Our Red Team Lead, Justin Chong, sheds light on Red Teaming in the InfoSec World. The engagement tests and assesses the various aspects of an organisation’s overall security , providing a better understanding of its environment and the effectiveness of its security controls.
Understand Red Teaming Read More »
At the conclusion of the assessment, Privasec will provide a set of recommendations on how to address any identified gaps against APRA CPS 234.
APRA CPS 234 Compliance Assessment / Gap Assessment Read More »
Australian Cyber Security Centre’s (ACSC) Strategy to Mitigate Cyber Security Incidents provides a prioritised list of mitigation strategies to assist organisations in protecting their systems and their crown jewels against a range of adversaries. The mitigation strategies advised by ACSC vary and can be customised based on the risk profile, the industry sector and the
ACSC Essential Eight Assessment Services Read More »
The Council of Financial Regulators (CFR) released a framework in December 2020 thatis used to build red team scenarios to test the level of Australian financial services industry’s cyber resilience.The Cyber Operational Resilience Intelligence-led Exercises (CORIE) framework is a pilot programme of exercises that will mimic the Tactics, Techniques and Procedures
Cyber Resilience Testing Under the CORIE Framework Read More »
At some point in time, we have all heard about these tax-related scams. Most security-aware and alert ones will be able to pick them up quickly and report it to the necessary authorities. However, there are many who have still fallen prey to these scams.
“We have a warrant for your arrest” | Scamming the CEO Read More »
A new framework by the Council of Financial Regulators requires APRA-regulated financial institutions to attack themselves in a bid to uplift their cyber preparedness, as APRA orders urgent audits against CPS 234.The #CORIE framework that has been launched will require banks, super funds and other financial institutions to organize independent red team attack simulations.
Congratulations to our Senior Consultant David Roccasalva, for his discovery and responsible disclosure of a MFA Authentication Bypass vulnerability on VMWare Horizon DaaS (9.x, 8.x and 7.x) for VMware earlier this year.VMWare Horizon DaaS (Desktop as a Service) is a remote desktop and application service used by organisations for working remotely on applications, which
Congratulations to our Senior Consultant’s big vulnerability find for VMware Read More »
