Our Services
The CYBX cyber security team based in Malvern, Worcestershire, offers products and services to help your organisation become more cyber resilient and better prepared against attacks.
Penetration Testing
Vulnerability Scanning
Cyber Consultancy
Cyber Awareness Training
Our Work
Blog Posts
The latest cyber resilience related blogs by the CYBX team
Dumpster Diving
This week, we will take a step back from your digital security and focus on the basics. Many businesses focus solely on the security of their IT devices and services but begin neglecting the fundamentals. The main focus of this article is dumpster diving, which is exactly what you expect it to be, where individuals[…]
SQL Mitigation Techniques
In our previous article, we explained the dangers of SQL injection, but did not touch on the mitigation techniques to protect your business against this threat. Today we will focus on the mitigation techniques you can employ to reduce the threat of this attack to your business. Hiding errors – When a user is browsing[…]
SQL Injection Attacks
SQL (Structured Query Language) is a programming language that is used to communicate with databases, it can perform numerous tasks such as removing, adding and deleting information within the database by using the relevant SQL commands. SQL Injection is a common type of attack that allows malicious actors use to execute malicious SQL statements that[…]
Firewall
A firewall blocks network communication by looking at the address and protocol information contained within the packets. As the packet arrives at the firewall, the address and protocol information are checked against the rules programmed into the firewall. These rules can either be supplied by the vendor or created by the administrator. If there is[…]
Active Directory
Active Directory (AD) is a service developed with the intention of allowing interconnection of devices within a network. Active Directory offers management capabilities from a centralised location, and stores information about members of the domain including the users, access rights, digital assets and much more. Group Policy (GP) is a separate utility that is available[…]
Securing your Email Accounts
We have reached a point in time where your digital security is of utmost importance. Your personal bills, your banking, your social interactions, identification, hobbies and much more is almost all funnelled through the internet, and your email is the vault for every service you use.Securing your email accounts needs to be a priority. Your[…]
Types of Anti-Virus
In this blog we will be discussing the two main types of anti-virus software that are available on the market. Signature based anti-virus software will examine the file to create a signature. When a scan is performed this will compare the malware signature against a list of known malicious files, included within the anti-virus software’s[…]
Attack Library: Drive-by Attacks
Drive-by Attacks are an increasingly common type of attack, used by threat actors to force the client into performing an action without the consent of the user. The key difference between Drive-by attacks and other attacks of this nature, is that they do not require any user interaction with the malicious content for the attack[…]
Full Disk Encryprtion
A Trusted Platform Module, widely referred to as “TPM”, is a chip that resides on your computers motherboard and is responsible for generating encryption keys that work in tandem with BitLocker, a form of Full Disk Encryption which we will expand on later in the article. The main aim of the TPM is to carry[…]
End-Of Life Software
All software goes through a support cycle, starting at mainstream support, extended support and finally “End of Life”. When software is in mainstream support, provider regularly releases features and provides security updates for any bugs that are present. This support usually occurs when the software is first released and continues for the longest duration. In[…]