Our Services
The CYBX cyber security team based in Malvern, Worcestershire, offers products and services to help your organisation become more cyber resilient and better prepared against attacks.
Penetration Testing
Vulnerability Scanning
Cyber Consultancy
Cyber Awareness Training
Our Work
Blog Posts
The latest cyber resilience related blogs by the CYBX team
Social Engineering pt. 1
Social Engineering is a term used to describe the process of socially manipulating someone into providing information or access to a variety of physical and digital assets. There are a variety of techniques that can be leveraged to be able to successfully perform social engineering. This article is broken into two parts, with the first[…]
Cyber Risk for businesses
NTT Security have posted their Risk:Value 2019 report to update on Cyber Security progression within business. The report is filled with surprising and insightful statistics that can help those interested in Cyber Security gain a better understanding of the state that businesses are currently in. For a long time, many businesses and individuals have been[…]
Dumpster Diving
This week, we will take a step back from your digital security and focus on the basics. Many businesses focus solely on the security of their IT devices and services but begin neglecting the fundamentals. The main focus of this article is dumpster diving, which is exactly what you expect it to be, where individuals[…]
SQL Mitigation Techniques
In our previous article, we explained the dangers of SQL injection, but did not touch on the mitigation techniques to protect your business against this threat. Today we will focus on the mitigation techniques you can employ to reduce the threat of this attack to your business. Hiding errors – When a user is browsing[…]
SQL Injection Attacks
SQL (Structured Query Language) is a programming language that is used to communicate with databases, it can perform numerous tasks such as removing, adding and deleting information within the database by using the relevant SQL commands. SQL Injection is a common type of attack that allows malicious actors use to execute malicious SQL statements that[…]
Firewall
A firewall blocks network communication by looking at the address and protocol information contained within the packets. As the packet arrives at the firewall, the address and protocol information are checked against the rules programmed into the firewall. These rules can either be supplied by the vendor or created by the administrator. If there is[…]
Active Directory
Active Directory (AD) is a service developed with the intention of allowing interconnection of devices within a network. Active Directory offers management capabilities from a centralised location, and stores information about members of the domain including the users, access rights, digital assets and much more. Group Policy (GP) is a separate utility that is available[…]
Securing your Email Accounts
We have reached a point in time where your digital security is of utmost importance. Your personal bills, your banking, your social interactions, identification, hobbies and much more is almost all funnelled through the internet, and your email is the vault for every service you use.Securing your email accounts needs to be a priority. Your[…]
Types of Anti-Virus
In this blog we will be discussing the two main types of anti-virus software that are available on the market. Signature based anti-virus software will examine the file to create a signature. When a scan is performed this will compare the malware signature against a list of known malicious files, included within the anti-virus software’s[…]
Attack Library: Drive-by Attacks
Drive-by Attacks are an increasingly common type of attack, used by threat actors to force the client into performing an action without the consent of the user. The key difference between Drive-by attacks and other attacks of this nature, is that they do not require any user interaction with the malicious content for the attack[…]