, Microsoft Defender for Endpoint has introduced a...
We commit to uphold the Armed Forces Covenant and support the Armed Forces Community. We recognise the contribution...
Once more, we are in the midst of a cyber ransomware attack. Today's target is Synnovis, an NHS blood testing provider...
In recent months ransomware attacks have undoubtedly picked up pace as well as impact. There have been high-profile...
Electronic voting or e-vote is the process of casting a vote electronically from a computer phone or tablet.
Have you ever come across a laptop, server or desktop computer that has Full Device Encryption (FDE) and protected by a...
Executive Summary The purpose of this report is to document the current form and methodologies used by the GoldFactory...
Do you take your security seriously? In this blog, you’ll learn why incident response testing is vital to your...
What is an ISMS program? The NCSC defines penetration testing as “A method for gaining assurance in the security of an...
Cybercrime isn’t going anywhere, and its impact continues to have devastating consequences for individuals and...
Executive Summary The purpose of this report is to document the current form and methodologies used by the Volt Typhoon...
The long-awaited latest iteration of the Payment Card Industry (PCI) Data Security Standard (DSS) is here! What is PCI...
London, UK – 13th March 2024 - FluidOne, the market-leading provider of Connected Cloud Solutions, announced today that...
According to the National Cyber Security Centre (NCSC) there were 6.4 million reports of suspicious email activity in...
Last year, Gartner forecast that worldwide spending on security and risk management would soon exceed $150 billion, a...
British Library Cyber-attack Sends Shockwaves Through Business Community In a startling turn of events, the British...
In a new report published by the World Economic Forum, entitled Global Cybersecurity Outlook 2022, more than 40% of...
Unseen Threats: Navigating the Landscape of Zero-Click Attacks in Cyberspace In our interconnected global landscape...
For almost two years now, the US Department of Defense (DOD) has been reviewing a process designed to ensure defense...
The past eighteen months have been tumultuous to say the least. As well as struggling with the fallout from a global...
C2 Framework - MuddyC2Go A C2 Framework (Command and Control) is a set of tools and protocols which allow red teamers...
In the ever-evolving landscape of cybersecurity threats, a new ongoing campaign has emerged, known as the Elektra-Leak....
As Ransomware groups continue to grow, they become increasingly sophisticated and organised, developing help centres...
October is Cybersecurity Awareness Month, which is an initiative led by the Cybersecurity and Infrastructure Security...
Ransomware attacks have been taking up a large proportion of the news headlines, but that doesn’t mean there haven’t...
Organizations’ compliance programs have had to evolve over recent years to incorporate new ways of working, new...
QR codes, also known as Quick Response codes, have become increasingly popular in recent years. They are a convenient...
Since the Biden administration took office in the US, cybersecurity has been a top government priority. Major cyber...
It’s no secret that wearable technology, such as smartwatches and fitness trackers, are increasingly becoming a key...
Information security is a very broad field. It spans across misuse of enterprise information, disruption, unauthorised...
When we park or store our cars overnight, we often give thought to the valuable items, careful not to leave them in...
Organizations needing to comply with the Payment Card Industry Data Security Standard (PCI DSS) will already be...
With the increased commonplace of 5G technology around the country, interesting and unique challenges have come...
As the world transitions to PCI DSS v4.0, both enterprises and assessors are adjusting their operational strategies to...
It’s been a busy first half of the year for the cybersecurity sector. The threat landscape remains increasingly...
Imagine that after a hard day’s work, you suddenly receive a multitude of multifactor authentication (MFA) prompts...
When it comes to the Payment Card Industry Data Security Standard (PCI DSS), there are common mistakes that every QSA...
Pentesting Keycloak – Part 2 This is part 2/2 of “Pentesting Keycloak”, this section will cover:
Just over 18 months ago, Cyber Security Associates Limited (CSA) took the decision to use the Microsoft Security stack...
Threat actors linked to the BlackCat ransomware have been seen using malvertising strategies to propagate malicious...
Our reliance on mobile phones has soared to unprecedented heights. We entrust them with everything; from banking to...
What is Keycloak? Keycloak is an open-source Identity and Access Management (IAM) solution. It allows easy...
Trying to stay fully compliant today can be like trying to hit a moving target. The regulatory landscape is now...
You may have heard the saying “A chain is only as strong as its weakest link”. Recent cyber security attacks have shown...
SentinelOne Managed Security Service Prodiver (MSSP) Cyber Security Associates has partnered with SentinelOne to...
Executive Summary Capita is a British multinational company that specializes in business process outsourcing and...
What is it? CVE-2021-44228, also known as Log4Shell, is a remote code execution (RCE) vulnerability affecting Apache...
Executive Summary The modern day era is constantly changing and we are increasingly integrating technology into our...
Executive Summary It comes as no surprise that as artificial intelligence (AI) rapidly evolve and becomes more widely...
Executive Summary In recent years, the internet has become a hub for many activities, ranging from online shopping to...
Executive Summary In April 2023, a surge in the use of an outdated WordPress plugin called Eval PHP was reported by...
Executive Summary On the 31st of March at 2:00pm, The Times reporter, Katie Prescott, published an article speculating...
In a recent online briefing, SureCloud’s Risk Advisory Senior Director, Craig Moores, sat down with Senior Consultant...
Jitsi-Meet Authentication Bypass (CVE-2021-33506) At CSA, one of our most vital services is penetration testing. We...
Executive Summary During the Covid-19 pandemic, TikTok quickly became one of the most popular social media platforms...
Executive Summary An unidentified threat actor was identified by Menlo Labs using Discord to spread an evasive threat...
For some years now, geopolitical conflicts have been as much about bits and bytes as they have boots and bullets. The...
What is it? WPwnKit, discovered by the Qualys Research Team, is a local privilege escalation vulnerability affecting a...
Executive Summary One of the most important tasks for an attacker using malware to successfully compromise a target, is...
Executive Summary Although the ongoing war between Russia and Ukraine is well known since the invasion in February...
The Founders of Cyber Security Associates (CSA), Dave Woodfine and James Griffiths recently joined members of BPE and...
IASME is bringing in a new question set and marking scheme for 2022. These changes will affect both Cyber Essentials...
The cybersecurity landscape is more challenging and complex than ever before. The development of intelligent new...
Whether it’s governments, big corporations, or individuals, any organization with an internet connection is a possible...
Today’s threat landscape is more sophisticated than ever before, with every business a potential target. Broadly...
The UK government’s Department for Digital, Culture, Media and Sport (DCMS) has released its 2022 Cyber Security...
Despite ransomware incidents continuing to dominate the cyber-related headlines, there seems to be a misconception...
The Cybersecurity and Infrastructure Security Agency (CISA) in the US recently released its annual top routinely...
According to Statista, as of 2022, over 60% of all corporate data is stored in the cloud. This is up from just 30% in...
No single piece of software is perfect, and vulnerabilities are common; but when you consider that the average cost of...
Fraudulent Google Play Store Applications are Infecting Unsuspecting Users with Malware Although many users consider it...
The Ongoing Devaluing of Cryptocurrencies and Potential Impact on Cybercrime “All the [businesses] shared a common...
Google Chrome users are at risk to a new Emotet malware variant that steals Credit Card details If Google Chrome is...
Executive Summary Conti are a ransomware group who have been hitting the headlines in recent months, but you might have...
Executive Summary The metaverse has been making headlines recently, with its promises of merging the digital and...
Executive Summary Although we’re already a quarter of the way through the year, the cyber security company Zscaler has...
Consumer data privacy has become a key priority for lawmakers across the globe. As a result, regulators are taking a...
Executive Summary Most systems evolve over time, especially when it comes to subscriptions to services such as...
Executive Summary Hear the phrase ‘Easter egg’, and we bet the first thing that pops into your head is a sweet treat....
Simone Q., Principal Security Consultant, took Nick Hayes, Senior Director of Cyber Solutions at SureCloud, through...
It’s been a relatively long time since the Security Standard Council released its last update: The Payment Card...
Executive Summary Strong Customer Authentication (SCA) became compulsory for services taking all types of electronic...
Executive Summary When it comes to the Lapsus$ hacking group’s recent breach of Okta, the access management software...
Executive Summary Internet of Things (IoT) devices have become ubiquitous in recent years - there are almost as many of...
Executive Summary Late last year, the FBI issued a warning about the Cuba ransomware group. You may not have heard of...
Executive Summary Many businesses are looking to bolster their cyber defences at the moment, as a result of the...
Executive Summary In the UK, Critical National Infrastructure (CNI) is defined by the National Cyber Security Centre as...
Executive Summary When the UK government announced all staff could return to offices on the 27th of January 2022, it...
Executive Summary In the world of phishing, there’s a new(ish) player in the game. A survey conducted by Ivanti...
Executive Summary IA common misconception is that only Windows, macOS, and Linux computers need cyber security in 2022....
Executive Summary It’s well-known that Facebook is one of the biggest players in the Information and Big Data industry....
Executive Summary The IoT, or Internet of Things, encompasses everything connected to the internet, but is increasingly...
Executive Summary The Cyber Essentials scheme provides business and organisations with a certification that assures...
Executive Summary Cyber Essentials is set to receive its biggest update yet soon, on 24th January 2022. The...
Executive Summary On 24th January 2022, the newest requirements for the Cyber Essentials scheme will come into force,...
Executive Summary On 24th January 2022, the newest requirements for the Cyber Essentials scheme will come into force,...
Executive Summary Since it launched back in 2014, Cyber Essentials has become the cyber security standard for companies...
Executive Summary SquirrelWaffle is known as a dropper malware, where it would be used to download additional and...
The past decade has seen more than 500 large-scale, state-sponsored cyberattacks, and those are just the ones that have...
TL;DR SureCloud identified a stored cross-site scripting vulnerability (XSS) within the Open edX platform < Lilac...
TL;DR SureCloud Cyber identified a denial of service (DoS) vulnerability in Akka-http prior to 10.2.6. An Akka-http...
Executive Summary As the end of the year fast approaches, we wanted to share a little refresher on ways to ensure your...
Executive Summary Black Friday and Christmas are considered a blessing and a curse within the retail industry. It’s a...
Executive Summary During late September, the headlines were hit with the news of a vulnerability within Apple’s AirTag....
Executive Summary Cybercriminals don’t discriminate. It doesn’t matter how famous you are, if your information is...
Executive Summary Following the global pandemic, the mass migration to remote working was a necessary move. As things...
In the penultimate installment of our special Cybersecurity Awareness Month interviews, we sit down with one of CSA’s...
Executive Summary The art world is known for being ahead of the curve, adopting new and interesting technologies to...
Executive Summary The report from the ICO on the ‘surprising’ decline in personal data breaches has certainly opened up...
Executive Summary Recently, an infamous threat actor group going by the name of TG1021 or Praying Mantis, has been...
Executive Summary On 10th August 2021, Poly Network announced in a tweet that it had been attacked. Not only had their...
Executive Summary According to a 2020 survey by Sophos, 51% of organisations were hit by Ransomware in the last year....
Executive Summary The mass migration to remote working as a result of the coronavirus pandemic has seen many...
Executive Summary Since the initial Covid-19 outbreak, the nation’s workforce had to learn to quickly learn to adapt to...
Executive Summary Whilst the world is currently preoccupied with public health, cyber attackers have taken advantage of...