Our Services
The CYBX cyber security team based in Malvern, Worcestershire, offers products and services to help your organisation become more cyber resilient and better prepared against attacks.
Penetration Testing
Vulnerability Scanning
Cyber Consultancy
Cyber Awareness Training
Our Work
Blog Posts
The latest cyber resilience related blogs by the CYBX team
Man in the Middle
A Man in the Middle attack (MITM) is where a malicious actor intercepts internet traffic on a network, to eavesdrop on the data being sent. This could be used to obtain any sensitive information that is sent unencrypted over the network, corrupt the data or simply spy on the victim to determine what websites are[…]
Vulnerable Components: CamScanner
Camscanner is a highly popular mobile application used to convert images to PDF files. A recent investigation into this app by Kaspersky Labs has uncovered a vulnerable component used by the application, designed to carry out malicious activity on the devices of users with the vulnerable version of CamScanner installed. While it is common for[…]
The Digital Spring Clean
If you haven’t already, now is an excellent time for everyone to take the opportunity to have a full on, thorough digital clean-up. This is a painstaking task, but one that will save you enormous amounts of hassle for years to come. Firstly, dig out all of your old devices. Old USB sticks, hard drives,[…]
Ransomware Decryption Service
Our article this week will focus on a project created to help businesses and individuals alike unlock their devices after a ransomware attack. The project, named “No More Ransom!” is a collaboration between National High Tech Crime Unit of Netherlands’ police, the European Crime Centre, Kaspersky and McAfee, and is designed to provide a way[…]
Biostar 2: Biometric Data Exposed
Biostar 2 is a web-based access control and time/attendance management system that is used worldwide by a number of large organisations to secure and centrally manage access to commercial buildings via the use of biometrics (i.e. Fingerprint and Face Recognition). The recently discovered security flaw has unveiled a large store of unsecured biometric data, credentials[…]
WhatsApp Fraud
Over the past couple of months, a newly created tool has been developed and used by malicious actors to exploit a recently discovered WhatsApp vulnerability. Successful exploitation of this vulnerability allows the malicious actor to manipulate quotes and images WhatsApp to say whatever they desire and even attribute them to a completely different user. This[…]
Protecting your digital footprint
Your digital footprint is becoming significantly more prevalent in recent years. With a combination of Facebook, LinkedIn, Instagram, forums and more, it is now easier than ever to build a portfolio of an individual. Your information is used to register for every online service imaginable. This information, while valuable, can be reasonably intrusive depending on[…]
Improving your Spam Filter
Our article this week will cover the importance of a spam filter, and how to use this properly to defend against phishing emails. There are two main types of phishing approach – the first uses an email address that is untargeted but is sent to multiple companies to extract data, this type will generally have[…]
Securing your device
This week we’ll be taking a step back from the technical talk. While there are a whole host of exploits, vulnerabilities, threat-actors, techniques and more, it is always most important to solidify your foundation before you start building. Our article this week will focus on general IT health care, and how to ensure that your[…]
Social Engineering pt. 1
Social Engineering is a term used to describe the process of socially manipulating someone into providing information or access to a variety of physical and digital assets. There are a variety of techniques that can be leveraged to be able to successfully perform social engineering. This article is broken into two parts, with the first[…]