Insights
Notes from the field
Short, practical pieces on what we are seeing in engagements, written for people who have to make decisions about this, not for a search engine.
LatestSecurity awareness
Humans are the new firewall
Perimeter controls got good enough that attackers stopped attacking them. The reliable way in is now a person having an ordinary day.
5 min read
Read the article - Application securityYou secured your code. Did you secure your business?A clean SAST report says your code contains no known bad patterns. It says nothing about whether your application lets someone do something they shouldn't.6 min
- Detection engineeringUnderstanding honeynets in modern cybersecurityA well placed decoy generates something most detection stacks are starved of: an alert with a false positive rate of approximately zero.6 min
- Cloud securityUnderstanding cloud security for penetration testingTesting a cloud estate is not testing a data centre with someone else's hardware. The attack surface is identity, and the boundary is a policy document.7 min
- GovernanceCloud security governance and compliance essentialsCloud made provisioning instant and governance optional. The organisations that stay compliant are the ones that made the compliant path the easy one.6 min
- Cloud securityCloud security: protecting your business in the digital skyThe migration business case is usually written in terms of cost and speed. The security assumptions underneath it are rarely written down at all.5 min
- Emerging technologyDrone technology and its cyber risk surfaceAn unmanned aerial system is a flying computer with a radio link, a camera and a supply chain. Each of those is an attack surface.6 min
- ComplianceSecurity compliance in drone operationsDrone regulation is written around airspace and safety. The data protection and security obligations arrive from an entirely different direction.5 min