Thinking you are safe when you are not. It happens more often than you think. For example, Maersk's entire global transport operation was brought down by Russian-Ukrainian ransomware that went undetected. This NotPetya hack caused panic at the…

Imagine being a CISO and getting a call from management or the board: how can we prevent incidents like the one at our competitor or stakeholder? Silence follows. Because right now, you do not dare give the only correct answer…

“No-body can log in, this is a DISASTER!” the CISO's cracking voice blares in your ear. Not exactly the call you were hoping for…

Many security vulnerabilities are more than five years old, some even more than ten (!) years old…

War or no war, every conflict in the world now has an enormous digital dimension: alongside physical attacks, digital attacks are an integral part of the battlefield. The same applies now…

Phase 1. Getting help…

Will we make it to Christmas, and how? In these dark days before Christmas, still surrounded by measures to contain the ongoing pandemic, yet another malicious vulnerability has emerged in ICT environments worldwide. The NCSC has given this new vulnerability…

Important vulnerabilities were recently found in Microsoft Exchange Server. An attacker with SYSTEM privileges can remotely execute arbitrary code using a combination of vulnerabilities. According to the National Cyber Security Centre, there is a high likelihood of…

Removing administrator rights, or admin rights, does not only help reduce insider threats. Managing administrative privileges properly also improves protection against external threats…

To defend your network effectively against threats, risks must be systematically identified and mitigated or eliminated. We call this vulnerability management. When this process is properly established, the organisation stays on top of detecting…