Category: Security Guidance

A brief history of password cracking

Something that gets talked about a lot on the internet is password security and password hygiene. Everyone has heard that it’s best practice to use long passwords that are unique and complex, but I want to write a short post about why those things are important, how passwords are stored by websites, and what that means for you. The first thing to mention is USE PASSWORD MANAGERS. It’s the most important thing for keeping your accounts secure! If you don’t know what they are, it’s software that helps you generate […]

Red vs Blue – A write-up of our SkillSec workshop

I often feel that blue teaming doesn’t always get the love it deserves, so we decided that this months SkillSec would be about Red vs Blue. For those that may not be familiar with these terms, Red is the “offensive” side of security (think “attack simulation”) and blue is about defending i.e. detecting and stopping the attackers. As is often said, blue can be more challenging as you have to defend every weakness whereas with Red, you only have to find one weakness. Both are important to consider. Whilst Digital […]

Skimmers and Magecart Attacks

Magecart attacks have taken up a considerable portion of the news cycle over the past year where card data has been harvested from notable enterprises like British Airways, Newegg and Ticketmaster. While the mainstream news has moved on and become silent due to current targets not being quite as significant as BA, the attackers are still operating. In this blog post, we want to talk about a couple of mechanisms you should be using to reduce your attack surface and keep your customers safe A little background is always good: […]

“Hackers keep me up at night”​

This is something that was said to us by a small business owner who was worried their company and data wasn’t secure. To me, a statement like this means the infosec community has made it too difficult for small companies to take security into their own hands and be confident they’ve done it right. How do small companies become secure? Now it’s certainly true that hackers can be scary. There is a strange “unknown” that goes with the idea that someone could be attacking your company, reading your emails or […]

Taking Security Into Your Own Hands

At Digital Interruption we’re passionate about data and passionate about security. As well as offering the usual services you’d expect from a security company, like penetration testing and vulnerability scanning we also work with companies to help them embed security in to the core of their business. We work to advise and empower companies, embedding the skills they need to secure themselves through our training and compliance services. We believe that security is fundamental to development and should be available to everyone, not just those that can afford the hefty prices charged by many […]