JUMPSEC

More great technical content from our Labs team! This week, DLL Hijacking 👇 https://lnkd.in/eqq_C3J3

⏲️ 2-minute insights Max Corbridge discusses his unorthodox route into cyber security, why it has made him a better consultant, and the importance of communication and soft skills alongside technical knowledge. Watch here ⬇️ 

Recently, our team had the pleasure of reconnecting with our local community during a visit to Dairy Meadow Primary School, where we discussed internet safety and cyber security. We shared our approach to keeping safe online and explained how we assist our clients, providing the students with a solid foundation in cybersecurity. It’s been a year since our first visit to Dairy Meadow, and it was encouraging to see how much more aware the students have become, from our first talk and thanks in part to resources from National Cyber Security Centre. As the world becomes increasingly digital and children spend more time online at younger ages, it's crucial they not only understand the risks but also recognise the potential career opportunities in cybersecurity. Matt Norris, COO at JUMPSEC explains: “Bringing cyber security awareness and education into schools is essential to help pupils protect themselves and to attract some of them to study cyber security or computing related subjects in the future. We had a great morning with these young pupils, and I was impressed by their insightful questions. We are already looking forward to the next school visit.” #cybernews #education #cybereducation #community

Take the offensive by leveraging active cyber defence! Senior Cyber Security Responder Umair Qamar shares how a canary token recently tipped him off to the presence of a red team in one of our client's environments. Check it out: https://lnkd.in/e3h97ZFJ

JUMPSEC is proud to announce that we are now an Assured Service Provider in the National Cyber Security Centre (NCSC) Cyber Incident Exercising (CIE) scheme, joining an exclusive group of UK companies. This builds on our existing status as an approved NCSC Cyber Incident Response Level 2 provider. Matt Lawrence, Director of Cyber Security Operations commented: “This recognition highlights our commitment to excellence in cyber incident response and preparedness. As a CIE provider, we offer tailored, scenario-based exercises to help organisations rehearse and strengthen their cyber incident response plans. With rising cyber threats, an effective response is crucial for resilience. JUMPSEC’s expertise ensures you’re ready to navigate the complexities of cyber incidents with confidence.” 💬 Contact us today to learn more about our proactive incident response services: https://lnkd.in/eB34dsCY And Cyber Incident Exercising: https://lnkd.in/eFKPdn5v #CyberSecurity #IncidentResponse #NCSC #CyberResilience #JUMPSEC #CIE #CyberThreats

JUMPSEC is proud to announce that we are now an Assured Service Provider in the National Cyber Security Centre (NCSC) Cyber Incident Exercising (CIE) scheme, joining an exclusive group of UK companies. This builds on our existing status as an approved NCSC Cyber Incident Response Level 2 provider. Matt Lawrence, Director of Cyber Security Operations commented: “This recognition highlights our commitment to excellence in cyber incident response and preparedness. As a CIE provider, we offer tailored, scenario-based exercises to help organisations rehearse and strengthen their cyber incident response plans. With rising cyber threats, an effective response is crucial for resilience. JUMPSEC’s expertise ensures you’re ready to navigate the complexities of cyber incidents with confidence.” Full story here - https://lnkd.in/ezR7YBz3 💬 Learn more about Cyber Incident Exercising: ➡️ https://lnkd.in/eFKPdn5v #CyberSecurity #IncidentResponse #NCSC #CyberResilience #JUMPSEC #CIE #CyberThreats

Advisory Update: Oriole Botnet Campaign Targeting Edge Devices. JUMPSEC’s Threat Intelligence team has provided updated IoC analysis of the recent PRC Oriole Botnet campaign that indicate continued activity, along with broader context on long-term edge devices risk: ↘️ https://lnkd.in/eWQDbwEw We explore: Why edge devices are a risk Key Mitigations IOC Analysis Case study from a recent Penetration testing engagement Staying proactive with continuous monitoring and threat-hunting capabilities will help mitigate this evolving risk as IoC change over time. #cybersecurity #IoTsecurity #botnets #threathunting #JUMPSEC #OrioleBotnet #edgedevices

Some interesting statistics from Max C. on a very recent engagement that put weight behind a theory : 🎯Staff were 3x more likely to click a malicious link when delivered over Teams vs email. 🎯 Staff were 2x more likely to submit credentials to a malicious login page when delivered over Teams vs email. 🎯Staff were half as likely to report a suspicious message on Teams vs email. Same pretexts, same links, very different results 🤔 If you are not already it is time to update your security awareness training to include productivity app-based. Have a listen to Max C. and Tom Ellson, this is their summer CRESTcon talk on abusing productivity apps for initial access... Full video here ➡️ https://lnkd.in/e-PDbmJr #CRESTCON #cyberinsights #phishing #initialaccess #Microsoftteams

Attending Call & Contact Centre Expo UK? Come and listen to Max C., he will be sharing his stories and insights about how he hacked a international call centre. It will be very insightful!! Full information below ↘️ #cybersecurity #socialEngineering #callcentreExpo #Cyberinsights

Another week, another great technical blog from our consultant team! This time David Kennedy is talking through the technical steps of conducting relaying attacks in on-premise active directory environments: https://lnkd.in/ePJ5E7xA