Our Services
The CYBX cyber security team offers products and services to help your organisation become more cyber resilient and better prepared against attacks.
Penetration Testing
Vulnerability Scanning
Cyber Consultancy
Cyber Awareness Training
Our Work
Blog Posts
The latest cyber resilience related blogs by the CYBX team
End-Of Life Software
All software goes through a support cycle, starting at mainstream support, extended support and finally “End of Life”. When software is in mainstream support, provider regularly releases features and provides security updates for any bugs that are present. This support usually occurs when the software is first released and continues for the longest duration. In[…]
Spoofing Public WI-FI routers
As public WI-FI networks do not commonly require a password to gain authentication, anyone can gain access to this network with ease. As individuals are connecting to these routers to obtain internet access, the risk of impersonating routers becomes more common. This is called Spoofing Public WI-FI routers. A malicious actor can use a technique[…]
Open-Source Penetration Testing
With the enormous rise in Cyber Security threats online, many companies are at threat of their online databases being targeted and breached or are even susceptible to attackers defacing their website or using it to compromise visitors’ devices by using the website as a platform to deploy malicious software. This increase in online threats has[…]
Pharming attacks
Pharming is essentially a phishing scam that can infect numerous users simultaneous by redirecting them from a legitimate website to a fake site. The fake website can be used to install virus’s or trojans on the user’s computer to obtain personal information such as bank account details which could be utilised for identity theft. Pharming[…]
GDPR: Subject Access Requests
As part of the GDPR implementation, it is now a requirement that companies release any information that they store or process on you if you request it. A Subject Access Request (SAR) is a request made by an individual to receive information regarding which data a company holds on you, and how they process it.[…]
Two-factor authentication
The standard combination of username and password is not as secure as you may think. Even longer, more complex passwords are still at threat from data breach credential dump (e.g. posting passwords on Pastebin) or elaborate password attacks combining personal information, such as creating a custom password list with your personal information included. Thankfully, Two-Factor[…]
Attack Library: Clickjacking
This week the Attack Library mini-series will focus on Clickjacking attacks – what they are, and how to defend against them. A Clickjacking Attack, also known as a UI (User Interface) Redress Attack, is used by malicious threat actors to trick users into being redirected or submitting information without their consent or knowledge. To perform[…]
Attack Library: Malware
Malware, also known as malicious software is an umbrella term that encompasses any malicious program or file that attempts to harm your computer, often by taking partial control over a device’s operation. There are a number of different types of malware, and these can be explained individually in more thorough detail. The first of these[…]
Password Security
Passwords are currently the most common authentication method used online today. While biometric alternatives are slowly gaining popularity, this is still not enough to replace passwords entirely. The primary objective of hackers is to try and retrieve your login credentials by using various password attacks. The first of these attacks is a brute force attack[…]
Attack Library: Phishing Attacks
This week the Attack Library mini-series will focus phishing e-mails, a social engineering attack that many people encounter on a day to day basis. This blog will detail what common phishing e-mails contain, and how to deal with this form of attack. Phishing attacks are used to obtain information such as usernames, passwords, credit card[…]