January 30, 2019

APRA CPS 234

There is only 5 months before the APRA Prudential Standard 234 comes into force. Although the Standard was announced early 2018, many APRA regulated companies are still in the process of...

January 17, 2019

DDoS – the ever growing security threat

DDoS - the ever growing security threat DDoS is now considered one of the primary threat types facing virtually every industry and business area that is exposed to the public Internet. DDoS attacks...

January 9, 2019

How to Design and Operate a DDOS Testing Program training – RSA USA 2019

A Learning Lab conducted by our COO Murray Goldschmidt Despite investment in DDoS mitigation, testing solutions is seldom on the agenda of most vulnerability management programs that focus on vulnerability scanning...

December 21, 2018

MSP Global Hack

The Federal Government has announced significant Managed Service Providers (MSPs) in numerous countries, including Australia have been compromised. Australian organisations are responsible for ensuring their IT systems and data are protected,...

December 21, 2018

2018 Wrap Up

As many businesses will be closing for the holiday season, now is not the time to be complacent or to let your guard down. Cyber threats remain prevalent and constant. So...

November 22, 2018

Presentation: Making Sense of Office 365 Email (In)Security

Organisations need to understand that Office 365 (O365) is a cloud-based business system used for email, productivity, and collaboration. This platform and its data are a popular breach target for...

October 25, 2018

Security Advisory – SOS-18-003 – Inteset Secure Lockdown

The Inteset Secure Lockdown desktop application allows the use of the deprecated SHA-1 hash function to store the Inteset administrator’s password in the Windows registry....

October 19, 2018

Presentation: APIG NSW – Cyber in Focus – Outsourcing IT Services and Managed Services – Are you secure?

This year Sense of Security presented at APIG NSW on the topic of Outsourcing IT Services and Managed Services – Are you secure? The main points that were discussed included:...

October 10, 2018

Micro Services, Containers and Serverless PaaS Web Apps? How safe are you? – AISA 2018 presentation

As containers continue their march into the IT mainstream, like most new technologies, they hold great prospects for improvements in efficiency, scalability and security. However, poor implementation practice generally lets...

October 10, 2018

Presentation: AISA National Conference 2019-Micro Services, Containers and Serverless PaaS Web Apps? How safe are you?

As containers continue their march into the IT mainstream, like most new technologies, they hold great prospects for improvements in efficiency, scalability and security. However, poor implementation practice generally lets...

August 31, 2018

SMBs need to come to grips with digital dangers

NO BUSINESS is safe when it comes to cyber-attacks, and this is what small business fails to realise. Many (most) small businesses generally have not taken the time to consider the...

August 17, 2018

Presentation: AusCERT 2018 – Introduction to IoT Security Assessment and Penetration Testing

This year Sense of Security conducted a full day workshop around the buzz word 'IoT', what implications it presents to organisations and how to secure against it. For more information: AusCERT2018-Introduction-to-IoT-Security-Assessment-and-Penetration-Testing...

August 9, 2018

Automating SecDevOps – RSA USA 2018

DevSecOps is currently a big buzzword within the security industry. The basic notion around DevSecOps is to align security amongst both the development department and the operations department and make...

August 6, 2018

IoT security flaws to bite in 2018

Poorly secured Internet of Things devices are shaping up to be a major threat to Australian organisations. Our CTO Jason Edelstein sat down with Rohan Pearce from Computerworld to discuss the threat...

August 1, 2018

Business failing the cyber security test

The Notifiable Data Breach Scheme was introduced in February this year to assist in reducing the amount of data breaches occurring and to generate responsibility towards organisations reporting breaches. This...

July 26, 2018

Presentation: Australian Cyber Innovation Executive Lunch – AWS – DevOps Cyber Attack Kill Chain with Automated Security Response & Visibility

This year our COO Murray Goldschmidt presented at the Australian Cyber Innovation Executive Lunch. The presentation was around AWS and the DevOps Cyber Attack Kill Chain with Automated Security Response...