Sudo: Its History and How to Abuse It
A quick explanation of one of the most influential and misconfigured computing utilities.
A classic view into some of the tools use by pentesters at risk3sixty.
So, you got a pentest. Now what?
How to progress toward a truly secure organization and infrastructure after penetration testing.
You did it – you paid for penetration testing services.
Whether it was to fulfill a potential client’s request, satisfy your interest or to be compliant with some framework, you tested the mettle of your environment against white-hat hackers and came out the other side, report in-hand and next steps […]
Past to Present – Lessons From the NotPetya Ransomware
And how they are still relevant today.
On a warm, sunny day in July 2017, one of the world’s most catastrophic and rampant demonstrations of ransomware began. Commonly referred to as NotPetya, the infection was released from a compromised software company located in Ukraine and quickly spread across the world. The outbreak impacted companies such as DHL, Mondelez International, and […]
An Introduction to Active Defense
Global research and advisory firm, Gartner, forecasts that information security spending will exceed $124 billion in 2019, yet cyber defenses continue to fail. Organizations large and small continue to experience breaches of all varieties resulting from zero-day exploits, failures in vulnerability patching, and phishing.
The market has responded with a variety of security governance and control frameworks including CIS 20, ISO 27001, […]
If It Can Talk to Networks, It Can Walk Across Them
Why the Internet of Things is a penetration tester’s most valuable asset.
As technology moves at a seemingly exponential rate of growth and changes every day, more and more devices are being developed to contain additional “customer-savvy” features. Collectively termed the Internet of Things (IoT), this new wave of technology is vast. Where historically a system in question would be a server […]
ISO 27001: Understanding Security Roles and Responsibilities and Why They Are Vital to the Success of Your Security Program
When building your Information Security Management System (ISMS) as part of ISO 27001 program implementation one of the most important elements of the system of management for your security program is ensuring all stakeholders understand their roles and responsibilities. (If you are unfamiliar with ISO 27001 and the “ISMS” you can read our whitepaper on the ISO […]
Why You Need Penetration Testing
Capital One’s recent data breach is only the latest in the perennial series of high-profile data breaches that have occurred in the last few years. What do Equifax, Home Depot, Target, and others have in common? Great security programs with high-quality and competent people running them.
These companies experienced data breaches despite putting forth their best efforts and spending millions of dollars […]
Vulnerability Management Makes it Harder to for Hackers to Exploit Your Systems
From a penetration tester’s perspective, there are a few things that quickly indicate an organization’s maturity (and the likelihood our team will be able to exploit their environment). If any of these exist, the chance we will be able to successfully breach their environment increases:
Indicators a Hacker Can Breach Your Systems
Aging Infrastructure
One of the first things we do in a penetration […]
Understanding Phishing and How to Stop the Scam
Phishing is when a malicious individual, using email, impersonates a sender that an internal user would have familiarity with, sometimes targeted towards highly specific personnel (Spear Phishing), to execute their intent. Attackers can do this by spoofing their email address to make it appear as though it is coming from a trusted source.
Low level methods can accomplish this simply by creating […]
Beyond Vulnerability Scans: Mitigating and Monitoring for Malware Leveraging C2 Systems
Many modern forms of malware are now file-less and rely on Command & Control (C2) infrastructure to assist outsiders with gaining unauthorized access to networks. This malware “phones home” to remote attackers, who then leverage the internal foothold to infiltrate networks and execute attacks. These attacks can be difficult to detect when security monitoring is limited to periodic vulnerability and compliance […]