Reinforce Your Cybersecurity Operations and Compliance Program with XDRCompliance Frameworks Provide the Minimum-Security Controls for Your Business-But They’re Not Enough on Their OwnOrganizations need to perform risk-based analysis of existing securi…
My company uses multiple tools for vulnerability scanning. We have Nessus Pro for network scanning, White Source Bolt and GitHub Dependabot for dependencies, and SonarQube for source code, and Burp Suite Pro for web applications.
These mak…
What items should be considered to create a browser that prevents all access to stored credentials by a malicious process? Hardware attacks being out of scope.
Are there public projects addressing this?
In an attempt to answer this myself,…
Download our whitepaper and tool
This blog is a condensed version of a whitepaper we’ve released, called “Process Hiving”. It comes with a new tool too, “RunPE”. You can download these at the links below.
Whitepaper
Our…
How’s Your Security Strategy? Accelerate your Maturity with Automation and Vulnerability PrioritizationIf we can automate discovery, scanning and vulnerability prioritization, we can accelerate maturity and provide those tasked with developing a progra…
The UK Cyber Security Council – the charitable, self-regulatory body for the cyber security education and skills sector – today announced the appointment of Simon Hepburn, a charity and education executive with over twenty years’ experienc…
I need to encrypt personal data like email, phone number, etc. I am using AWS KMS for managing the encryption keys. This is the system that is already implemented is as follows:
All the existing data is encrypted using a worker which firs…
Is traditional CSRF PoC (e.g. described here) effective for testing in this environment
Specifically if PoC only involved one account – of course, given presence of ADFS SSO…so not counting the final 3 steps described above.
I recently learned about DOSBox-X. It’s basically a somewhat less awful version of the basically-abandoned DOSBox.
I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare metal PC. It’s the only computer I have. I…
Now that I’ve purchased and programmed a couple of YubiKeys, I have a question about the security and usefulness of such security keys.
Assume in the following scenarios that one’s username is easily guessed. For most professional cloud ac…
