Written by: Ollie Whitehouse — In June 2017, we were asked by a client to rebuild NotPetya from scratch. Instead of the data destruction payload, they asked for telemetry and safeguards. Why? Because they wanted to measure what the impact of NotPetya would have been. Since part one of this story (which you can read…

Written by: Dominic Carroll and Eleanor McNicholas — Originally published at www.nccgroup.trust. The rise of cryptocurrencies such as Bitcoin and Ethereum, and their acceptance as a legitimate means of payment, has been well documented in the media over the past 12 months. One reason for this attention is the use of cryptocurrencies by cyber criminals. Many ransomware variants…

Originally published at www.nccgroup.trust. Businesses using Cisco ASA firewalls could be at significant risk of a cyber attack following the discovery of a critical vulnerability by NCC Group. When exploited, this vulnerability known as CVE-2018–0101 allows the attacker to see all of the data passing through the system and provides…

Written by: Justin Moore Originally published at www.nccgroup.trust. Introduction Burp Suite is an intercepting HTTP Proxy, and it is the defacto tool for performing web application security testing. While Burp Suite is a very useful tool, using it to perform authorization testing is often a tedious effort involving a “change…

Written by: Patrick McCloskey Originally published at www.nccgroup.trust. On an almost daily basis, organisations from around the world suffer information security breaches. These breaches cost billions of dollars annually and are a lucrative opportunity for cyber criminals. This risk is universal, with large, mature organisations that employ big security teams…

Written by: Fox-IT cyber security expert — Originally published at www.nccgroup.trust. In the first days of 2018, a number of vulnerabilities were disclosed that are present in many modern-day CPUs. In this blog post we address the most frequently asked questions about Spectre and Meltdown with a focus on providing you with actionable guidance about what to…

We ask a selection of our experts to predict the trends set to make an impact in the year ahead. — For better or worse, 2017 was a memorable year across the technology and cyber security landscapes. Data breaches were massive and numerous, global ransomware outbreaks brought organisations to a standstill and distributed ledger technology — including various cryptocurrencies — was (and still is) the talk of the town.

Last year in our Splunk 5.x EOL post we talked about why you should upgrade your Splunk version and explained the main support and security reasons for looking at doing an upgrade. In this post, we’ll cover the notable new features that have been added since 6.0, …

Written by: Tim Haines — Originally published at www.nccgroup.trust. In early December, the BBC reported [1] on a number of ships that have washed ashore in Japan in recent years, the majority of which have contained only dead bodies. It appears likely that these ships, with no modern engines or navigational instruments, are fishing vessels…