Our Services
The CYBX cyber security team based in Malvern, Worcestershire, offers products and services to help your organisation become more cyber resilient and better prepared against attacks.
Penetration Testing
Vulnerability Scanning
Cyber Consultancy
Cyber Awareness Training
Our Work
Blog Posts
The latest cyber resilience related blogs by the CYBX team
Policies
A policy contains numerous ideas or a plan of what should be done in certain situations. Businesses generally have policies relating to HR and finance but are lacking in security policies. An information security policy is used to describe a set of rules, inclusive of allowed and disallowed behaviour for its information systems and assets[…]
Penetration testing devices
A rubber ducky looks like a normal USB stick but can be used for malicious purposes by threat actors. A Rubber Ducky can be used to conduct various tasks such as obtain passwords as well as transfer files between machines to further compromise your laptop/desktop. Even if USB devices are blocked on the computer, a[…]
Risk Assessment
Risk assessments should include all the risks relating a project, activity or organisation and should be performed on a regular basis or when additional risks are present. All risks should be placed into a risk assessment table and include the likelihood and impact of this occurring. It allows all risks to be defined and categorised[…]
Security Updates
The Equifax breach in which 143 million Americans had their Social Security numbers and home addresses exposed was caused by a vulnerability that had been publicly disclosed 2 months prior. Updates in software occur to fix various issues, inclusive of security vulnerabilities and updates should be performed as soon as possible from their release date.[…]
Testing for User Behaviour in Cyber Attacks
Security is remaining to be a prevalent security concern among businesses and individuals. While attacks continue to become more complex, the same can be said for the development of attacks that rely on human interaction to spread or exploit weaknesses. Many attacks rely on this user input to do one of the following tasks: *[…]
What cyber threats are ahead of us in 2020?
Its a new year, which means more innovation and technology and threats to come.Therefore it is a good time to have a look at what to expect from Cyber Security in 2020. Ransomware will continue to be on a rapid increase, with exploitation becoming more complex to evade detection, making it more difficult to reverse,[…]
Google Chrome Breach Monitoring
A new feature is due to be implemented by Google Chrome which will warn you, each time you log in, if your credentials have found to be leaked anywhere on the web. Credential check, named “Password Checkup”, is a service being released slowly for everyone who is logged into Chrome and is designed to be[…]
E-mail security
E-mails are a part of our everyday life, we use them to keep in contact with people all around the world, use them to monitor online shopping and much more. With an estimated 3.4 billion phishing e-mails sent per day and accounting for approximately 90% of all data breaches, security of e-mails is imperative to[…]
The Approach for Denial of Service
Denial of service is a well-recognised and notorious attack, designed to target either an individual or a business to overload their infrastructure. This article will provide an overview for denial of service attacks, how they are performed and some techniques that attackers use to pass by undetected. With a standard denial of service attack, the[…]
Social Engineering Defensive Measures
Social Engineering is becoming far more prevalent in recent years. The attacker can target a large number of individuals for a generic offer or a smaller subset of individuals with a very specific approach tailored on a per-person basis. The key difference between technical exploitation and social engineering is that, besides training, it is difficult[…]