Author: Jacky

Are you aware of the potential risks your organisation faces from cyber-attacks? As technology advances, so do attackers’ methods to breach security systems. In fact, according to a recent study, an average data breach costs $3.86…

A red team is a simulated cyber-attack that is very close to an actual attack. It is a cyber-security assessment that brings you very close to understanding how prepared your organization is to defend itself…

The malicious activities of hackers pose a constant threat to our cyber world. To effectively combat their sinister plans, it is necessary to adopt a similar mindset. Ethical hacking involves simulating cyberattacks to uncover security…

Vulnerabilities in U.S. cybersecurity were exposed when, according to sources, the Darkside Colonial Thursday attack paralyzed operations in the largest pipeline for refined oil products in the United States. The urgency to have a stronger…

Client data is sensitive information, and for a company to handle it, regulations have to be in place to protect the data from malicious intent. This is where GDPR comes in to ensure data handlers…

A Financial Services and Technology organisation takes a robust approach to secure its data, infrastructure, assets, and people, with stringent information security policies and procedures and a comprehensive security architecture comprising best-of-breed technical solutions.

Sapphire’s SOC Team have been tracking a recent Crypto Mining campaign targeting Linux systems, utilising a proof-of-concept (PoC) hack tool hosted on GitHub known as ‘CHAOS’.

Like all organisations, Sapphire Utility Solutions (SUS) is a target for cybercriminals. This is only exasperated by its rapid growth.

Whilst having extensive security experience within the team, SUS wanted to enhance its cybersecurity capabilities and provide the best resources for its team to take advantage of, so it decided to outsource its cybersecurity via Sapphire’s Managed Security service.

For many organisations, cybersecurity is a priority for their in-house IT team and security operations teams still function as part of IT, whereas others are separated into their organisation.

Cyber insurance, commonly referred to as cyber-liability insurance, is a type of insurance that aids in shielding organisations from the repercussions of hacking and cyberattacks. Cyber insurance can minimise the organisation disruption caused by a cyber incident and its aftermath with the help of cyber insurance policy coverage. It can also potentially cover some of the associated costs.  

To support its continued growth, a Fintech organisation wanted to show prospective clients evidence of its security maturity while protecting its infrastructure and achieving regulatory compliance with the Financial Conduct Authority (FCA).

‘What are the differences between these three types of detection and response?’ Unlike legacy security tools, network detection and response don’t rely on signature-based security tools. They often can’t detect new cyber attacks unless these signatures have already been recognised as cyber attacks on a network. However, NDR works to monitor and analyse networks via built-in response capabilities.  

Security awareness training objective is to ensure that employees understand the role they can play in helping to enhance and enforce the organisations’ security. From understanding data protection requirements to being able to spot the telltale signs of a phishing email, your employees are your first and foremost defence against a security breach.

SIEM (Security Information and Event Management) is one of many approaches to security management. It combines SIM (Security Information Management) and SEM (Security Event Management) to aggregate data from a variety of sources as well as identify any deviations and act against them.