Our Services
The CYBX cyber security team offers products and services to help your organisation become more cyber resilient and better prepared against attacks.
Penetration Testing
Vulnerability Scanning
Cyber Consultancy
Cyber Awareness Training
Our Work
Blog Posts
The latest cyber resilience related blogs by the CYBX team
GDPR: Subject Access Requests
As part of the GDPR implementation, it is now a requirement that companies release any information that they store or process on you if you request it. A Subject Access Request (SAR) is a request made by an individual to receive information regarding which data a company holds on you, and how they process it.[…]
Two-factor authentication
The standard combination of username and password is not as secure as you may think. Even longer, more complex passwords are still at threat from data breach credential dump (e.g. posting passwords on Pastebin) or elaborate password attacks combining personal information, such as creating a custom password list with your personal information included. Thankfully, Two-Factor[…]
Attack Library: Clickjacking
This week the Attack Library mini-series will focus on Clickjacking attacks – what they are, and how to defend against them. A Clickjacking Attack, also known as a UI (User Interface) Redress Attack, is used by malicious threat actors to trick users into being redirected or submitting information without their consent or knowledge. To perform[…]
Attack Library: Malware
Malware, also known as malicious software is an umbrella term that encompasses any malicious program or file that attempts to harm your computer, often by taking partial control over a device’s operation. There are a number of different types of malware, and these can be explained individually in more thorough detail. The first of these[…]
Password Security
Passwords are currently the most common authentication method used online today. While biometric alternatives are slowly gaining popularity, this is still not enough to replace passwords entirely. The primary objective of hackers is to try and retrieve your login credentials by using various password attacks. The first of these attacks is a brute force attack[…]
Attack Library: Phishing Attacks
This week the Attack Library mini-series will focus phishing e-mails, a social engineering attack that many people encounter on a day to day basis. This blog will detail what common phishing e-mails contain, and how to deal with this form of attack. Phishing attacks are used to obtain information such as usernames, passwords, credit card[…]
Attack Library: DoS (Denial of Service)
This new mini series will focus on a library of attacks that you can muster your knowledge on. The attacks of choice are elaborated on because of either their potency or their popularity. This week, we will focus on DoS (Denial of Service) attacks. A denial of service attack, more commonly referred to as a[…]
Introducing the Smart-Jacket
With smartwatches becoming increasingly common in today’s world, Google have teamed up with Levi to bring the latest in wearable tech. The Jacquard commuter smart-jacket is the next revolution in hands free technology and designed for every-day commuters. The smart-jacket features an interactive sleeve on the left side of the jacket, controlled by a small[…]
Magecart Digital Skimming
Magecart is a hacker group that specialise in digital skimming attacks. Digital skimming is a type of attack where threat actors insert malicious code into the systems on e-commerce websites responsible for handling payment information, with the aim of stealing credit or debit card information. Magecart has been responsible for the data breaches of over[…]
Microsoft Safe Links
Safe Links is one of Microsoft Office 365’s Advanced Threat Protection features to protect users from malicious URLs. It works by re-writing URLs received in emails so that, when clicked, you will first be taken to a Microsoft domain where the URL is verified for authenticity, reputation and malicious content. If the link passes the[…]