Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Posts

World Password Day

Passwords can often feel like the bane of our existence. They're necessary for practically every app, website, and device we engage with, demanding our constant attention and memory. Managing the multitude of passwords required for our daily routines can be overwhelming. And this is why we are all guilty of not managing passwords properly.

UK Creates New Laws to Safeguard Consumers Against Cyber Threats Posed by Smart Devices

As 99% of UK adults now own at least one smart device, and the average UK household enjoys the benefits of nine connected devices, the timing of new laws designed to protect consumers from hacking and cyber-attacks while using internet-connected smart devices couldn't be more timely.

Police Arrest LabHost Cybercrime Gang

It’s been reported that police have apprehended 37 individuals globally, alleged to have used a technology platform facilitating fraudulent activity through deceptive text messages aimed at defrauding unsuspecting victims. Law enforcement agencies focused their efforts on dismantling the operations of LabHost, the platform used by criminals to send these messages and lure victims to fake websites masquerading as legitimate online payment or shopping services.

Roku Makes 2FA Mandatory for all After Nearly 600K Accounts Pwned

After attackers accessed around 591,000 customer accounts this year, Roku is making 2FA mandatory. Over two separate incidents, the first affecting 15,363 accounts and the second affecting roughly 576,000. In these cases, the attackers used the accounts to purchase streaming subscriptions and hardware stored in users accounts, the company has confirmed.

What is Incident Response?

Incident response is a crucial aspect of cybersecurity that involves identifying, containment, eradicating, and recovering from security incidents. It is designed to minimise the impact of security breaches, protect sensitive data, and restore normal operations as quickly as possible. To facilitate a smooth incident response, organisations should create a comprehensive checklist that outlines the necessary steps, resources, and communication channels.

Pentest People Announces its Assured Service Provider Status for NCSC's Cyber Incident Exercising Scheme

Pentest People are so proud to announce we have become one of the only few companies in the UK to be an Assured Service Provider in the recently launched National Cyber Security Centre (NCSC) Cyber Incident Exercising (CIE) scheme.

Cyber Essentials Overview

Cyber Essentials is a certification scheme developed by the National Cyber Security Centre (NCSC) in the United Kingdom. This scheme aims to help organisations establish a baseline of cyber security controls to protect against common cyber attacks. Two levels of certification are offered under the Cyber Essentials scheme: Cyber Essentials and Cyber Essentials Plus.

IoT Penetration Testing: How to Perform Pentesting on a Connected Device

IoT pentesting, also known as IoT penetration testing, is a process of assessing the security vulnerabilities of IoT devices and networks. The purpose of IoT pentesting is to identify weaknesses in the system that could be exploited by attackers and to suggest remediation measures to enhance the overall security of the IoT infrastructure. The process of conducting a successful IoT penetration test involves several steps.

The 5 Phases of Penetration Testing

Penetration testing, also known as pen testing, is a method of evaluating the security of computer systems and networks by simulating an attack. It helps identify vulnerabilities and security flaws to mitigate potential risks. The article "Learn About the Five Penetration Testing Phases" discusses the five phases involved in a penetration testing process.