Last summer JP Morgan Chase 'fessed up to an enormous breach that impacted some 80 million customers. Headlines at the time were alarming, with speculation even amongst security professionals and seniors in government that this must be the work of a state sponsored group. Who else...
TalkTalk today finally revealed that 157,000 customers had details stolen in the recent hack. That's less than originally feared, but is still far from good. There is also some further information from Channel 4 about how the breach unfolded. If that story is accurate, and...
On November 4th the UK government issued a draft of its new Investigative Powers Bill (IBP). Broadly, this proposed legislation lays out the ways and means that UK intelligence, security and law enforcement agencies will have to access their targets' (i.e. people) internet usage. The full...
If you follow cyber security news even vaguely, you'll be aware of the recent news stories about hacking a Chrysler Jeep. This is good, solid security research, conducted over a number of years which on the face of it seems entirely valid. In other words,...
Recently we had a call from a client who had received an extremely targeted malicious email, aimed at convincing the financial director to transfer a large amount of money to a designated bank account at the apparent request of someone else senior in the same...
In todays post we're going to delve into the world of open source intelligence, and see how you can use this to defend your organisation. So what is open source intelligence? Without wanting to delve too deeply into what is and what isn't 'intelligence', open source intelligence...
On June 5th a US agency you had probably never heard of (I hadn't) called the Office of Personnel Management (OPM hereafter) confessed to an enormous breach, which had compromised the records of millions of federal employees. The OPM acts as a kind of centralised...
Post the excitement of the UK general election, and the unexpected Conservative victory, David Cameron has been assigning roles in his new Lib-Dem free Cabinet. Francis Maude, who had responsibility for cyber security as part of his ministerial role in the Cabinet Office has been...
Logjam is the latest high profile security vulnerability to be given its own name (a la shellshock and heartbleed). You can read about it here. Now, whilst this certainly isn’t good I don’t think it quite as terrible as the headline makes out. In essence this...
On a fine and sunny day, what better way to pass the time than thinking about the security of your website. Here at The Cyber Security Expert we think of little else, even at the weekends. It makes us popular at parties. In todays post...