by Richard Merrygold | Oct 13, 2021 | Insights
Charities are becoming increasingly vulnerable in the current threat landscape. The databases that they hold full of personal and financial information are the targets for cybercriminals. Losing this information can have a significant impact on the charity’s...
by Richard Merrygold | Oct 8, 2021 | Insights
On a recent web application pentest I was given two different subdomains in scope for the engagement. One of the subdomains had only 1 functionality available for testing (as the rest were out-of-scope) which contained an input field for commenting and the ability to...
by Richard Merrygold | Aug 12, 2021 | Insights
Microsoft has been hit with yet again another critical vulnerability in 2021 by security researcher @jonasLyk who discovered this zero-day while messing around with the upcoming Windows 11 OS – Microsoft’s latest product set to release late this year. If you’ve been...
by Richard Merrygold | Aug 2, 2021 | Insights
In the news recently it has been reported that from a list of more than 50,000 phone numbers, journalists identified that more than 1,000 people in 50 countries are under surveillance using the Pegasus spyware. This particular software was developed by NSO group an...
by Richard Merrygold | Jul 22, 2021 | Insights
Incidents of ransomware attacks have exploded in the past year due to the rise of cryptocurrency and the increase of homeworking making computers more vulnerable. In recent months we have seen major attacks on the Colonial Pipeline, JBS, and most recently a...
by Richard Merrygold | Jun 30, 2021 | Insights
The US Department of Defense (DoD) supply chain is vast – with over three-quarters of a million suppliers making up what is known as the Defense Industrial Base (DIB). Each supplier supports an array of defence projects, and a data breach at any of these contractors...