Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

April 2023

Vulnerability Highlight: WordPress Error-Based Information & Exposure

By default, the WordPress administrative login page displays a helpful error message whenever an account user types in the wrong username/email address or password. Unfortunately, these same helpful error messages can also be abused to assist a threat actor to validate account usernames/email addresses and/or passwords. An incorrect username/password guess combination generates the following error message: “The username ‘name-entered’ is not registered on this site”.

Incident Response Service Breakdown

Incident response is a comprehensive approach to dealing with potential security incidents, such as unauthorised access, data breaches, and malicious attacks that might affect an organisation’s network. The goal of incident response is not just to contain the threat but also to learn from it by understanding what happened, why it happened, and how it can be prevented from happening in the future.

Why is Cybersecurity Training not Working?

Cybersecurity threats are constantly evolving, and organisations need to stay ahead of these threats. This is to protect their data and systems. Data breaches cost the UK an average of £2.9 million per breach, 82% of breaches involving the human element. Moreover, those factors alone are usually enough to convince people that cybersecurity awareness needs improving and training to mitigate this. One way they can do this is by providing employees with cybersecurity awareness and training.

How to Interpret and Respond to Penetration Testing Results

A Penetration Test can provide you with a wealth of information about the security of your systems and how vulnerable they are to attack. The results of a penetration test can help you understand where your weaknesses are and what needs to be done to fix them. These results are reviewed from low to critical to give you a clear understanding of how severe the vulnerability is.

Netwire Attack

Todays Headline: International law enforcement operation involving the FBI and police agencies worldwide led to the arrest of a suspected administrator of the net remote access Trojan and the seizure of the services domain and hosting server. NetWire was a remote access trojan promoted as a legitimate remote administration tool to manage a Windows computer remotely.

How Does Cybercrime Affect The Gaming Industry?

Cybercrime can have a devastating effect on the gaming industry. Cases of identity theft, piracy, account takeovers, hacking and cyber-attacks are all common in this sector and they can cause financial losses and damage to a business’s reputation. Since the pandemic, cybercrime in the gaming industry was expected to settle, but the ongoing problem continues to rise in the gaming industry.