Kick Cyber Security Into Gear - Page 12 Of 21 - ASAP = As Secure As Practical, As Soon As Possible

Tel: (+61) 422 933 319

Email: [email protected]

Articles, Breach
It all adds up!
I had no idea at all! over 100 notifiable and probable “State Based” significant hacks to October 2021 – either against government orgs or with a value of more than $1 million. Four of those were against Australian government orgs and one against a New Zealand Government org. One of our business partner orgs who…
Read More: It all adds up!
kicksec.IO
16/11/2021
Articles, Cyber Security Framework
Board level: concepts and explanations
Have you ever “lost” you audience when presenting a solution to your board of directors? no matter how hard you try to explain why your company needs this cyber security widget or process, they do not understand “your” urgency nor accept what you are explaining? Try this at home when you are passionate about a…
Read More: Board level: concepts and explanations
kicksec.IO
14/11/2021
Articles, Malware, Phishing
phonespy: Mobile app targeting South Korean citizens
Worrying trend in that criminals are using mobile apps to steal data from our devices. PhoneSpy only affects Android and is not an Android Playstore app, rather it is side loaded via web traffic redirection or social engineering. PhoneSpy is able to access personal images, videos, phone logs, stored data, as well as taking photos…
Read More: phonespy: Mobile app targeting South Korean citizens
kicksec.IO
11/11/2021
Advanced Managed Detect Response, AMDR, Articles, Endpoint Detection Response, Extended Detection Response
Zero Trust vendor architecture: Ethical, or not ethical?
A vulnerability is disclosed in Palo Alto VPN hardware/software, the company who discovered this: Randori may not have disclosed this to the vendor in a timely fashion. The premise that is suggested for this, is that as Randori are a Red Teaming company they used this Vulnerability to infiltrate their clients who used Palo Alto…
Read More: Zero Trust vendor architecture: Ethical, or not ethical?
kicksec.IO
11/11/2021
Advanced Managed Detect Response, AMDR, Articles, Breach, Endpoint Detection Response, Extended Detection Response
No business too small to be a target for Cyber crime
Small to Mid enterprise companies in Australia are extremely vulnerable to revenue disruption and most likely financial disaster from cyber breach – Auto parts importer lost $880k 2 months ago as an example, not the typical target for a cyber criminal, or is it? Yesterday in one Risk Intelligence report we ran for a client…
Read More: No business too small to be a target for Cyber crime
kicksec.IO
10/11/2021
Articles, Endpoint Detection Response
Bypassing an EDR
Following Blue team security researchers is extremely fascinating. The battleground of Blue teams vs cyber criminals is constantly moving forward. The linked article below is a security researchers demonstrating how to avoid detection with most EDR solutions. combining all of our knowledge, we now can practically use everything we want, under the radar, evading the…
Read More: Bypassing an EDR
kicksec.IO
07/11/2021
Articles, ACSC, ASD, ASD essential 8, Cyber Security Framework, MFA, Multi factor Authentication, multifactor authentication, Privileged Access Management
ACSC Essential Eight #1
Commence your cyber security resilience journey with the ACSC Essential eight, the ACSC is short for the Australian Cyber Security Centre and the ACSC the central source for all things related to the Australian Government cyber security strategy. The ACSC is not the sole source of truth and most of the ACSC recommendations do relate…
Read More: ACSC Essential Eight #1
kicksec.IO
06/11/2021
Articles
“inventory stock” for Facebook, is you!
But you know that already! Interesting comparison in the linked article below and somewhat equivalent , though the post “person” selling our private information could not go as far as Facebook has been able to unhindered. In my opinion it is not that my data is being sold which is an issue, it is the…
Read More: “inventory stock” for Facebook, is you!
kicksec.IO
06/11/2021
Articles
Empathy in cyber security
Empathy, the ability to understand the feelings of others as if we are in their shoes. Have we as cyber security professionals really thought that the target of a Malware attack is not us when we evaluate our cyber security posture? It is almost never the business leader or the person reading these articles that…
Read More: Empathy in cyber security
kicksec.IO
01/11/2021
ACSC, Articles, ASD 8, Cyber Security Framework
The problem is NOT Cyber security!
The “Compliance with the NSW Cyber Security Policy” special report released on the 28th October 2021 should be a serious concern to every NSW resident who has their Personally Identifiable Information being “securely” held by a government agency. Vic, NSW, QLD, SA, NT and TAS could very likely be transposed with NSW and these findings…
Read More: The problem is NOT Cyber security!
kicksec.IO
30/10/2021