Red Team Attack Simulations mimic an adversary attacking your organisation. Red Team Attack Simulations enable you to understand and improve upon your ability to identify and respond to an adversary tyring to access your systems or information.But what actually happens during a Red Team and how does an Attack Simulation work in practise?
What happens during a Red Team Attack Simulation? Read More »
On 19 August 2021, Privasec’s team conducted a webinar to uncover the myths behind ISO 27001 and Red Teaming (CORIE & AASE). Check out the event highlights and recording here!
Demystifying Two Different Worlds: ISO 27001 and Red Teaming Read More »
With the pending updates to the ISO 27002, it is now more well-rounded for tackling information security risks. What remains a constant, is the purpose of the standard to provide implementation guidance on security best practices for compliance to ISO 27001.
Updates To ISO 27002 And Its Impact Read More »
The CORIE Framework – is a new approach to assessing cyber maturity and resilience and you definitely need to be investigating it this year.
A Beginner’s Guide to CORIE Read More »
Privasec is a proud sponsor for the Cyber Resilience Summit NSW 2021 at Dockside Darling Harbour in June. It was an enjoyable event organised by Forefront Events, where the team from Privasec met and learned from senior security and cyber risk professionals in the industry. We heard perspectives from multiple sectors around the theme of
Cyber Resilience Summit NSW 2021 Read More »
The impact from a lack of security awareness training through the eyes of a recent red team engagement performed by the Privasec Red team.
Red Team Incognito War Stories: Crashing down the castle wall through deception Read More »
SOC 2® reporting solves the issue of how a business leader can trust that a service provider is taking its obligations seriously by conducting a SOC 2® Type 1 and Type 2 report to evaluate data protection systems and procedures.
A Dummy’s Guide to SOC 2 Read More »
This article explores Zentao, understanding how its routing works, and identifying several vulnerabilities that lead to an attack chain that an attacker can execute in order to achieve remote code execution.
ZenTao CMS – A Monkey’s journey to Priv Esc & Remote Code Execution Read More »
It is always in a company’s best interest to protect itself from vendor risks – before entering, during, and even after the vendor relationship has been established.
Managing Third-Party Risk in 2021 Read More »
Get to know the former Chief Security & Technology Officer at Service NSW as he shares in under 5 minutes his views on how companies can leverage their security partners and gain the most value in partner engagement.
Former Service NSW Chief Security Tech Officer Speaks on Security Partners Engagement Read More »
