by Richard Merrygold | Oct 8, 2021 | Insights
On a recent web application pentest I was given two different subdomains in scope for the engagement. One of the subdomains had only 1 functionality available for testing (as the rest were out-of-scope) which contained an input field for commenting and the ability to...
by Richard Merrygold | Aug 12, 2021 | Insights
Microsoft has been hit with yet again another critical vulnerability in 2021 by security researcher @jonasLyk who discovered this zero-day while messing around with the upcoming Windows 11 OS – Microsoft’s latest product set to release late this year. If you’ve been...
by Richard Merrygold | Aug 2, 2021 | Insights
In the news recently it has been reported that from a list of more than 50,000 phone numbers, journalists identified that more than 1,000 people in 50 countries are under surveillance using the Pegasus spyware. This particular software was developed by NSO group an...
by Richard Merrygold | Jul 22, 2021 | Insights
Incidents of ransomware attacks have exploded in the past year due to the rise of cryptocurrency and the increase of homeworking making computers more vulnerable. In recent months we have seen major attacks on the Colonial Pipeline, JBS, and most recently a...
by Richard Merrygold | Jun 30, 2021 | Insights
The US Department of Defense (DoD) supply chain is vast – with over three-quarters of a million suppliers making up what is known as the Defense Industrial Base (DIB). Each supplier supports an array of defence projects, and a data breach at any of these contractors...
by Richard Merrygold | Jun 22, 2021 | Insights
The GDPR has had a major impact on many charities and not-for-profits. For charities, the change with GDPR meant ensuring people have a clear choice about the information that is held about them and how it is used. Procedures had to be altered to give users more of a...
