Category Archives: defence in depth

Protect Before You Detect: FlawedAmmyy and the Case for Isolation

Posted on by

Posted by Ratnesh Pandey, Alex Holland and Toby Gray. In June 2019, Microsoft issued warnings about a phishing campaign delivering a new variant of the FlawedAmmyy remote access Trojan (RAT), and a spike in the exploitation of CVE-2017-11882&… Continue reading Protect Before You Detect: FlawedAmmyy and the Case for Isolation→

Defence In Depth For Web Applications

Posted on by

Defence in depth for web applications is something that not many companies apply even though the model itself is nothing new. Defence in depth refers to applying security controls across multiple layers, typically Data, Application, Host, Internal Netw… Continue reading Defence In Depth For Web Applications→