Data breaches: What you need to know
We all know data breaches = bad, but how bad can they really be? In early 2019, information security researcher and Have I been Pwned (HIBP) founder, Troy Hunt, stumbled across the largest data dump …
Hardware Hacks
When we talk about computer security, a lot of the focus is on the software and networks that we use – but never, ever, do we think about our hardware, or hardware that can be …
Is WAR Dialling a Thing Of The Past?
War Dialling – a Thing of the Past or the Return of Forgotten Evil? Are you part of an organisation that performs war dialling as part of their regular external security audits? I can almost guarantee …
DPIA – The Scary Elephant in the Data Protection Room
Data Protection Impact Assessment, or DPIA for short. Even the acronym can strike fear into the hearts of those struggling with data protection compliance. But, those people are not alone – some experts would probably …
Directory Listing & Information Disclosure
First and foremost, what exactly is directory listing? Put simply, it’s a feature that’s usually enabled by default on most web servers that allows the content of the server to be listed when there’s no …
Press Release: Commissum recently acquired by Eurofins Digital Testing
It has been officially announced today that Commissum has been acquired by Eurofins Digital Testing – a global leader in end-to-end quality assurance and testing services, adding to its portfolio of information and cyber security services for …
The legend of Tom, Dick or Harriet: a tale of physical security and social engineering
The following is based on real events; names and other details have been changed to maintain confidentiality and protect the innocent. When anyone mentions “cyber security” and “information security”, many of us immediately think of …