What are cloud security metrics?

cloud security metrics

Cloud migration has surged in recent years, with an estimated 94% of companies adopting cloud services as of 2022. Predictably, cybercriminals have capitalised on this rapid shift to the cloud, and have turned their attention to finding ways to infiltrate the cyber security defences of cloud service providers.   Unfortunately, as their sensitive data, applications, servers, and other assets are stored … Read More

What is network segmentation?

What is network segmentation

Network segmentation is an architectural approach that divides a network into smaller, distinct sub-networks – or subnets. This allows a company to compartmentalise different areas in its network for increased security and improved performance.  Let’s take a look at network segmentation and how you can use it to make your IT infrastructure more secure. How does network segmentation work?  Network … Read More

What is Data Exfiltration?

What is data exfiltration

Data exfiltration is a type of security breach that occurs when a company or individual’s data is retrieved, transferred, or copied from a server or computer without authorisation. Cybercriminals are usually responsible for data exfiltration by stealing data from corporate or personal devices, such as mobile phones or computers, using various data exfiltration attack methods.  Another definition of data exfiltration … Read More

What are botnets?

What are botnets

Continuous monitoring by cybersecurity firms like RiskXchange highlights vulnerabilities that hackers could exploit to prevent a botnet attack.     What are botnets? In short, a botnet is a group of internet-connected devices (IoT) that are infected by malware and used for cyberattacks by cybercriminals. They tend to be under the control of one attacking party, the “bot-herder.” Each machine under the … Read More

How to avoid a baiting attack

How to avoid a baiting attack

Social engineering attacks are one of the most significant threats to an organisation’s information security. So much so that a staggering 98% of cyberattacks involve some social engineering component. One of the social attacks favoured by cybercriminals is known as baiting.   In this article, we look at baiting attacks and how to avoid them.  What is a Baiting Attack?  Baiting … Read More

How to choose a cybersecurity framework that works for you

How to choose a cybersecurity framework that works for you

A cybersecurity framework provides security teams with a set of standards and a common language across borders and industries to understand security postures. With a cybersecurity framework in place, it can help define the procedures and processes that your organisation must take to monitor, asses and mitigate cybersecurity risk.  Let’s take a closer look at the most common cybersecurity frameworks.  … Read More

How to prevent a pharming attack & what it involves

How to prevent a pharming attack

A recent study has revealed that 88% of organisations worldwide have suffered a DNS attack in the past year. More alarmingly, each organisation experienced seven attacks on average – at $942,000 (£836,000) per attack. One of the most common forms of attack on DNS servers is known as pharming.   Let’s explore what a pharming attack is, how they occur, … Read More

How can you avoid downloading malicious code?

How can you avoid downloading malicious code?

Most cyber threats, whether designed to steal data or extract money from a user, have malicious code at their core. Once this malicious code finds its way onto a device, it can be devastating: particularly if it first infects one machine before spreading through an organisation’s network.   Worse, the more sophisticated the malicious code, the harder it is to remove. … Read More

How to prevent ransomware attacks?

How to prevent ransomware

Ransomware attacks have increased dramatically over recent years, so much so that the 2022 cost of attacks is estimated to top US$20 billion globally.   Ransomware can cause widespread damage, but at the same time, they can be entirely preventable. The willingness to invest in even the most basic cybersecurity measures will not only protect valuable assets but could save organisations … Read More