Information security is a fast paced industry. Everyday, people are dropping exciting projects on GitHub, data breaches keep journalists in work, universities teach the next generation of practitioners and security companies churn out invoices. It’s all frenetic, it’s a turbo …
We recently saw a video posted by the London Fire Brigade on Twitter and it got us thinking. I’m sure followers of the blog know just what we thought already… It’s probably best to rate the London Fire Brigade on …
Followers of the blog will know that I’m not a fan of SMS. It’s spoofable, it’s hackable, it’s from 1981. I can’t even have a meal out in peace without finding SMS weaknesses that take over some random service. So …
Hosting a meet up in 2019 was a rather easy affair. You put the word out to your friends and peers, dropped a little hype on social media and headed to M&S to grab some snacks and few bottles of …
In this guest blog we speak to Ed Tucker (@teddybreath). There is more to this dark horse than CISO of the year and I reckon he has a few tips up his sleeve for organisations. Let’s give him a shake …
For those of you wanting a technical debrief of what happened, this blog might not be for you. I actually want to focus on something completely different. Please take the TL;Dr and be on your merry way. This is a …
True to form, cybercriminals are out in force trying to exploit the recent COVID issue. According to Action-Fraud, they have already netted close to £970,000 from UK victims. Source: Why use COVID-19 in scams? In phishing simulations, we see a …
According to reputable sources, around 95% of the cases reported to Action Fraud are left unsolved. It’s unsure at which step of the journey the case could get shelved – but sadly the figures don’t make for good reading. Take …
In July 2019, Ofcom introduced a new way to handle number portability for UK customers. The idea was a simple one, make it possible for people to text ‘PAC’ to 65075 and within seconds a SIM porting request is in …
It’s now long a long established fact that HTTP is insecure. For those who don’t know, your data isn’t securely encrypted when sent between your device and the website. The lack of security means cybercriminals can easily take a copy …
You might have missed last weeks incident on Twitter. It started off as a casual bit of annoyance, but quickly escalated in to a full on witch hunt for the Police. For those of you hiding under a rock and …
The world of Red-teams and Social Engineering can be quite insular. As someone who founded The AntiSocial Engineer, I know that was almost part of the design and philosophy at the time. We weren’t interested in doing things like other …
I recently had the pleasure to watch a talk at BSides Leeds by Darren Martyn. He’s a security researcher who really understands the criminal ecosystem of stolen credentials. The talk focussed on ‘scum lords’, the term he chooses for those …
