JUMPSEC

Another great blog post from our consultancy team, this time focusing on the current state of play for initial access security controls in Windows environments. Check it out! https://lnkd.in/evx4xeTQ

The JUMPSEC 2024 mid-year UK Ransomware Report is now out! Analysis of which is drawn up from a global data set of over 14,670 victims from 2020 to June 2024, complemented by additional industry analysis and reporting. #ransomware #dataleak #threatintel #infosec #cybersecurity

Are you up-to-date with the latest #ransomware threats? JUMPSEC UK #RansomwareTrends: The 2024 Mid-year Update is now live! We contextualise global ransomware trends for UK-centric organisations, tracking the latest threat actor activity via #dataleak sites and incorporating complementary #threatintelligence and reporting. Here’s a snapshot: 🔹 UK ransomware extortion rates have dropped in H1 2024 – what’s driving the decline? 🔹 Several notorious threat groups have faded from the UK landscape, but is it too soon to relax? 🔹 Which sectors appear most vulnerable? Find out how ransomware hits #manufacturing, #finance, and #healthcare hardest. Don’t miss these crucial insights – read the full report here: https://lnkd.in/ewKpUT2n

Check out our latest Labs post from Sunny Chau diving into a the modern spin of the classic SSH tunnelling technique with a focus on bypassing corporate firewalls, highlighting its relevance in modern offensive engagements. Read here ➡ https://lnkd.in/ebuqHngj The post explores updated methods, including reverse dynamic proxies from Windows hosts and domain fronting, to create reliable tunnels for offensive operations. It also provides practical tips for securing against these techniques, such as removing the SSH client from endpoints and monitoring its usage. #firewalls #offensivesecurity #labs #research

Attention Penetration Testers!! If you're a pentester, you might not think much about programming. Your focus is on testing what others have developed. However, there are times when a quick Python or Bash script is essential to exploit a vulnerability or automate a process. In a team of skilled penetration testers, everyone contributes scripts that solve specific problems. But how do we ensure: * No time is wasted on duplicating scripts * Knowledge is retained even when team members leave * Code is understandable for everyone * Knowledge about scripts is preserved for future use As more scripts are created, they contain valuable knowledge. But, just like any software, scripts need maintenance. This is challenging because scripts are often used for short-term projects and then forgotten, leading to a cluttered, unmaintained repository. At JUMPSEC, we tackle these challenges with a dedicated development team. This allows us to manage and maintain scripts effectively, ensuring our proprietary solutions, like our Continuous Attack Surface Management service, are robust and reliable. Thank you to Bjoern Paul Richard Schwabe who shares here how we handle these issues and ensure efficiency and knowledge retention in our penetration testing processes. Read his write-up here ➡  https://lnkd.in/dVuDQ93n Stay tuned for more insights and strategies! #cybersecurity #insights #CASM #labs #programming

We’re hiring! We are looking for a Project Delivery Coordinator at JUMPSEC, (this is a maternity cover role). You will be pivotal in ensuring that our cybersecurity services are delivered efficiently and effectively. The role will focus on covering for the Delivery Manager, while on maternity leave. Activities will include, but not be limited to, managing project schedules, coordinating with both clients and internal teams, and ensuring that all project delivery processes are aligned with our company's standards and client expectations. Your success will directly contribute to the satisfaction of our clients and the overall success of our projects. For more information, please read here: ▶ https://lnkd.in/eiBPWisp #job #career #jobopportunity

My talk at #BSides Cheltenham is up on Youtube! Had a lot of fun cracking jokes on stage, and have the vendor + event sponsor (Microsoft in this case) asking some not-so-easy questions afterwards ... How do you respond to that? Have a watch and find out #cloudsecurity #microsoft365 #redteaming https://lnkd.in/e3fNJ4Ax

With organisations continually putting more critical assets into the cloud our Head Of Adversary Simulation Max C. has explored how cloud migration is affecting application security. Check out a red teamers perspective on the topic in this week's labs post! https://lnkd.in/eVWVSA8Q #cloud #migration #redteam #appsec #AWS #Azure #GCP

We’re delighted to announce that JUMPSEC are a Cyber Incident Response Level 2 National Cyber Security Centre (NCSC) Assured Service Provider! The NCSC recommends that all UK organisations should use an NCSC-assured Cyber Incident Response provider when dealing with cyber incidents. “Only a select few organisations are recognised by CIR as both Level 1 and Level 2 providers, highlighting the difficulty and demands of addressing both types of threats. Whether your attacker is a sophisticated adversary or an ordinary criminal, we can help. The types of incidents Level 2 tackles are the behaviours our Incident Response and Readiness teams observe and defend against daily.” Matt Lawrence, Director of Cyber Security Operations Read more 👇https://lnkd.in/e258hfsR #CIR #NCSC #IncidentResponse