Chris Phillips, Head of Physical Security at 2-sec, talks to us about cyber terrorism and the development of cyber attacks aimed at UK businesses. Chris explains why companies need penetration testing as part of a robust cyber security system. Chris explains how the terrorist threat to UK businesses has changed over the past few years.
PENETRATION TESTING Cyber-crime costs UK businesses up to £22 bn each year (source: The Cost of Cybercrime, the Cabinet Office). The number of cyber-attacks is also increasing year on year, and both small and larger businesses are being targeted by criminals for their sensitive data and supplier and client information. Penetration testing is the key
Orange recently suffered a data breach and around 3% of their user records in France were allegedly hacked. Â This amounts to around 800,000 users. The anatomy of the attack appears to be SQL injection, where a French version of their web application took users to a flawed My Accounts page that was vulnerable to some
Orange Data Breach – they should have known better.. Read More »
As seasoned penetration testers, it has to be said that the most common issue we come up with when testing public facing web applications, is cross site scripting (XSS). Â Trying to explain this issue, and it’s implications, to businesses is challenging at times, after all there are a thousand and one other issues that businesses
Cross Site Scripting (XSS) and why it needs fixing! Read More »
Penetration testing should always reflect a measured approach to tackle the problem at hand, which is to ensure your systems are resilient from criminal attack. Â A penetration test should do this by simulating said criminal attacks, and attempt to gain access to your systems, people and premises. The marketplace is still clouded with firms that
Tick in the Box Penetration Testing (and why it’s bad) Read More »
Selecting a penetration testing provider can be a daunting task. The industry is somewhat unregulated and other than the likes of CHECK / CREST / Tiger Scheme there are relatively few means to check your penetration testing provider is actually capable of testing your systems, infrastructure, buildings and people to sufficient depth. On one hand
Penetration Testing – Building the Business Case Read More »
