Our Blog

In a recent blog post we discussed that Google had discovered a zero-day vulnerability in their Chrome browser which led to an update being issued for all users. Since then, Google has discovered and patched two more zero-day flaws discovered in the Chrome browser for desktop. These are the fourth and fifth actively exploited vulnerabilities addressed by the search giant in recent weeks. Unlike…

In a previous blog, we discussed two severe but very common issues that we frequently encounter when performing web application penetration tests. In this blog, we are going to be continuing this series by examining two further vulnerabilities that could negatively affect your web applications and discuss how you can easily remediate these issues.   Commonly referred to in its acronym form, CSRF…

This week, privacy and security researcher Samy Kamkar has disclosed a new hacking technique which allows an attacker to trick Network Address Translation (NAT) devices such as routers / firewalls to provide remote access to services on victim machines not normally accessible via the internet.   Network Address Translation (NAT) is the process where a network device, such as a firewall, remaps an…

If your Credit Union offers an online or mobile banking service, you may find your clients are using this service more frequently. With many customers embracing this new way of banking with their Credit Union, it is important to recognise the risks associated with operating an online banking service.   Throughout COVID-19, with people restricting their movements they have turned to the internet to…

On the 21/10/2020, Google released a stable channel update of Google Chrome desktop to patch several high-risk security issues which have been uncovered. Included in the patch release was a zero-day vulnerability which could be exploited by an attacker to hijack targeted computers. Designation Threat Level Description CVE-2020-15999 High Heap buffer overflow in FreeType CVE-2020-16000 High…

With the advent of COVID-19, many businesses have had to hurriedly take their businesses online. According to the IE Domain Registry, registrations of .ie domains have jumped by 56% in Q2. With so many businesses embracing this new way of working, it is important to recognise the risks associated with operating your business online. Throughout October, given it is European Cyber Security Month…

What is Cyber Hygiene? Cyber hygiene is a term that refers to improving your practices and technologies to stay safer online. With businesses growing their online presence, cyber hygiene is more important than ever. Here are some simple ways in which you can strengthen your cyber hygiene: Create Strong Passwords Passwords have been a key focus in cyber security education for almost as long as…

A ransomware attack on the University Hospital of Dusseldorf (UKD) was reported to have a fatal outcome last week. German authorities revealed that the ransomware attack caused a failure of the hospital's IT systems, which resulted in a woman who needed urgent care tragically passing away while being transferred to another hospital 20 miles away for treatment. It is believed the attack exploited a…

With Ireland’s new 5 level plan for living with COVID-19 now in effect, it has become apparent people are being advised to work from home where possible for at least the next 6 months. The entire country is currently on Level 2 which states in relation to work that you are advised to only attend work for essential on-site meetings, inductions and training. In all other instances, you should work…