Latest News

Privasec is excited to welcome Martin Yim and Swapnil Aglawe to our team.

Privasec GRC ConsultantPrivasec GRC Consultant

The biggest Distributed Denial-of-Service (DDoS) attack occurred in February 2018. The victim was GitHub and at its peak, this attack saw incoming traffic at a rate of 1.3 terabytes per second (Tbps). By taking down the website, a DDoS attack not only leads to loss of revenue but also affects the company's reputation.

A DDoS attack or Denial of service attack is aimed at bringing your website down by overwhelming it with traffic more than the network can afford.  

Therefore, it is crucial to have a plan before a DDoS attack strikes. The plan must properly document the network topology diagram for management of crucial assets during the attack and require the alerting of relevant stakeholders. A few other tricks for preparing for a DDoS attack include the use of sufficient bandwidth, infrastructure redundancy, DNS server redundancy and use of WAF (web application firewalls) for server protection.

ddos attack

Implementing an ISO27001 compliant Information Security Management System (ISMS) can be an intimidating task, especially if one has no prior knowledge of the Standard. An ISMS is a systematic approach to managing risks related to valuable information assets (organisation information) to ensure it remains secure. This approach includes people, processes and systems. An ISMS preserves the confidentiality, integrity, and availability of information by applying a risk management process.

Privasec’s Senior Penetration Tester, Sajeeb Lohani was invited to That Security Podcast last week. Sajeeb discussed his passion for finding vulnerabilities in bug bounty infrastructure and shared his views on the Bug Bounty industry and its success stories. Like Sajeeb, Privasec Red Consultants have years of experience in providing security services that test the technical security measures in place within the client’s infrastructure and applications, searching for weaknesses within. Email This email address is being protected from spambots. You need JavaScript enabled to view it. to engage with one of our Red Team experts.

Check out the full episode here:

https://podcasts.apple.com/au/podcast/s01-episode-03-bug-bounties/id1470056177?i=1000447744710

Privasec partnered with Cyber Risk Meetup in Sydney last night to organise the inaugural Cyber Risk Summit. The event was a huge success with more than 130 attendees. The evening kicked off with Privasec’s Director, Romain Rallu demystifying ISMS followed by Privasec DroneSec’s CTO, Mike Monnik's presentation on Drone Security. A big thanks to the keynote speaker Nathan Hillery, panel speakers Darren Shearsby, Michael Cracroft & Laura Lees and Privasec's Consultant, Vivienne Mutembwa for moderating the panel. Also, a huge shout out to Cyber Risk Meetup’s organiser and Privasec’s APAC Cyber Security Advisor, Shamane Tan for arranging a successful event. Privasec Team is looking forward to the next Cyber Risk Meetup.

Cyber Risk MeetupCyber Risk MeetupCyber Risk MeetupCyber Risk Meetup