The Privasec Red guys have been ethically breaking into networks and premises to help organisations identify critical gaps in their security implementation. Using realistic attack techniques and methodologies that are tailored to each of our customers, the team consistently obtains physical and electronic access to various forms of sensitive information. In most cases, the Privasec
Privasec Red Teaming Read More »
The Privasec team in Brisbane, Queensland is very excited to be working with one of Australia’s most exciting payments providers as they finalise their compliance with the Payment Card Industry Data Security Standard (PCI DSS). Merchants and service providers across Australia are increasingly being asked by their acquiring banks and customers to provide evidence of
Privasec’s Vendor Security Assessment and Management Read More »
Privasec’s Consultant, Sajeeb Lohani has been invited to speak at the OWASP Conference in Auckland, New Zealand on 22nd February.
Privasec’s Consultant to speak at OWASP Auckland Conference. Read More »
In March 2018 abuse.ch, a non-profit cybersecurity organization in Switzerland launched project URLhaus with the aim of detecting, collating and sharing URLs that contain malware. In the 10 months since its inception, over 265 security researchers helped takedown nearly 100,000 websites which were distributing malware.
Today’s most Prevalent Malware and How to Protect Yourself from it Read More »
Almost every week, an ever-growing list of data breaches occur around the world. In a lot of cases, attackers ultimately gain access to sensitive information such as a hashed password database. This type of information can be useful for the bad guys when targeting specific organisations and/or people.
Hashing Algorithms for storing Passwords Read More »
Department of Homeland security has issued an emergency directive requiring all US agencies to operate with a .gov domain. AU Gov tends to follow US Gov directives in turn so potentially, this is something that may be incorporated into the ISM in future.
A future ISM prospect? Read More »
Daily Backups are bread and butter of any organisation’s IT department. An organisation can lose its data due to many reasons: cyber-attacks, corrupt storage media, rogue employees or human error. Yet many companies fail to formulate a backup and recovery plan for their data.
3-2-1 Backup Strategy Read More »
A critical bug has just been discovered in the new iOS allowing eavesdropping via FaceTime. A fix is expected later this week, but in the meantime, it is highly recommended to turn off FaceTime.
FaceTime Bug allowing Eavesdropping Read More »
ATO claims to have received more than 115,000 faxed documents in 2017-18. According to ‘The Age’, and ‘the Sydney Morning Herald ‘, many small Australian companies in the healthcare, finance and legal sector still use fax on a daily basis. The vulnerabilities in the fax machine protocols haven’t been updated since the 1980s and such
Vulnerabilities in Fax Protocol Read More »
Adobe has recently released security updates to fix two critical vulnerabilities for Acrobat and Reader. The first vulnerability, identified as CVE-2018-16011, can lead to the execution of arbitrary code. The second vulnerability, identified as CVE-2018-19725, can result in privilege escalation.
Adobe’s Security Updates Read More »
