Our Services
The CYBX cyber security team based in Malvern, Worcestershire, offers products and services to help your organisation become more cyber resilient and better prepared against attacks.
Penetration Testing
Vulnerability Assessments
Cyber Consultancy
Cyber Awareness Training
Phishing Campaign
Secure Network Design
Code Review
CYBER ESSENTIALS
ECSM®
Our Work
Blog Posts
The latest cyber resilience related blogs by the CYBX team
reCAPTCHA phishing attack
A large scale phishing attack campaign has been utilising a fake Google reCAPTCHA system to attempt to steal Microsoft 365 credentials. Google reCAPTCHA is one of their services designed to help protect websites from bots that spam and try to gain information. The system uses a Turing test to tell if the person is human[…]
Sandworm Linked To Cyber Attacks
French cybersecurity agency ANSSI have recently found links to a Russian hacking group called Sandworm that has breached several French entities including a software firm whose clients include the French Ministry of Justice, and Airbus. The French company Centreon has been attacked by hackers who are linked to the Russian military intelligence agency GRU. Like[…]
CD Projekt Red Hacked
Popular video game developer company CD Projekt Red has announced that they have fallen victim to a very serious ransomware attack. CD Projekt Red are a very well respected Polish game development company who have recently released one of the most anticipated games of the last decade; Cyberpunk 2077. The company have also developed the[…]
Police Take Down Emotet Hacking Network
Police forces from UK, USA, EU, and Canada have worked together to finally take down one of the most dangerous hacking networks known as Emotet. Emotet obtain access illegally to victim’s devices via malicious email attachments and then sell to criminal organisations who then install further, more dangerous malware. Europol have commented saying that it[…]
Tik Tok Bug
Last week a now patched security bug was found in the popular social media platform Tik Tok. This bug could have enabled hackers to build a database of users and their associated phone numbers. This flaw only affected users who linked their mobile phone number with their Tik Tok account or if they logged in[…]
How to build cyber security resilience in 2021
A 2020 recap on cyber security and how to build resilience in 2021 2020 was a difficult and unprecedented year that affected families, individuals, and businesses in multiple ways in all corners of the world. Due to the coronavirus, businesses and their employees had to adapt to remote working or spending more time at home.[…]
Job Scams
Job scams have seen a 300% rise in the last two years according to ActionFraud. This has resulted in over 700,000 jobseekers losing upwards of £500,000 through these scams. These job scams are being carried out by scammers creating fake job advertisements and web pages where they aim to steal personal information and money. Unfortunately,[…]
Covid Vaccine Scams
Police have warned of fraudsters and scammers sending fake text messages offering a COVID-19 vaccine. This is an attempt to steal personal and financial information. These texts include a link to a very well put together phishing page that looks very convincingly like an NHS website page. On this page people are prompted to input[…]
Critical Android Bugs
Google’s January Android Security bulletin has addressed 43 critical software bugs that have been affecting Android handsets including big brands such as Samsung. Within the 43 bugs, Google has fixed 2 critical bugs that affected all android devices. These critical bugs allowed remote hackers to execute arbitrary code. Among these critical flaws included a remote[…]
SolarWinds Hacked
The US Treasury and Commerce issued a warning to employees to disconnect from SolarWinds Orion products. Major software provider SolarWinds confirmed themselves that they had been targeted by a highly sophisticated cyber-attack. This has led to US companies and government networks being infected. The manual attack is believed to have been conducted by an outside nation[…]