The Top Ten Cybersecurity Threats for 2024 are More Sophisticated, Cunning
12.15.23The top ten Cybersecurity threats for 2024 demonstrate a growing sophistication and evolution of attack techniques.
12.15.2312.15.2312.15.23
Executing a Chromecast Exploit – Times Three
12.06.23Chromecast with Google TV (1080P) Secure-Boot Bypass Introduction: Implications of These Findings This piece details the development of a chain of three exploits intended to allow an individual to run a custom OS/unsigned code on the Chromecast with Google (CCwGTV) 1080P. Security researchers Jan Altensen, Ray Volpe, and I developed this chain of vulnerabilities as… Read more »
Tales From the Road: OT Security Assessment of Water Utility Illuminates the Path for Widespread Industry Improvement
10.16.23Our recent OT security assessment at a private water utility illustrates how no industry is safe from security threats. Regardless of sector, all industries, from education, to finance, to water treatment, are susceptible to bad actors taking advantage of their internally-overlooked vulnerabilities. While water utilities have historically lagged behind other industries in OT security, the… Read more »
Tales From the Road: The Power of Physical Penetration Testing
10.05.23Is Your Organization’s Physical Security Top-Notch? Having high-level security measures at any organization is a must, especially for large corporations that deal with specific clientele and hold confidential and sensitive information. We know attackers find ways to gain access to corporate networks remotely, but physical access poses even more risk, as attackers can potentially get… Read more »
Tales From the Road: Physical Penetration Testing Breaches Weak Boundaries
09.07.23How Secure Are Your Organization’s Premises? When it comes to entry points into an organization, network security gaps and vulnerabilities aren’t the only concern. Bad actors can choose a more traditional way in – physically walking through the doors. You may have locks, ID badges, cameras, and employee protocols, but the best way to know… Read more »
Detecting Hardware Vulnerabilities with IoT Penetration Testing
08.24.23Welcome to a new series of DirectDefense blog posts about hardware and IoT penetration testing! The goal of this 101 series is to shed light on common hardware I/O interfaces, associated protocols, and the multitude of vulnerabilities that can arise when they are left unprotected. While hardware reconnaissance will be briefly discussed, this particular article… Read more »
Tales From the Road: What An Enterprise Risk Assessment Looks Like
08.15.23Has your corporation been keeping up-to-date on the latest security practices? An important one to bring into your security repertoire is an enterprise risk assessment. It’s crucial to regularly conduct enterprise assessments to ensure the effectiveness of your corporation’s security measures. An enterprise risk assessment helps your organization continuously update and measure all security protocols,… Read more »
Combat Ransomware: Try Halcyon’s Anti-Ransomware Platform Free for 60 Days
08.08.23Armor Your Endpoints Free for 60 Days If you’ve experienced the impact of a ransomware attack, you understand how severely it can disrupt business operations. That is why we’re partnering with Halcyon to offer a 60-day free trial of their anti-ransomware platform. Halcyon’s next-generation anti-ransomware solution stops attackers at all phases of a breach using… Read more »
Tales From the Road: A Cybersecurity Breach is Only A Phone Call Away
07.10.23How DirectDefense Compromised a Banking Institution’s Help Desk and Member Services Using a Phone Social Engineering Attack + 5 Common Vishing Pitfalls to Avoid Cyber criminals will stop at nothing to steal personal and confidential information from their target. In recent years, many high-profile attacks have leveraged targeted phone social engineering attacks, known as vishing.… Read more »
Tales From the Road: When it comes to your SCADA Network: Segment. Segment. Segment.
06.13.23How DirectDefense uncovered weaknesses in a municipality’s SCADA systems and a need for SCADA network segmentation A large municipality enlisted the services of DirectDefense to perform a Critical Infrastructure Assessment of the SCADA network controlling their water and electric services. During the SCADA assessments, our team identified several weaknesses that demonstrated the need for SCADA… Read more »
