In Case of Fire: Break Windows

When a client calls us to pentest a web application that is only available in Internet Explorer. I cringe. I don’t know if it’s flashbacks from the countless hours spent getting a website compatible with IE, or the trauma from bad UX growin… Continue reading In Case of Fire: Break Windows→

Top 10 Podcast Episodes from 2019

Thank you for supporting and listening to the show this year! Initial data on our download numbers show that we’ve grown our audience by over 40% in 2019! Having said that, if you haven’t listened to our most popular episodes you should def… Continue reading Top 10 Podcast Episodes from 2019→

Hackers Come for Oil and Gas

Last month’s ransomware attack against the Mexican oil firm Pemex showed how the oil industry’s embrace of digital technology has made them a high-value target for hackers. The attack—a strain of ransomware that targets companies with… Continue reading Hackers Come for Oil and Gas→

How to test employee cyber competence through pen-testing

Social engineering hacking preys on the vulnerabilities inherent in human psychology, so it’s vital for organizations to test employee cyber competence. Take the Nigerian 419 scam as an example – the scammer tries to convince the victim to help g… Continue reading How to test employee cyber competence through pen-testing→

Cybersecurity workforce skills gap rises to over 4 million

The estimated current cybersecurity workforce is 2.8 million professionals, while the amount of additional trained staff needed to close the skills gap is 4.07 million professionals, according to (ISC)2. The data indicates a necessary cybersecurity wor… Continue reading Cybersecurity workforce skills gap rises to over 4 million→

Immersive Labs Raises $40M for Cybersecurity Training

The chronic shortage of cybersecurity professionals appears to be finally driving major investments in online learning platforms focused on cybersecurity training. Immersive Labs this week raised an additional $40 million in funding that will be used … Continue reading Immersive Labs Raises $40M for Cybersecurity Training→

Cybersecurity is About Teamwork, Not Individuals

More and more, businesses blame cyberattacks on “human error,” that single employee who, either accidentally or maliciously, made a decision that resulted in a security breach. You probably remember the 2017 Equifax breach that exposed over… Continue reading Cybersecurity is About Teamwork, Not Individuals→

Phishing attacks are a complex problem that requires layered solutions

Most cyber attacks start with a social engineering attempt and, most often that not, it takes the form of a phishing email. It’s easy to understand the popularity of this attack vector: phishing campaigns are relatively inexpensive (money- and ti… Continue reading Phishing attacks are a complex problem that requires layered solutions→

Phishing Just Got More Complicated

Last month, the FBI released a note warning businesses that hackers are bypassing two-factor authentication. Two-factor authentication is usually seen as extra secure because it not only requires your username and passcode but also a unique security to… Continue reading Phishing Just Got More Complicated→