Posts by Cass Cassar

The demand for cyber security professionals in the UK is growing at a pace comparable to that of the rise in cyber threats. Since 2016, an average increase of 14% demand for these professionals implies that the UK cyber security workforce would need to grow by approximately 12,000 people per annum to meet the expected…

A CBK – sometimes called a Body of Knowledge – refers to a peer-developed compendium of what a competent professional in their respective field must know, including the skills, techniques and practices that are routinely employed. Essential if you’re pursuing a senior role in Information Security, CISSP provides an extensive overview of this. The CISSP certification…

Adversaries exploited vulnerabilities in Kaseya VSA IT Management software in July 2021 as part of a campaign to spread the ransomware Sodinokibi, commonly known as REvil. VSA is widely used by managed service providers (MSPs) to remotely manage IT systems. The attackers leveraged zero-day vulnerabilities to obtain remote control of the MSPs’ VSA installations, which…

Supply chain breaches were common in 2021, and they aren’t likely to disappear anytime soon. When an attacker compromises a software developer, hardware manufacturer, or service provider, the adversary then uses that access to target consumers who utilize the compromised software, gear, or service. SolarWinds, Kaseya, Node Package Manager (NPM) breaches, and Log4j are among…

The surge in attackers spreading their threats beyond data encryption was a key ransomware development in 2021. Several ransomware gangs have shifted their tactics to steal and  exfiltrate data before encrypting it and requesting payment to prevent the data from being leaked publicly. While this technique isn’t new (it dates back to at least 2019),…

Most organizations and businesses have embraced technology to optimize their operation. The introduction of these technologies has also led to the rise in cyber security risks. There are various ways that cyber threats can cripple businesses. Cyber security awareness is vital in every organization deeply invested in online dealings. Cyber-attacks such as ransomware and data…