- Our solutions
-
Our services
- Software Escrow
- Cyber Security
- Web Performance
- Strategy Consulting
- Software Testing
-
Our research
-
Whitepapers
- Open Banking: Security considerations & potential risks
- SOC maturity & capability
- Automated Reverse Engineering of Relationships Between Data Structures in C++ Binaries
- Understanding cyber risk management vs uncertainty with confidence in 2017
- Mobile & web browser credential management: Security implications, attack cases & mitigations
- Best practices with BYOD
- Adversarial Machine Learning: Approaches & defences
- eBook: Breach notification under GDPR - How to communicate a personal data breach
- Encryption at rest: Not the panacea to data protection
- Managing PowerShell in a modern corporate environment
- Integrity destroying malicious code for financial or geopolitical gain: a vision of the future?
- Endpoint connectivity
- Non-flood/non-volumetric Distributed Denial of Service (DDoS)
- General Data Protection Regulation: Knowing your data
- Using graph databases to assess the security of thingernets based on the thingabilities and thingertivity of things
- Beyond data loss prevention
- How to protect yourself & your organisation from phishing attacks
- Rise of the machines: Machine Learning & its cyber security applications
- Combating Java Deserialisation Vulnerabilities with Look-Ahead Object Input Streams (LAOIS)
- Latest threats to the connected car & intelligent transport ecosystem
- Understanding the insider threat & how to mitigate it
- Matty McMattface: Security implications, mitigations & testing strategies for biometric facial recognition systems
- Securing the continuous integration process
- Applying normalised compression distance for architecture classification
- Network Attached Security: Attacking a Synology NAS
- Accessing Private Fields Outside of Classes in Java
- Mergers & Acquisitions (M&A) cyber security due diligence
- Peeling back the layers on defence in depth…knowing your onions
- Optimum Routers: Researching Managed Routers
- End-of-life pragmatism
- State-of-the-art email risk
- Elephant in the Boardroom Survey 2016
- How will GDPR impact your communications?
- Research Insights Volume 9 - Modern Security Vulnerability Discovery
- Post-quantum cryptography overview
- My name is Matt - My voice is my password
- How to Backdoor Diffie-Hellman
- My Hash is My Passport: Understanding Web and Mobile Authentication
- Local network compromise despite good patching
- Abusing Privileged and Unprivileged Linux Containers
- General Data Protection Regulation 2016 – are you ready?
- Private sector cyber resilience and the role of data diodes
- Understanding and Hardening Linux Containers
- Business Insights: Cyber Security in the Financial Sector
- The Importance of a Cryptographic Review
- Ransomware: what organisations can do to survive
- Building WiMap the Wi-Fi Mapping Drone
- A few notes on usefully exploiting libstagefright on Android 5.x
- Research Insights Volume 8 - Hardware Design: FPGA Security Risks
- Exploiting CVE-2014-0282
- Going "AUTH the Rails" on a Crazy Train
- Threat Intelligence: Benefits for the Enterprise
- Best Practices for the use of Static Code Analysis within a Real-World Secure Development Lifecycle
- Understanding Microsoft Word OLE Exploit Primitives: Exploiting CVE-2015-1642 Microsoft Office CTaskSymbol Use-After-Free Vulnerability
- Secure Messaging for Normal People
- Porting the Misfortune Cookie Exploit: A Look into Router Exploitation Using the TD-8817
- eBook - Do you know how your organisation would react in a real-world attack scenario?
- Research Insights Volume 7: Exploitation Advancements
- Secure Device Manufacturing: Supply Chain Security Resilience
- Exploiting CVE-2015-2426, and How I Ported it to a Recent Windows 8.1 64-bit
- Exploiting MS15-061 Use-After-Free Windows Kernel Vulnerability
- Password and brute-force mitigation policies
- Research Insights Volume 6: Common Issues with Environment Breakouts
- Faux Disk Encryption: Realities of Secure Storage On Mobile Devices
- Modelling Threat Actor Phishing Behaviour
- Internet of Things Security
- Research Insights Volume 5 - Sector Focus: Automotive
- The why behind web application penetration test prerequisites
- Blackbox iOS App Assessments Using idb
- Cyber red-teaming business-critical systems while managing operational risk
- Common Security Issues in Financially-Orientated Web Applications
- Trusted Gateway
- eBook - Planning a robust incident response process
- Research Insights Volume 4 - Sector Focus: Maritime Sector
- Trust in the New Internet Survey
- SaaS and the enterprise perception
- Research Insights Volume 3 - How are we breaking in: Mobile Security
- Research Insights Volume 2 - Defensive Trends
- Preparing for Cyber Battleships – Electronic Chart Display and Information System Security
- Managing Cyber Risk in the Supply Chain
- Protecting stored cardholder data (an unofficial supplement to PCI DSS V3.0)
- Trust in the Internet Survey
- Research Insights Volume 1 - Sector Focus: Financial Services
- How organisations can properly configure SSL services to ensure the integrity and confidentiality of data in transit
- Erlang Security 101
- Perfect Forward Security
- More Advanced SQL Injection
- Automated enumeration of email filtering solutions
- Analysis of Boomerang Differential Trials via a SAT-Based Constraint Solver URSA
- Understanding Ransomware: Impact, Evolution and Defensive Strategies
- Early CCS Attack Analysis
- Auditing Enterprise Class Applications and Secure Containers on Android
- Security of Things: An Implementers’ Guide to Cyber-Security for Internet of Things Devices and Beyond
- USB attacks need physical access right? Not any more...
- The factoring dead: Preparing for the cryptopocalypse
- Application Layer Attacks – The New DDoS Battleground
- What is the point of performance testing?
- An Analysis of Mobile Geofencing App Security
- Login Service Security
- Introducing idb-Simplified Blackbox iOS App Pentesting
- Browser Extension Password Managers
- Revealing Embedded Fingerprints: Deriving Intelligence from USB Stack Interactions 2013
- Oracle Forensics Part 5: Finding Evidence of Data Theft in the Absence of Auditing
- Oracle Forensics Part 3: Isolating Evidence of Attacks Against the Authentication Mechanism
- HDMI Ethernet Channel
- Black Hat Europe 2013 Andy Davis: To dock or not to dock...
- A Simple and Practical Approach to Input Validation
- Writing Small Shellcode
- Writing Secure ASP Scripts
- Windows 2000 Format String Vulnerabilities
- The Pentesters Guide to Akamai
- The Impact on Performance of Mobile Devices & Connections
- The Demise of Signature Based Antivirus
- Stopping Automated Attack Tools
- Security Best Practice: Host Naming & URL Conventions
- Securing PL/SQL Applications with DBMS_ASSERT
- Second-Order Code Injection Attacks
- Quantum Cryptography - A Study Into Present Technologies and Future Applications
- Passive Information Gathering - The Analysis of Leaked Network Security Information
- Oracle Forensics Part 7 Using the Oracle System Change Number in Forensic Investigations
- Oracle Forensics Part 6: Examining Undo Segments, Flashback and the Oracle Recycle Bin
- Oracle Forensics Part 4: Live Response
- Oracle Forensics Part 2: Locating Dropped Objects
- Oracle Forensics Part 1: Dissecting the Redo Logs
- Non-stack Based Exploitation of Buffer Overrun Vulnerabilities on Windows NT 2000 XP
- New Attack Vectors and a Vulnerability Dissection of MS03-007
- Microsoft's SQL Server vs. Oracle's RDBMS
- Microsoft SQL Server Passwords
- Low Cost Attacks on Smart Cards - The Electromagnetic Side-Channel
- Load Testing Top 10 Tips
- Inter-Protocol Exploitation
- Inter-Protocol Communication
- Improving your Network and Application Assurance Strategy in an environment of increasing 0day vulnerabilities
- Implementing and Detecting a PCI Rootkit
- HDMI - Hacking Displays Made Interesting
- Hackproofing Oracle Application Server
- Hackproofing MySQL
- Hackproofing Lotus Domino Web Server
- Hacking Appliances: Ironic exploits in security products
- Fuzzing USB devices using Frisbee Lite
- Fuzzing the Easy Way Using Zulu
- Exporting Non-Exportable RSA Keys
- Exploiting Security Gateways Via Web Interfaces
- BlackBerry PlayBook Security - Part Two - BlackBerry Bridge
- BlackBerry PlayBook Security - Part One
- Attacking the Windows Kernel (Black Hat Las Vegas 2007)
- Assessing IIS Configuration Remotely
- Anti Brute Force Resource Metering
- An Introduction to Heap overflows on AIX 5.3L
- All Style & No Performance
- Advanced SQL Injection in SQL Server Applications
- 55 Killer Questions to ask before launching a website
- 5 Reasons to Care About WPO
- Windows Phone 7 Application Security Survey
- Content Security Policies Best Practices
- Bypassing Oracle DBMS_ASSERT (in certain situations)
- Attacks on SSL
- An Introduction to Authenticated Encryption
- Assuring Your DDoS Defences
- HTML5 Security The Modern Web Browser Perspective
- Weaknesses and Best Practices of Public Key Kerberos with Smart Cards
- "Exploiting Rich Content"
- Security Compliance as an Engineering Discipline
- Secure Session Management With Cookies for Web Applications
- Secure Application Development on Facebook
- ProxMon: Automating Web Application Penetration Testing
- iSEC’s Analysis of Microsoft’s SDL and its ROI
- IAX Voice Over-IP Security
- Hunting SQL Injection Bugs
- Exposing Vulnerabilities in Media Software
- Developing Secure Mobile Applications for Android
- Cross Site Request Forgery: An Introduction to a Common Web Application Weakness
- Common Flaws of Distributed Identity and Authentication Systems
- Command Injection in XML Signatures and Encryption
- Cleaning Up After Cookies
- Building Security In: Software Penetration Testing
- Blind Security Testing – An Evolutionary Approach
- Aurora Response Recommendations
- Attacking Web Service Security: Message Oriented Madness, XML Worms and Web Service Security Sanity
- Creating a Safer OAuth User Experience
- An Adaptive-Ciphertext Attack Against “I ⊕ C” Block Cipher Modes With an Oracle
- Lessons learned from 50 bugs: Common USB driver vulnerabilities
- Thin Clients: Slim Security
- Weak Randomness Part I – Linear Congruential Random Number Generators
- DNS Pinning and Web Proxies
- Database Security Brief: The Oracle Critical Patch Update for April 2007
- Exploiting PL/SQL Injection Flaws with only CREATE SESSION Privileges
- Oracle Passwords and OraBrute
- Dangling Cursor Snarfing: A New Class of Attack in Oracle
- Which database is more secure? Oracle vs. Microsoft
- Database Servers on Windows XP and the unintended consequences of simple file sharing
- Data-mining with SQL Injection and Inference
- Buffer Underruns, DEP, ASLR and improving the Exploitation Prevention Mechanisms (XPMs) on the Windows platform
- The Pharming Guide - Understanding and preventing DNS related attacks by phishers
- Blind Exploitation of Stack Overflow Vulnerabilities
- Slotting Security into Corporate Development
- The Phishing Guide: Understanding & Preventing Phishing Attacks
- Defeating the Stack Based Buffer Overflow Prevention Mechanism of Microsoft Windows 2003 Server
- Threat Profiling Microsoft SQL Server
- Variations in Exploit methods between Linux and Windows
- Violating Database - Enforced Security Mechanisms
- E-mail Spoofing and CDONTS.NEWMAIL
- Creating Arbitrary Shellcode In Unicode Expanded Strings
-
Technical advisories
- Technical Advisory: Multiple Vulnerabilities in ManageEngine Desktop Central
- Technical Advisory: Reflected Cross-Site Scripting (XSS) vulnerability in Jenkins Delivery Pipeline plugin
- Unauthenticated XML eXternal Entity (XXE) vulnerability
- Technical Advisory: Adobe ColdFusion RMI Registry.bind() Deserialisation RCE
- Technical Advisory: Adobe ColdFusion Object Deserialisation RCE
- Technical Advisory: Authentication rule bypass
- Technical advisory: Remote shell commands execution in ttyd
- Technical advisory: CVE-2017-8592 - XMLHttpRequest in IE followed 307 redirections with additional or customised headers
- D-LINK DIR-850L web admin interface vulnerable to stack-based buffer overflow
- Technical Advisory: Nexpose Hard‐coded Java Key Store Passphrase Allows Decryption of Stored Credentials
- Technical Advisory: Shell Injection in SourceTree
- Technical Advisory: Shell Injection in MacVim mvim URI Handler
- Technical Advisory: Multiple Vulnerabilities in Accellion File Transfer Appliance
- Privilege Escalation in CA Common Services casrvc due to Arbitrary Write
- Java RMI Registry.bind() Unvalidated Deserialization
- iOS MobileSlideShow USB Image Class arbitrary code execution
- Flash local-with-filesystem Bypass in navigateToURL
- D-Link routers vulnerable to Remote Code Execution (RCE)
- Denial of Service in Parsing a URL by ierutil.dll
- Windows 10 USB Mass Storage driver arbitrary code execution in kernel mode
- Microsoft Office Memory Corruption Vulnerability
- Potential false redirection of web site content in Internet in SAP NetWeaver web applications
- Multiple security vulnerabilities in SAP NetWeaver BSP Logon
- OSX afpserver remote code execution
- Flash security restrictions bypass: File upload by URLRequest
- Adobe Flash Player Cross Domain Policy Bypass
- Multiple Vulnerabilities in MailEnable
- NCC Group Malware Technical Note
- Xen HYPERVISOR_xen_version stack memory revelation
- SmarterMail - Stored XSS in emails
- Cups-filters remote code execution
- Oracle Java Installer Adds a System Path Which is Writable by All
- Oracle E-Business Suite Pre-Auth SQLi with DBA Privileges
- Apple QuickTime Player m4a Processing Buffer Overflow
- Microsoft Internet Explorer CMarkup Use-After-Free
- Adobe flash sandbox bypass to navigate to local drives
- Nessus Authenticated Scan - Local Privilege Escalation
- iOS 7 arbitrary code execution in kernel mode
- Apple CoreAnimation Heap Overflow
- DataArmor Full Disk Encryption 3.0.12c - Restricted Environment breakout, Privilege Escalation and Full Disk Decryption
- BlackBerry Link WebDav Server Bound to the BlackBerry VPN Adapter
- Symantec Backup Exec 2012 Backup/Restore Data Traverses Memory with Weak ACLs
- Symantec Backup Exec 2012 - Persistent XSS Vulnerability Affecting Custom Reports
- Oracle Gridengine sgepasswd Buffer Overflow
- Nagios XI Network Monitor Blind SQL Injection
- Nagios XI Network Monitor - OS Command Injection
- Oracle Hyperion 11 Directory Traversal
- Bit51 Better Security WP Security Plugin - Unauthenticated Stored XSS to RCE
- Windows Remote Desktop Memory Corruption Leading to RCE on XPSP3
- SysAid Helpdesk Pro - Blind SQL Injection
- Symantec Messaging Gateway SSH with backdoor user account + privilege escalation to root due to very old Kernel
- Symantec Messaging Gateway Out of band stored XSS delivered by email
- Symantec Messaging Gateway Easy CSRF to add a backdoor-administrator (for example)
- Symantec Messaging Gateway Arbitrary file download is possible with a crafted URL (authenticated)
- Squiz CMS File Path Traversal
- Nagios XI Network Monitor - Stored and Reflective XSS
- McAfee Email and Web Security Appliance v5.6 - Session hijacking (and bypassing client-side session timeouts)
- McAfee Email and Web Security Appliance v5.6 - Password hashes can be recovered from a system backup and easily cracked
- McAfee Email and Web Security Appliance v5.6 - Arbitrary file download is possible with a crafted URL, when logged in as any user
- McAfee Email and Web Security Appliance v5.6 - Any logged-in user can bypass controls to reset passwords of other administrators
- McAfee Email and Web Security Appliance v5.6 - Active session tokens of other users are disclosed within the UI
- Apple OSX/iPhone iOS ImageIO TIFF getBandProcTIFF TileWidth Heap Overflow
- Symantec Backup Exec 2012 - OS version and service pack information leak
- Symantec Backup Exec 2012 - Backup Exec Utility Stored XSS when adding Groups, Servers and Computers
- Symantec Backup Exec 2012 - Linux Backup Agent Heap Overflow
- Cisco VPN Client Privilege Escalation
- Blue Coat BCAAA Remote Code Execution Vulnerability
- Apple Mac OS X ImageIO TIFF Integer Overflow
- Cisco IPSec VPN Implementation Group Name Enumeration
- Immunity Debugger Buffer Overflow
- Remote code execution in ImpressPages CMS
- Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass
- Solaris 11 USB Hub Class descriptor kernel stack overflow
- Lumension Device Control (formerly Sanctuary) remote memory corruption
- LibAVCodec AMV Out of Array Write
- OS X 10.6.6 Camera Raw Library Memory Corruption
- AtHoc Toolbar
- Archived Technical Advisories
- Critical Risk Vulnerability in SAP DB Web Server (Stack Overflow)
- Critical Risk Vulnerability in Ingres (Pointer Overwrite 2)
- Critical Risk Vulnerability in Ingres (Pointer Overwrite 1)
- Critical Risk Vulnerability in SAP Message Server (Heap Overflow)
- Adobe Acrobat Reader XML Forms Data Format Buffer Overflow
- ASE 12.5.1 datatype overflow
- Back Office Web Administration Authentication Bypass
-
Patch notifications
- Oracle Retail Invoice Manager SQL Injection
- Oracle Retail Integration Bus Manager Directory Traversal
- Oracle 11g TNS listener remote Null Pointer Dereference
- Oracle 11g TNS listener remote Invalid Pointer Read
- Virtual Access Monitor Multiple SQL Injection Vulnerabilities
- Windows USB RNDIS driver kernel pool overflow
- Medium Risk Vulnerability in Symantec Network Access Control
- Medium Risk Vulnerability in Symantec Enterprise Security Management
- OS X Lion USB Hub Class Descriptor Arbitrary Code Execution
- Symantec Messaging Gateway - Unauthorised SSH access
- Symantec Messaging Gateway - Unauthenticated detailed version disclosure
- Symantec Messaging Gateway - Out of band stored XSS via email
- Symantec Messaging Gateway - Authenticated arbritary file download
- Symantec Messaging Gateway - Addition of a backdoor adminstrator via CSRF
- Windows remote desktop memory corruptoin leading to RCE on XPSP3
- SysAid Helpdesk stored XSS
- SysAid Helpdesk blind SQL injection
- Symantec Message Filter Unauthenticated verbose software version information disclosure
- Symantec Message Filter Session Hijacking via session
- Nagios XI Network Monitor Stored and Reflected XSS
- McAfee Email and Web Security Appliance Session hijacking and bypassing client-side session timeouts
- McAfee Email and Web Security Appliance Reflective XSS allowing an attacker to gain session tokens
- McAfee Email and Web Security Appliance Password hashes can be recovered from a system backup and easily cracked
- McAfee Email and Web Security Appliance Arbitrary file download is possible with a crafted URL, when logged in as any user
- McAfee Email and Web Security Appliance Any logged-in user can bypass controls to reset passwords of other administrators
- McAfee Email and Web Security Appliance Active session tokens of other users are disclosed within the UI
- Samba Andx Request Remote Code Execution
- Samba on the BlackBerry PlayBook
- Whatsupgold Premium Directory traversal
- PRTG Network Monitor Command injection
- Symantec PC Anywhere Remote Code Extecution
- Impress Pages CMS Remote Code Execution
- NX Server for Linux Arbitrary Files can be read with root privileges
- Solaris 11 USB hubclass
- Lumension Device Control Remote Memory Corruption
- Image IO Memory Corruption
- Threat briefs
- Disclosure Policy
-
Books
- iOS Application Security: The Definitive Guide for Hackers and Developers
- Secure Coding Rules for Java LiveLessons, Part 1
- Using WebPageTest
- The Mobile Application Hacker’s Handbook
- Web Perfomance
- Social Engineering Penetration Testing
- The CERT® C Coding Standard, Second Edition: 98 Rules for Developing Safe, Reliable, and Secure Systems
- The Browser Hacker's Handbook
- Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
- Secure Coding in C and C++, 2nd Edition
- Professional C Programming LiveLessons, (Video Training) Part I: Writing Robust, Secure, Reliable Code
- CERT Oracle Secure Coding Standard for Java
- CERT C Secure Coding Standard
- Building Systems from Commercial Components
- The Shellcoder's Handbook: Discovering and Exploiting Security Holes, 2nd Edition
- Secure Coding in C and C++
- The Database Hacker's Handbook
- SQL Server Security
- Modernizing Legacy Systems: Software Technologies, Engineering Processes, and Business Practices
-
Public tools
- Readable Thrift
- Azucar
- TPM Genie
- Discovering Smart Contract Vulnerabilities with GOATCasino
- BLEBoy
- AutoRepeater: Automated HTTP Request Repeating With Burp Suite
- Pointer Sequence Reverser (PSR)
- Python Class Informer: an IDAPython plugin for viewing run-time type information (RTTI)
- Decoder Improved Burp Suite Plugin
- G-Scout
- Sobelow: Static analysis for the Phoenix Framework
- Call Map: A Tool for Navigating Call Graphs in Python
- AssetHook
- WSSiP: A Websocket Manipulation Proxy
- Autochrome
- IP-reputation-snort-rule-generator
- Security First Umbrella
- Forensic Fuzzing Tools
- IG Learner Walkthrough
- scenester
- port-scan-automation
- metasploitavevasion
- lapith
- dotnetpaddingoracle
- FrisbeeLite
- Windows DACL Enum Project
- umap
- grepify
- firstexecution
- Fat-Finger
- EDIDFuzzer
- easyda
- dotnetpefuzzing
- cisco-SNMP-enumeration
- CECSTeR
- IODIDE
- Shocker
- DIBF - Updated
- NCLoader
- Zulu
- RtspFuzzer
- typofinder
- SSLyze v0.8
- Introspy for Android
- Android-SSL-TrustKiller
- Android-OpenDebug
- Android-KillPermAndSigChecks
- whitebox
- vlan-hopping
- Pip3line
- ncccodenavi
- creep-web-app-scanner
- tybocer
- xcavator
- WindowsJobLock
- 44Con2013Game
- PeachFarmer
- Tattler
- YoNTMA
- tcpprox
- TLSPretense — SSL/TLS Client Testing Framework
- The SSL Conservatory
- iOS SSL Killswitch
- Hiccupy
- Android SSL Bypass
- hostresolver
- File Fuzzers
- Ragweed
- Nerve
- Kivlad
- WSMap
- WSBang
- Windows IPC Fuzzing Tools
- WebRATS
- SecureIE.ActiveX
- SecureCookies
- SecureCisco
- SecureBigIP
- SAML Pummel
- pySimReader
- ProxMon
- Package Play
- Manifest Explorer
- Jailbreak
- iSEC Partners Releases SSLyze
- Intent Sniffer
- Intent Fuzzer
- HTTP Profiler
- Gizmo
- Fuzzbox
- DECTbeacon
- CyberVillainsCA
- Memory Gap
- Mallory and Me: Setting up a Mobile Mallory Gateway
- Mallory: Transparent TCP and UDP Proxy
-
Presentations
- Self-Driving Cars- The future is now...
- Black Hat USA 2015 presentation: Broadcasting your attack-DAB security
- Mature Security Testing Framework
- The L4m3ne55 of Passw0rds: Notes from the field
- Maritime Cyber Security: Threats and Opportunities
- Webinar: SMACK, SKIP-TLS & FREAK SSL/TLS vulnerabilities
- Cloud Security Presentation
- Webinar: 4 Secrets to a Robust Incident Response Plan
- Webinar - PCI Version 3.0: Are you ready?
- Cyber Essentials Scheme
- USB under the bonnet: Implications of USB security vulnerabilities in vehicle systems
- How much training should staff have on cyber security?
- Absolute Security
- DDoS Common Approaches and Failings
- Automating extraction from malware and recent campaign analysis
- Phishing Stories
- Social Engineering
- External Enumeration and Exploitation of Email and Web Security Solutions
- Dissecting social engineering attacks
- SSL checklist for pentesters
- U plug, we play
- Threats and vulnerabilities within the Maritime and shipping sectors
- Batten down the hatches: Cyber threats facing DP operations
- Hacking a web application
- How we breach network infrastructures and protect them
- BlackHat Asia USB Physical Access
- Mobile web performance
- Practical SME security on a shoestring
- Mobile World Congress - Mobile Internet of Things
- Payment Card Industry Data Security Standard (PCI DSS) A Navigation and Explanation of Changes from v2.0 to v3.0
- 44CON Workshop - How to assess and secure iOS apps
- What the HEC? Security implications of HDMI Ethernet Channel and other related protocols
- Hacking Displays Made Interesting
- Fuzzing the Easy Way Using Zulu
- Revealing Embedded Fingerprints: Deriving intelligence from USB stack interactions
- USB Undermining Security Barriers:further adventures with USB
- Harnessing GPUs Building Better Browser Based Botnets
- To dock or not to dock, that is the question: Using laptop docking stations as hardware-based attack platforms
- Finding the weak link in binaries
- RSA Conference - Mobile Threat War Room
- Software Security Austerity Security Debt in Modern Software Development
- When Security Gets in the Way: PenTesting Mobile Apps That Use Certificate Pinning
- The Myth of Twelve More Bytes: Security on the Post-Scarcity Internet
- Mobile apps and security by design
- They Ought to Know Better: Exploiting Security Gateways via their Web Interfaces
- The role of security research in improving cyber security
- Exporting non-exportable RSA keys
- Database Security: A Christmas Carol
- Hacking the Extensible Firmware Interface
- VoIP Security Methodology and Results
- Advanced Exploitation of Oracle PL/SQL Flaws
- Firmware Rootkits: The Threat to the Enterprise
- Public Reports
-
Whitepapers
-
About us
- What We Do
-
Newsroom & Events
-
In the media
-
2015
- January
- February
-
March
- Retail Fraud - Less than 25% feel safe on the internet
- Business Computing World - SaaS Assured treble for NCC Group
- ZDNet - NCC Group to audit OpenSSL for security holes
- The Register - Bad movie: Hackers can raid networks with burnt Blu-Rays
- IT Security Guru - NCC Group crown 13 graduates
- Ars Technica - More IoT insecurity: This Blu-ray disc pwns PCs and DVD players
- April
- May
- June
- July
- August
- September
-
October
- Biospace: LDRA Tool Suite Features Industry’s Most Advanced Code Checker for CERT C Compliance
- Security Week: Study Analyzes Corporate Security Practices Across Industries
- Information Age - Why software can never replace the human security analyst
- Education Technology: Teaching School to Put Their Heads in the Cloud
- BBC Radio Manchester - How to Stay Safe Online
- Power Engineering International - Cybersecurity: Defending the grid
- The Register - Security for connected cars
- 'Whale' finance fraud hits businesses
-
November
- NCC Group catches Fox in £94m cyber security takeover
- FedScoop: Cybersecurity Insights & Perspectives
- CBS News- Car Thieves May Be Hacking Key Fobs
- BBC Radio 5 live – NCC Group talks to 5 live about hacking
- The Memo: Hackers seized control of my life in minutes & it was terrifying
- Information Age: How malware analysis works and what we can learn from it
- City AM - I let myself be hacked
- Retail Systems - Bloated pages spell Black Friday disaster
- December
- 2014
- In the Media RSS
-
2016
- December
-
November
- Measuring Top100 Website Performance
- Health organisations “must implement formal cyber security strategies”
- Daily Star - NCC Group spoke to the newspaper about password security
- Infosecurity Magazine – NCC Group’s Ollie Whitehouse spoke to Infosecurity Magazine about password security
- InBusiness.ae - NCC Group’s activities in the Middle East and the evolving cybercrime landscape
- The Register – National Lottery breach: Fingers crossed – it might not be you
- SC Magazine – Up to 26,000 National Lottery accounts hacked
- Daily Mail – “Suspicious activity” on 26,000 National Lottery player accounts
- CSO - Cyber security progress is a ‘must’ for the potential ambassadorship for Cyber Affairs
- City A.M - Boards yet to take responsibility for cyber risk
- SC Magazine – Cyber Security Challenge UK winner
- Financial Times Weekend Money Supplement - Biometrics are making customers feel safer than they really are
- Sunday Times - Thousands affected after bank fraud attack
- Director Magazine - Businesses ‘must’ comply with the new EU data protection legislation
- Financial Times - Is biometric technology really safe?
-
October
- Internet Retailing - Five tips to prepare your website for the busy Black Friday period
- MarineLink: NCC Group Cyber Security Center Stage in Maritime
- NCC Group's Rob Cotton speaks to Manchester Evening News
- ITP.net – NCC Groups continues global expansion into the Middle East
- i News - Dozens of NHS hospitals targeted by cyber blackmailers
- NCC Group’s research features in TheINQUIRER
- NCC Group’s research features on Computing
- NCC Group’s research features in IT PRO
- TechWeekEurope UK – NHS trusts targeted by ransomware attacks
- NCC Group’s Ollie Whitehouse speaks to the Daily Express
- ITProPortal - NHS trusts targeted by ransomware attacks
- Daily Mail – NHS trusts targeted by ransomware attacks
- ITV News - Blackmailing hackers ‘increasingly targeting’ NHS Trusts
- NCC Group’s research features in The Telegraph
- ArabianIndustry.com - NCC Group opens new office in Dubai
- Zawya - NCC Group expands in the Middle East
- InBusiness - NCC Group opens new office in the Middle East
- Financial Times – TalkTalk lands record fine over cyber attack
- The Sunday Times - This is your scammer — click ‘OK’ to lose it all
-
September
- Ecommerce site slowdown could put sites under pressure ahead of Black Friday
- Business Reporter - FT Cyber Security Summit
- City A.M. - Cyber security must be on the boardroom agenda
- The Business Desk - NCC pays £14.5m for US cyber security firm
- Manchester Evening News - NCC Group acquire Payment Software Company
- City A.M. - Businesses with weak cyber security should face higher penalties
- ITProPortal - UK directors want tougher stance towards companies with weak cyber security
- The Telegraph - Directors want watchdogs to get tougher on companies that overlook cyber security
- FedScoop - Startup investors are looking to hackers for help on smart bets
- BBC 5 live Wake Up to Money Show - NCC Group’s Paul Vlissidis appeared on the show to talk about cyber security
- Finance Monthly - General Data Protection Regulation (GDPR) – Are you ready?
- Motherboard - Ransomware Targets UK Hospitals, But NHS Won't Pay Up
-
August
- SC Magazine - Nearly half of NHS Trusts in England admit falling victim to ransomware
- ComputerWeekly - Organisations in UK still ignoring ransomware risks
- The Huffington Post - 28 NHS Trusts and 23 universities hit by ransomware attacks in last year, surveys find
- BBC - University suffers 21 ransomware attacks in one year
- Information Age - 97% of NHS Trusts in England suffered ransomware attack in the last year
- Fortune - Fighting the rise of ransomware
- BBC - The vulnerabilities in connected car tech
- The Times - How NCC Group is securing vehicles against cyber threats
- Daily Record – NCC Group’s security experts demonstrate importance of strong passwords
- The Sunday Mirror - How hackers can steal your identity and take your bank account and even house keys
- BBC - Could online bug hunting make me rich?
- The Verge - Analysing hacks from Mr. Robot
- IDG Connect - Nine free security tools from Black Hat
- Lafferty News - Cards, Payment & Mobile Intelligence
-
July
- The Register: the risk of DDoS with cloud
- Business Reporter: ICO figures show that Health Organisation might be at risk
- MarketWatch: Four things you probably don’t know about GPS
- Evening Standard - Market Report: NCC Group on the up as City and celebrities suffer cyber-crime
- The Telegraph - FTSE 100 pick up and pound stabilises as 78% chance of rate cut next week looms
- ComputerWeekly - NCA Report welcomed by the security industry
- Audit & Risk – Rob Cotton asks for regulatory parity with EU after Brexit
- City A.M. - Cyber crime helps NCC Group profits
- Manchester Evening News - NCC Group revenues and profits up
- Manchester Evening News - NCC Group a member of CyberInvest with £500k funding
- December
-
June
- Robotics & Automation News – Big data for connected cars is the future
- Manchester Evening News - NCC Group encourage introducing young women to cyber as a career
- ComputerWeekly - TalkTalk breach, good news for security industry
- Retail Times - UK’s top retailers not maximising ROI on website
- Techradar – Hackers are making your smart home safer
-
May
- BBC Radio 5 live - Cyber security "should be fundamentally owned by the board"
- BBC Breakfast Show - Cyber security needs to be on board agenda
- Financial Times: Data-hungry cyber hackers turn gaze to connected autos
- The Register - UK cyber security sales up
- NCC Group turnover surges
- Manchester Evening News reports on NCC Group’s performance
- TechTarget reports on the details of the upcoming update to PCI DSS
-
April
- Could creating a mobile website hurt your user experience
- NCC Group speaks to the BBC Radio Manchester breakfast team
- Consumers still don’t trust new gTLDs even as more brands seek to utilise the new suffixes available to them
- QA Financial – Ollie Whitehouse talks to the team about cyber crime threats facing banks
- Matt Lewis comments to Shares Magazine about hacking the modern car
- Third-party content is bloating and slowing down major retail websites
- Third-party tags can impact performance and user experience
- Econsultancy highlight NCC Group’s web performance research
-
March
- NCC Group speaks to The Sunday Times about the dark web
- Financial Times - Local leaders say pledges from government must be backed by more action
- SC Magazine - Vulnerability scanners plagued with false positives, but still have value
- Automated vulnerability scanners produce mostly false positives
- Planning for peaks in website traffic
- New generic top level domains (gTLDs) are still not trusted
- Over half of consumers do not feel comfortable visiting websites ending in new gTLDs
- Consumers don’t trust new gTLDs
- Bdaily - Manchester talent honoured by Chartered accountants
- The ‘pessimist’ who contributes to the northern powerhouse vision with realism and a track record
-
February
- Compare the cloud – What will you do if the cloud bursts?
- Financial Times - Employers struggle to recruit graduates for regional offices
- The Memo – Sat nav might be letting hackers into your car
- BBC News - 'Mystery' spike in number of hidden addresses
- The Times - How can we recover from a data loss?
- Manchester Evening News - Is the Powerhouse heading in the right direction?
- BBC Breakfast Show - Mark Turner talks to the team about voice recognition technology
- Retail Systems - ‘UK retailers fall short due to slow websites’
- Motherboard - The messenger that overtakes metadata, 'Ricochet' passes security audit
- The Register - NCC Group Cyber 10K challenge won by school network manager
- CBI Business Voice - A "technical heartbeat" for the north
- BBC Radio Nottingham – NCC Group’s Paul Vlissidis talks about cyber security
-
January
- BBC Radio Lincolnshire – Cyber Attack at Lincolnshire County Council.
- The Yorkshire Post – Cyber-crime must be handled like health and safety by boards
- City A.M. - NCC Group share price skyrockets on rising profits and sales increased by fears of cybercrime
- Business Reporter – This year, two thirds of consumers expect hacking of their financial data
- ITProPortal – Recent breaches leave consumers feeling unsafe using the internet
- Manchester Evening News – NCC Group increases dividend profits
- The Business Desk – Rise in number of cyber-attacks sparks boom at NCC Group
- Econsultancy - Black Friday failure may have been masked due to record breaking sales for organisations
- The Business Desk - Cyber-security specialist spend £1m in opening of Leeds site
-
2017
- December
-
November
- Top UK retail sites get faster
- CEO Today - The importance of a fast website
- Retail Systems - Website speed on the up for Britain’s top 50 retailers
- NCC Group’s Paul Vlissidis emphasises importance of maritime cyber security
- NCC Group’s Matt Lewis features on Gears Of Biz
- NCC Group’s Matt Lewis speaks to The Register
- NCC Group discusses cyber security on ITV News
- NCC Group’s Paul Vlissidis discusses maritime cyber security
-
October
- NCC Group’s research featured on Raconteur
- Queue-it: Five tips to help you make the most of this year’s peak trading period
- Business Cloud: Government makes cyber security pledge at opening of NCC Group’s new headquarters
- Manchester Evening News: First Secretary of State attends opening of NCC Group’s new global headquarters
- Gov.uk: First Secretary of State visits NCC Group headquarters
- ScramWorks: NCC Group only ‘Cybersecurity 500’ firm to fully implement DNS security
- NCC Group’s Paul Vlissidis speaks to BBC Breakfast
- NCC Group’s Paul Vlissidis speaks at Insurance Age Broker Morning Matters event
- NCC Group’s Tim Rawlins speaks to the Financial Times
- NCC Group’s Matt Lewis features in Raconteur
-
September
- NCC Group named as one of top 100 tech companies in Greater Manchester
- NCC Group’s Paul Vlissidis speaks to NatWest ContentLive
- Manchester Evening News: NCC Group opens dedicated automotive facility and hires top cyber security experts
- NCC Group’s Paul Vlissidis speaks to BBC Radio 4
- The Register - Former Bank of England cyber specialists to lead NCC Group's CENTA
- Business Cloud: NCC Group announces dedicated facility for automotive cyber security
- NCC Group’s Alex Painter features in Retail Systems
-
August
- NCC Group’s Daniel Farrie speaks to The Telegraph
- NCC Group’s Tim Rawlins appears on Sky News’ Swipe
- NCC Group’s Paul Vlissidis speaks to BBC Radio West Midlands
- NCC Group’s Brendan Saunders speaks to the BBC
- Prolific North - NCC Group appoints global sales director for its Escrow division
- NCC Group’s Paul Vlissidis speaks to The Sunday Times
- UK Construction Media: Securing the construction site
-
July
- Travel Bulletin - Delivering a fast, reliable website at peak times
- NCC Group’s Ollie Whitehouse speaks to Good University
- NCC Group’s Daniel Liptrott features in Digitalisation World
- NCC Group’s analysis featured on Estate Agent Today
- Real Business - Cyber security due diligence during mergers and acquisitions (M&A)
- NCC Group’s Joe Meyer speaks to GovInfoSecurity
- NCC Group’s Tim Rawlins appears on BBC’s Watchdog
- NCC Group’s Stephen Bailey speaks to The Times’ Raconteur about GDPR
-
June
- NCC Group’s Tim Rawlins speaks to BBC Radio Kent
- NCC Group’s Ollie Whitehouse speaks to BBC Radio 4
- NCC Group’s Ollie Whitehouse speaks to BBC Radio 5 live
- NCC Group’s Tim Rawlins discusses latest Ransomware outbreak on Sky News
- NCC Group’s Alex Painter speaks to Search Engine Watch
- eSeller – Progressive web applications for ecommerce sites
- SC Magazine - 30 graduate from NCC Group’s Software Testing Academy
- Manchester Evening News - NCC Group adds 30 new recruits to its Software Testing Delivery Centres
- NCC Group’s Tim Rawlins speaks to Marine Electronics & Communications
- Connected Cars - Does GDPR matter to the automotive sector?
-
May
- NCC Group appears on BBC’s The One Show
- Insurance Age - NCC Group conducts resilience assessment for Biba
- Insurance Times - NCC Group carries out resilience assessment for Biba
- NCC Group’s Stephen Bailey speaks to Raconteur
- IBTimes - Nearly 50 per cent of NHS trusts have been hit with ransomware attacks
- NCC Group's Ollie Whitehouse speaks to iNews
- NCC Group's Ben Jepson speaks to SC Magazine
- NCC Group's Paul Vlissidis speaks to The Guardian
- UK retail website load times continue to slow
- Quick wins to help your website cope with busy booking periods
- Website speed and downtime both significant issues for retailers
- The Register - NCC Group’s Roger Rawlinson speaks to the Register about GDPR
- Infosecurity Magazine – NCC Group analysis featured in Infosecurity Magazine
-
April
- NCC Group’s Ollie Whitehouse speaks to The Register
- NCC Group’s Jim McKenney discusses cyber security in the rail sector
- NCC Group’s Joe Meyer speaks to HealthcareInfoSecurity
- NCC Group’s Ollie Whitehouse speaks to the BBC
- NCC Group’s Tim Rawlins speaks to Enterprise Times
- NCC Group’s Paul Vlissidis speaks to BBC Radio 5 Live
-
March
- NCC Group’s Cristiano Corradini and Mattia Reggiani speak to Reuters
- NCC Group’s Ollie Whitehouse features on BBC Radio 4
- NCC Group’s Paul Vlissidis speaks to BBC Radio Manchester
- InBusiness - Cloud Assurance Programmes: “Carry an umbrella, even in the desert”
- NCC Group’s Paul Vlissidis speaks to BBC Radio 5 Live
- Fox-IT appears on BBC Newsnight
- ComputerWeekly - NCC Group launches Fix Bounty scheme
- NCC Group’s Tim Rawlins speaks to BBC Radio Wiltshire about neurodiversity in cyber security
- NCC Group’s Andy Davis speaks to the EE Times about automotive ransomware
- The Times - NCC Group’s Matt Lewis speaks to The Times about biometrics
- NCC Group’s Matt Lewis speaks to Radio Télévision Suisse about biometric technology
- The Memo – How safe is biometric technology?
-
February
- The Independent - NCC Group’s Matt Lewis speaks to Independent about voice biometrics
- NCC Group’s Gavin Holt speaks to STV News
- E-commerce site speeds continue slowdown
- Manchester Evening News - Big data risks in technology
- Information Age - Today marks the official launch of the National Cyber Security Centre by the Queen
- Computer Business Review - Queen opens National Cyber Security Centre
- NCC Group’s Paul Vlissidis spoke about the launch of the NCSC on the BBC Breakfast Show
- Retail Times - Britain’s top retail sites slower than ever
- Real Business - Businesses need to care about fast websites - right now they’re too slow
- Manchester Evening News - NCC Group continues expansion with the launch of a new office in South East Asia
- Security Brief AU - NCC Group launches new office in Singapore
- BobsGuide – Considerations for the financial sector when outsourcing IT applications
- The Business Desk - NCC Group opens Singapore office
-
January
- Keeping your website running during the rush of the January sales
- The Huffington Post - Hotel experiences ransomware attack
- SC Magazine - Joel Scambray appointed technical director at NCC Group
- Pulse Magazine - GDPR Focus
- TheINQUIRER - Cyber crime now included in official crime figures
- ComputerWeekly - Cyber crime is on the rise
- Manchester Evening News - NCC Group CEO gives his verdict on the PM's new industrial strategy
- ComputerWeekly - England’s largest NHS Trust has launched an investigation into cyber attack
- NCC Group MD appears on BBC Breakfast Show
-
2018
- April
-
March
- NCC Group’s comment on the Cyber Export Strategy features on SC Magazine
- NCC Group’s comment on the Cyber Export Strategy features on Sky News
- NCC Group’s research on GDPR features on ITPro.
- NCC Group’s APT15 research features on TEISS
- NCC Group’s APT15 research features on ComputerWorldUK
- NCC Group’s analysis on GDPR fines features on Business Matters
- NCC Group’s Matt Lewis discusses cyber security at MWC 2018
- NCC Group’s APT15 analysis features on Security Affairs
- NCC Group’s APT15 analysis features on TheINQUIRER
- NCC Group’s APT15 analysis features on Computing
- NCC Group’s APT15 analysis features on Infosecurity Magazine
- NCC Group’s Stephen Bailey speaks to the Financial Times
- NCC Group’s APT15 research features on Security Week
- Dark Reading - NCC Group collaborates with Wickr
-
February
- NCC Group’s Adam Ruddermann speaks to CRN
- Retail Times - Significant slowdown for Britain’s top 50 retail sites during 2017
- The Daily Telegraph - NCC Group’s Stephen Bailey discusses GDPR
- NCC Group’s Alex McCulloch features on IPT.net
- NCC Group’s Stephen Bailey speaks to The Sunday Times
- The Register - Critical security vulnerability found in business firewalls
- NCC Group’s Andy Davis discusses maritime cyber security
- NCC Group’s Andy Davis features on News Deeply
-
January
- NCC Group’s ransomware research features on Business Reporter
- NCC Group’s Paul Vlissidis features on The Huffington Post
- Travolution - UK travel websites load times slower than recommended
- NCC Group’s Stephen Bailey speaks to CEO Today
- Firstpost - Security vulnerabilities in the finance sector increase by over 400% since 2013
- NCC Group’s Stephen Bailey features on Chartered Banker’s GDPR podcast
- NCC Group’s Alex McCulloch speaks to the Network Middle East magazine
- NCC Group’s Tim Rawlins speaks to BBC Points West
-
2015
-
News
-
2015
- January
-
February
- NCC Group shortlisted as finalist for PLC Awards
- Organisations need to prepare for cyber compromise
- New book by NCC Group technical director sells out within 24 hours
- NCC Group sponsors Team Moda Anon
- NCC Group putting cyber security in spotlight at MWC 2015
- NCC Group now a CBEST Approved Penetration Testing Provider
- Culture shift in attitudes to cyber security required, report says
- Another accreditation for NCC Group
- March
- April
-
May
- Limit amount of personal information you share online
- Want to know more about cyber security? Come and speak to our experts in London on 2 June
- Logjam flaw could weaken encryption
- Another acquisition for NCC Group
- Rise in sales at NCC Group
- NCC Group one of world’s “best graduate employers”
- New non-executive director at NCC Group
- Black Hat USA 2015 - Broadcasting your attack: Security testing DAB radio in cars Andy Davis
- June
-
July
- Black Hat USA 2015 and DEF Con 23 journalist briefing document
- Infidelity website Ashley Madison hacked, exposing details of 37 million users
- Reform conference brings cyber security threat to the fore
- NSA director warns City bankers of impending cyber threat
- Twitter share spike due to bogus Bloomberg site highlights importance of Domain awareness
- Another year of record growth for NCC Group
- FTC advises businesses to “build data security in from the start”
- People need to “implement basic security measures” to reduce risk of identity theft
- NCC Group has four talks accepted at Black Hat USA 2015
- Humans “often the weakest link” when it comes to cyber security
- September
- August
- October
- November
- December
-
2014
- January
-
March
- WhatsApp worth more than $19bn, says Facebook founder during keynote at MWC
- Wazoku provides additional layer of application continuity for its customers with SaaS Assured
- Top tips for creating strong Pa55w0rds
- The Internet of Things “could change our lives”, says PM
- Plans for Alan Turing Institute welcomed
- NCC Group launching Domain Assured
- NCC Group launches Trust Forum
- Government launches national emergency team to tackle cyber crime
- DDoS mitigation not effective in 82% of NCC Group tests
- New research reveals maritime cyber security dangers
- April
- May
-
June
- New vulnerabilities found in OpenSSL
- New cyber testing framework launched to protect banks from cyber-attacks
- NCC Group featured on ITV News discussing Gameover Zeus virus
- NCC Group brings .trust to the internet
- GCHQ to begin sharing threat intelligence
- Four talks from experts at NCC Group accepted at Black Hat USA
- Financial sector adopting poor ‘cloud practice’
- Code Spaces forced out business as a result of DDoS attack
- Businesses and Government “to work together to boost cyber security”
- NCC Group to offer Cyber Essentials
-
July
- Prime Minister pledges £1.1bn to fight cyber terrorists
- NCC Group talks to Flexible Boss magazine
- NCC Group plc Full Year Results
- NCC Group discusses driverless cars on Sky News
- Is third-party content holding Britain’s retail websites back?
- ICO: Stronger powers needed to reduce data protection breaches
- Energy firms hit by cyber attack
- Cinolla provides customers with SaaS continuity assurance
-
August
- NCC Group on BBC Click
- NCC Group certifies Skyscape Cloud Services with Cyber Essentials Plus
- Cyber attack threat “intensifies” in marine sector
- Weaknesses discovered in email filtering solutions
- NCC Group secures the cloud with SaaS Assured
- Increase in reported data breaches in the legal profession
- NCA: Don’t open files in an email from an unknown source
- More attackers “going phishing”
- Holistic approach to information security "is needed"
-
September
- NCC Group on BBC Radio 5 live
- NCC Group appoints new CTO as part of its bid to make the Internet safer
- UK Government contractors must comply with Cyber Essentials by 1 October
- Retail companies under “increasing attack” from cyber criminals
- NCC Group’s Cyber 10K winner announced
- NCC Group gold sponsor of Securi-Tay IV
- Cyber security “not just about technology”
- Businesses need a "solid incident response strategy" to deal with breach aftermath
- Shellshock bug could be bigger than Heartbleed
-
October
- Drupal warns of compromise unless you patched within 7 hours
- Four people charged by Department of Justice for alleged involvement in international hacking ring
- Google reveals details of Poodle bug
- “Highly Critical” vulnerability found in Drupal 7
- NCC Group shortlisted at this year’s UK tech awards
- Cloud fears having impact on cloud take-up in financial services sector
- NCC Group on the BBC Breakfast Show
- NCC Group publishes .trust Technical Policy
- NCC Group researchers present findings on in-game cheating at Black Hat Europe
-
November
- NCC Group on CNBC
- UK webcam footage streamed live on Internet
- Security concerns driving consumers offline
- Organisations warned to act now to avoid oldest hackers' trick in the book
- Online security strategies “must cover domain names”
- NCC Group donates £50,000 to BBC Children in Need
- Businesses take weeks to recover from cloud supplier failure
- December
- February
- 2010
- 2011
- 2012
- 2013
- News RSS
-
2016
- December
-
November
- Suspicious activity on National Lottery accounts “another example of why people should use strong and varied passwords”
- Fox-IT and SWIFT sign new commitment to cyber security
- Staying safe online this Cyber Monday
- National College of Cyber Security set to open at Bletchley Park
- NCC Group employees bake, go sober and physically push themselves to the limit in aid of Macmillan Cancer Support
- GDPR deadline fast approaching – preparation should start now
- NCC Group welcomes National Cyber Security Strategy
- October
- September
-
August
- "No silver bullet" when it comes to preventing ransomware attacks
- NCC Group’s Richard Warren featured in MSRC Top 100
- NCC Group provides cyber expertise for second series of Channel 4 show Hunted
- NCC Group now an approved CBEST Threat Intelligence supplier
- NCC Group transaction team don walking boots for charity
- July
- June
-
May
- NCC Group completes Accumuli integration
- NCC Group now an accredited CREST supplier for Threat Intelligence services under STAR scheme
- Government launches NCSC prospectus at Cyber UK In Practice event
- Calls for tax breaks on cyber security spend
- NCC Group employees preparing for Great Manchester Run 2016
- Cyber security management improving at FTSE companies
- April
- March
- February
- January
-
2017
- July
- June
- May
-
April
- 46 per cent of businesses experienced a cyber breach or attack in past year
- Two podium finishes secured at Tour ta Malta for team NCC Group-Kuota-Torelli
- NCC Group releases update for NCC SQuirreL suite
- NCC Group’s Gina Doekhie one of the “most inspirational women in technology”
- NCC Group expands central Edinburgh base
- Problem solving a “key skill” for those looking for careers in cyber
- March
- January
-
February
- Podcast: Access Management in Healthcare Evolves
- Reduce the risk of domain abuse with NCC Group’s Domain Intelligence tool – now available to buy online
- NCC Group’s Piranha tool now available for online purchase – making it even easier to test your defences against phishing attacks
- Most FTSE 100 companies “have a lack of cyber expertise at board level”
- NCC Group graduate programme “ideal for those wanting to work in cyber security”
- Safer Internet Day 2017 “great way to raise awareness of online safety”
- Don’t let cyber criminals break your heart this Valentine’s Day
- NCC Group hopes to “inspire new generation of young people to take up careers in cyber”
- August
- September
- October
- November
- December
- 2018
-
2015
-
Press Releases
- 2015
- 2014
-
2016
- December
-
November
- NCC Group comments on suspicious National Lottery account activity
- Autumn Statement 2016 – NCC Group CEO comments
- Deliveroo hack “highlights importance of using a range of passwords” for online accounts
- Britain’s retail sites slow in the run-up to Black Friday
- Nearly 90 per cent of CEOs still neglecting cyber risk
- Acquisition of Boston-based US cyber security consultancy for up to $6m
- October
-
September
- Acquisition of US cyber security and payment consultancy for up to $18.75m
- Dominion Registries Partners With NCC Group to Provide Threat Monitoring and Alert System For Dominion’s Top-Level Domains
- Businesses call for greater cyber scrutiny
- Fox-IT appoints Joost Halkes
- Bugcrowd Partners With NCC Group to Simplify Access to Bug Bounty Programs for Enterprises
- NCC Group to increase its workforce in Canada
- Britain’s top retail sites experience dramatic slowdown
- August
-
July
- NCC Group goes platinum with Cyber Security Challenge
- Healthcare organisations most likely to fall foul of data protection laws
- Cyber criminals are winning the arms race, according to NCA report
- Continued rapid growth of international cyber security drives profits up 48%
- NCC Group joins CyberInvest with £500k funding stream
- June
- May
-
April
- PCI Security Standards Council releases PCI DSS version 3.2 – NCC Group comments
- Trading Update April 2016
- Web hosting firm accidental deletes an unspecified number of its customers' websites – NCC Group comments
- NCC Group recognised with Frost & Sullivan Award for Red Teaming
- Government’s Annual Report on the UK Cyber Security Strategy – NCC Group comments
- General Data Protection Regulations approved – NCC Group comments
- Badlock flaw - NCC Group comments
- Retailers hindering mobile browsing experience with dedicated mobile sites
- March
- February
-
January
- NCC Group offers more in-depth business intelligence with new website monitoring service
- NCC Group publishes its half year results for the six months to 30 November 2015
- 63% of consumers think their financial information will be hacked within the next year
- NCC Group invests £1m in new UK Security Operations Centre
- NCC Group works with BIMCO to help create new cyber security shipping guidelines
-
2017
- November
- October
- September
- August
- July
- June
- May
-
April
- Britain's retail websites are slower to load but faster to start displaying
- Trading update April 2017
- The security industry has a duty to steer young people away from cyber crime
- NCC Group teams up with Immersive Labs to help organisations assess their cyber strengths and weaknesses
- Wonga data breach may affect 245,000 customers
- Last year’s ICO fines would soar to £69 million post-GDPR
- Chris Stone appointed Executive Chairman
- March
-
February
- Millions of personal voice messages leaked due to a vulnerability in CloudPets toys
- NCC Group expands its Transport Assurance Practice
- Trading update, strategic review initiated and Capital Markets Day cancelled
- National Cyber Security Centre opening “a positive step towards securing the UK”
- Britain’s top retail sites end the year bigger and slower than ever - but there is hope
- NCC Group to offer student bursaries as part of CyberFirst initiative
- NCC Group opens new office in South East Asia
-
January
- NCC Group achieves certification for NCSC’s Certified Cyber Security Consultancy scheme
- NCC Group lead sponsor of female cycling team
- Security expert and best-selling author joins NCC Group
- NCC Group CEO welcomes government’s new industrial strategy
- NCC Group joins UK's NCSC Cyber Incident Response Scheme
- NCC Group comments on the introduction of cyber crime statistics
- NCC Group plc Half year results
- Brian Tenner appointed Chief Financial Officer
- Open Registry group of companies sold for total consideration of €3.75m
-
2018
- March
- February
-
January
- Critical security vulnerability found in business firewalls
- NCC Group Hires Bug Bounty Veteran Adam Ruddermann
- Travel websites missing out due to sluggish websites
- Directorate change
- NCC Group plc Half Year Results
- CENTA team strengthened with former DCMS lead
- Almost a quarter of employees would click on a phishing link
-
Events
- 2012
- 2014
- 2011
-
2015
- March
-
April
- NCC Group exhibiting at Counter Terror Expo 2015
- ACSC 2015 Conference
- Belmond Treasury Day 2015
- Enterprise Security and Risk Management Conference 2015
- EuroCloud Manchester Cloud Business Meet-Up 2015
- RSA 2015: April 21
- Trust Forum Manchester - 30 April
- RSA Conference 2015
- Cyber Security EXPO Bristol
- August
- February
- January
-
October
- The Woodlands ISACA and ISSA South Texas Luncheon
- NCC Group Managing Performance Event
- Payments UK Cyber Security and Fraud Seminar
- Information Security Summit
- Secure Coding Best Practices for Automotive: PRQA Fall Seminar
- MobileDeLi 2015 Mobile Development Lifecycle
- ekoparty security conference
- Glasgow Trust Forum
- Rochester Security Summit 2015
- North Texas ISSA Cyber Security Conference 2015
- 2015 Health Informatics
- Data Protection Compliance Conference 2015
- LASCON 2015
- ICANN 54 Dublin
- NCC Group Security Open Forum: Austin
- ToorCon San Diego 2015
- Breakfast Briefing - Managing cyber security risk at board level
- RUXCON 2015
-
November
- B-Sides DFW 2015
- QAC User's Meeting
- Pacific Northwest Chapter IASA Annual Conference
- Webinar: How to embed security awareness within your organisation using phishing simulation
- SecureWorld Bay Area
- Cyber TLA: An Evening of Cyber Phobia and biometrics
- Breakfast Briefing Edinburgh - Managing cyber security risk at board level
- Crypto Training NYC Nov 17th & 18th
- First Responder Forensics Training
- Manchester Trust Forum
- 10th Annual API Cyber Security Conference & Expo 2015
- Øredev 2015
- A Year of Vehicle Hacks: How NCC Group Can Help
- Black Hat Europe 2015
- Cyber Insights 2015 Conference
- Black Hat Europe 2015 Training
- GSICKMINDS 2015
- May
-
June
- NCC Group confirms strategic partnership with CBI for half-day cyber security conference
- SANS PenTest Berlin 2015
- Guest lecture at Warwick University
- Cloud World Forum 2015
- EAST FCS Forum 2015
- Data Protection & Privacy in the Financial Services Sector
- ICANN Buenos Aires
- REcon
- Trust Forum London - 2 June 2015
- Connected Cars
- Black Hat Mobile Security Summit - London 2015
- July
-
September
- NCC Group Security Open Forum: New York City
- SEC-T 2015
- NCC Group Security Open Forum: San Francisco
- European ICI Conference
- FT Cyber Security Summit 2015
- PCI SSC North America Community Meeting
- DerbyCon 2015
- First Responder Forensics Training
- Manchester Trust Forum September 2015
- MARQUES 2015
- London ICCC 2015
- VB2015 Conference
- 44CON London
- December
-
2016
- December
-
July
- InfraGard Houston
- WEBINAR: Real-World Supply Chain/Vendor Risk - Gray Market Products to Managed Service Providers
- EuroScience Open Forum Manchester 2016 - Living in the future: the connected world
- The General Data Protection Regulation – a radical change to data protection legislation – is your business ready?
- Shakacon
- Webinar: How Fast is Fast Enough?
- My name is Matt - My voice is my password
- 3rd Financial Services Cyber Security Summit
- Black Hat Training:"Beyond the Beast: A broad survey of crypto vulnerabilities"
- Social Housing Seminar July 2016
-
September
- OWASP London Chapter September 2016
- EGX 2016
- NB8 cooperation 2016
- Cyber Games Scotland 2016
- r2con 2016
- CBI Cyber Security Conference 2016
- BSides Colombia 2016
- Trust Forum Manchester - Network Defence: who is attacking your networks, how and what can you do?
- Webinar - FCA guidance for SaaS and cloud applications
- The Real Value of Women in Business
- IoD Annual Convention 2016
- InfraGard Austin
- FT Cyber Security Summit Europe 2016
- PCI Security Standards Community Meeting: North America
- DerbyCon September 2016
- 44CON LONDON 2016
-
November
- Digital Footprints: How attackers can exploit your public profile to facilitate an attack
- Webinar - Managing European SaaS Risk
- Qatar Central Bank 2016 Conference
- InfraGard Austin
- PCI Singapore November 2016
- Black Hat Europe November 2016
- OISF- Suricata User Conference
- O’Reilly Software Architecture Conference 2016
- Trust Forum Leeds November 2016
- Driverless Technology Conference 2016
- Payments UK Cyber Security and Fraud Seminar 2016
- Cyber Security UK Roadshow November 2016
- Accelerating Growth in the Digital Age
- NIDV Symposium & Tentoonstelling 2016
- Finance Transformation 2016 - The Next Transformation Waves
- O’Reilly Velocity 2016
- Digital Solutions for Tourism Conference 2016
-
October
- A Hacker’s Confessions Frankfurt 2016
- A Hacker’s Confessions Warsaw 2016
- CompTIA EMEA Member and Partner Conference 2016
- DIT Delegation to Singapore Cyber and IoT Week
- AFCEA London Chapter October 2016
- ToorCon San Diego
- Central Florida ISSA 2016
- Trust Forum Edinburgh - E-Commerce- What is really happening and what are the risks for your business?
- CyberArk Lunch & Learn
- PCI Edinburgh 2016
- FT Cyber Security Summit Asia Pacific 2016
- 2016 SF ISACA Fall Conference
- SHIPPINGInsight
- AISA National Conference 2016 – Sydney
-
August
- Cyber Security Program Info-session at Georgia State University
- BornHack 2016
- BUD Summit 2016
- Three NCC Group employees to speak at BSides Manchester 2016
- KW Intersections Meetup
- Black Hat USA 2016 - Voyeur by Juan Garrido
- Webinar: Surviving the media – how to respond to hacks
- 2016 Governance, Risk, and Control Conference
- Black Hat Training:"Beyond the Beast: A broad survey of crypto vulnerabilities"
- DEF CON 24
- BlackHat Briefings USA 2016
- BSides Manchester August 2016
-
May
- Penetration Testing Demonstration for ISACA Student Group at University of Washington
- Qualcomm Mobile Security Summit
- Cyber Security in Retail May 2016
- NCC Group Open Forum: New York
- Strengthening UK Cyber Security: Working in Partnership to Reduce Risk in the Digital Age
- ISACA Silicon Valley Spring Conference
- WEBINAR: PCI DSS Version 3.2
- Webinar - Are you ready for PCI DSS Version 3.2?
- Risk-based Security - Fighting Unlimited Threats with Limited Resources
- Seminar ‘Security monitoring: necessity for your organization?’
- Seminar: ‘Duty to notify a data breach: do’s and don’ts’
- FS-ISAC Annual Summit May 2016
- The Radio Technical Commission for Maritime Services (RTCM)
- Locard Istanbul Cyber Security Summit 2016
- Webinar: General Data Protection Regulation 2016
- PCI DSS Treasury Institute Workshop
- BSides San Antonio May 2016
- Alamo ISSA Meeting May 2016
- Secure360 May 2016
- Rocky Mountain Information Security Conference (RMISC)
- IP EXPO Manchester May 2016
- Seminar: Trains, cars and planes - security in the fast lane: The increasing relevance of cyber security to connected transport technology
- CYBERUK In Practice May 2016
- THOTCON
- Breakfast Briefing London - General Data Protection Regulation 2016
- IP EXPO Manchester May 2016
- NCC Group Web Performance & Optimisation Day 2016
- AusCert May 2016
-
June
- PCI London 2016 event
- Modern Claims Conference 2016
- Webinar - Managing SaaS Risk in Financial Services
- Webinar - Managing SaaS Risk
- North Texas ISSA Networking Event
- ISSA Los Angeles Chapter Meeting
- Cornerstones of Trust
- Circle City Con
- Fullstack Academy
- ISACA Luncheon and General Business Meeting (Willamette Valley Chapter)
- ToorCamp
- AESIN Automotive Security Conference June 2016
- Social Housing Seminar June 2016
- NCC Group Open Forum: San Francisco
- escar: Embedded Security in Cars
- CISO Executive Summit Houston
- DockerCon June 2016
- Cyber Secure Car Conference June 2016
- NCC Group Annual Golf Day June 2016
- NCC Group Born to Ride Challenge - South
- NCC Group Born to Ride Challenge - North
- Connected Cars June 2016
-
April
- Seminar: EU General Data Protection Regulation
- Kinepolis Madrid 2016
- ISACA Los Angeles Spring Conference
- Cyber Security Summit Europe April 2016
- Webinar-Ransomware: What organisations can do to survive
- AtlSecCon
- SecureWorld Philadelphia
- MIEVOM April 2016
- CIRM Annual Conference April 2016
- Infosec Southwest
- Trust Forum Manchester April 2016
-
March
- 2016 National Conference of Minority Cybersecurity Professionals
- NCC Group Open Forum: Chicago, IL
- Infragard Austin
- Global Words of Wisdom on Cross Border Data Transfer
- Technical College University of Madrid (UPM)
- San Francisco ISSA Meeting
- CanSecWest 2016
- IALA ENAV18 March 2016
- Robert Walters Cyber Security Seminar March 2016
- Trading Securely for Business March 2016
- BSides Austin
- Nullcon 2016
- Telecoms Fraud & Revenue Assurance 2016
- Edinburgh Trust Forum 17 March 2016
- ICANN 55 Marrakech
- RootedCON March 2016
- Breakfast Briefing - Managing SaaS Risk - Edinburgh
- Breakfast Briefing - Managing SaaS Risk - London
- Breakfast Briefing - Managing SaaS Risk - Manchester
- Retail Business Technology Expo 2016
- Breakfast Briefing London - Managing cyber security risk at board level
- Troopers - Security Conference
- Austin ISSA Meeting
-
February
- Webinar - Managing software risk through escrow and verification in the Middle East
- Want to work in information security?
- Securi-Tay Information Security Conference
- Holyrood Connect Cyber Security 2016 Conference
- Trust Forum Manchester
- Breakfast Briefing Dubai - Managing software risk through escrow and verification
- RSA 2016
- Mobile World Congress 2016
- January
-
2017
-
November
- #MindTheGap
- Cyber Security in Rail
- Transatlantic Cybersecurity Summit
- OWASP
- MECSS 2017
- INFOSEC Manchester
- Daegu International Future Auto Expo 2017
- Nordic Cyber Conference
- The Cybersecure Railway
- ISACA the future of automobiles
- Data mapping: the key to success Breakfast Briefing
- Prudential Women in Cyber
- NCC Group London breakfast briefing
- Business continuity planning and regulatory guidance webinar
- NCC Group Singapore breakfast briefing
- DefCamp#8
- Cybersat17
- What can ten years of PCI teach us for GDPR? Breakfast Briefing
- BSides Lisbon
- DeepSec
- ISFS (International Security Conference for the Financial Sector) 2017
- DiCyFor Security Summit
- Singapore Fintech Festival
- September
- August
- July
-
October
- eCommerce Show North
- CompTIA EMEA Conference Session
- SSCS 2017
- Mastering Cyber Essentials for Scottish organisations
- Incident Resolution Summit London
- Data mapping: the key to success Breakfast Briefing
- Compromise Assessments: the first step in intrusion suppression
- RuxCon
- GDPR – Breach Response Breakfast Briefing
- Holyrood Connect Conference GDPR: The future of Data Protection
- Holyrood Connect Conference GDPR: The future of Data Protection
- Connecting Women Leaders in Technology
- Cybersecurity Europe
- BruCon
- ISF’s 28th Annual World Congress
- AISA National
-
June
- API-IOGP Europe Cybersecurity for the Oil and Natural Gas Industry
- What has changed since WannaCry Friday? A business led perspective
- OWASP Summit
- Cyber Defence with MDR
- ICAS Insights
- Glasgow Breakfast Briefing - GDPR is coming - are you prepared?
- Film & Tech Expo 2017
- WarCon 2017
- GDPR - "Don't worry everything will be fine."
- Cloud Native Glasgow
- GDPR – Making it real
- Innovation through Interconnection 2017
- Rail Live
- Change the Game London 2017
- Change the Game Manchester 2017
- Camsec
- London Trust Forum: Keeping rail cyber security on the right track
- Secure Coding in C and C++ REcon Montreal 2017
- Connected Cars June 2017
- December
-
May
- Securing the Enterprise
- Smart Solutions 3
- X1RedMasSegura
- Meeting of Accounting and Tax Experts
- The Business show 2017
- Cyber Security Challenge Cyber Games
- Connecting Women Leaders in IT
- Cyber Security UK Roadshow
- Infosecurity Denmark
- Performance Matters
- Vendor Forum - London
- Westminster eForum Keynote Seminar
- OWASP AppSec EU Belfast 2017
- Next Generation Threats 2017
- April
-
March
- FinTech Disruption in the Financial Industry Forum 2017
- UK Mobility Mission to Israel 2017
- Transparency & Trust: A guide for landlords & tenants to data protection and privacy
- Inter-ACE
- RootedCON 2017
- Webinar - Is your Site's Speed Losing you Sales?
- Webinar - Managing SaaS Risk in the DACH region
- Manchester Trust Forum: From the outside in - does social engineering pose a threat to your business?
- ACSC 2017
- Neuro Diversity: Autism Spectrum Condition into Cyber 2017
- CyberUK March 2017
-
February
- Careers in cyber security: The Grange School
- Breakfast Briefing - GDPR is coming - are you prepared?
- RSA Conference USA 2017
- HACKRON IV 2017
- Breakfast Briefing – GDPR is coming to the UK – are you prepared?
- CiberSeg 2017 Conference - Days of security and cyber defence
- Cyber security in the financial sector: a way forward for Italy and the UK
- IoD NW Conference February 2017
- Securing the human factor
- Mobile World Congress 2017
- Holyrood Connect’s Cyber Security 2017 Conference
- Securi-Tay 2017
- Is there a manual for modernisation?
- Breakfast Briefing – Managing SaaS Risk
-
January
- I Heart Security: Developing Enterprise Security Programs for Millennials
- Post peak shakedown webinar - How did Britain's online retailers perform and what are the lessons for 2017?
- Breakfast Briefing - Control, consistency and effective testing in 2017- can you have it all?
- Breakfast Briefing - GDPR is coming to the UK - are you prepared?
- Using OSINT to Build Highly Targeted Spear Phishing Attacks
- Breakfast Briefing – Managing SaaS Risk and BaFin regulation
-
November
-
2018
- October
- September
- May
- April
- January
-
March
- Black Hat ASIA
- No One Puts Data in the Corner!
- SIEM solutions: Unlock the security insights hiding in your data
- Living in the Internet of Things
- Securi-Tay 2018
- The Security Analyst Summit March 2018
- SICSA Cybersecurity and the IoT
- NCC Group will be attending the Finastra Universe in Frankfurt & Singapore this March
- SecTalks Brisbane
- Join us for our after-work event in Frankfurt
- June
- February
-
Blogs
- 2010
- 2011
- 2012
-
2013
-
January
- Lessons learned from 50 USB bugs
- In order to look at the year ahead first we should start by asking what lessons can UK companies learn from last year?
- The death of USB autorun and the rise of the USB keyboard
- NCC Group Graduate Cyber Security Challenge
- Our Website Performance community site is now live!
- NCC Group Web Performance Quarterly Online Retail Survey
- Advice for security decision makers contemplating the value of Antivirus
- February
-
March
- The Pentester’s Guide to Akamai
- A pragmatic process for dealing with targeted attacks
- Cisco’s Password Storage Advisory
- Black Hat Europe 2013 overview and personal insights
- Failure of 2e2 highlights the necessity of contingency
- The Cyber Security Summary of MWC 2013
- Security considerations when designing office space
-
April
- E-tail giants continue to improve website performance
- ASP.NET Security and the Importance of KB2698981 in Cloud Environments Threat Brief
- Pip3line - the Swiss army knife of byte manipulation
- Reducing Page Download Times by Just a Few Seconds Saves Years of People's Time
- Content Security Policies and Popular CMS Systems
- Grepify a Small Tool for Code Reviewers
- Visualising Firewall Rulesets - Simplifying Firewall Administration and Spotting the Pivot Point
- May
-
June
- Velocity 2013 - Managing Risk in your website operations
- All Your Labs Belong to Us!
- Network Forensic PCAP Processing of Big(ish) Data
- How To Spot a Penetration Tester in Your Network (and Catch the Real Bad Guys at the Same Time)
- 2013 Information Security Breaches Survey: Small Business Breach Data Analysis
- Will faster user bandwidth fix your website performance woes?
- July
- August
-
September
- Scenester a Small Tool for Cross-Platform Web Application
- Door Control Systems: An Examination of Lines of Attack
- Defensive Design Series #1 - Mitigating Malicious Documents
- How to use load testing data to monitor the effects of auto-scaling
- Is third party content crippling your website?
- Social Engineering – User Education VS Real Life Exercises
- How load testing revealed a performance hit after auto-scaling
- 5 simple rules to decide what to monitor externally
-
October
- 6 Cols, 1 Mont and an Alp – The Road to Recovery 2013
- Why poor web performance is bad for the nation’s health
- A web performance win-win?
- Embrace the cloud, but protect yourself first
- Our involvement in the GCHQ End User Device Security Guidance
- Glastonbury 2014 – unfair criticism for ticketing company?
- Twitter Malware
- How to maximise revenue during peak periods
- November
-
December
- Top ten image optimisation tips no.1: pick the right format
- The Security Grinch Who Stole Cyber Christmas
- Five emergency web performance optimisation tips
- Non Obvious PE Parsers – the .NET runtime – Part 1
- Top ten image optimisation tips no.2: lazy-loading
- The NCC Group Minifig Cyber Christmas Giveaway
- How I hacked a journalist
- Top ten image optimisation tips no. 3: deliver images that are appropriate to the device
-
January
-
2014
-
January
- Poor Q4 web performance results for e-tailers round off a disappointing year
- SaaS Assured “provides business continuity” for SaaS customers
- BT network issue causes widespread disruption
- Top ten image optimisation tips no. 5: use CSS sprites (for now)
- Top ten image optimisation tips no. 4: remove metadata
- Introduction to Anti-Fuzzing: A Defence in Depth Aid
-
February
- Pre-adoption audit of cloud services “non-existent” in some sectors
- Cyber 10K Deep Dive Practical Cyber Security in Start-Ups and Other Resource Constrained Environments
- Love your website: dealing with Valentine’s Day traffic
- Fail to prepare, prepare to fail
- A free web performance event
- Cyber 10K Deep Dive: user and consumer cyber security awareness
- Open Source Intelligence: the First Link in the APT Kill Chain
- Loss of control of IT a “major concern” when adopting cloud services
- Announcing Cyber 10K: NCC Group’s Incubator Competition
- Top ten image optimisation tips no. 6: use progressive JPEGs
- Cloud adoption rates to increase
-
March
- Cyber 10K Deep Dive: Mobile device & app security and privacy
- Check your tyres before booking the MOT
- A Watchful Shepherd Minds the Flock - How Organisations Can Avoid Catastrophic Breaches
- Top ten image optimisation tips no. 7: get the balance right
- Security “still not on agenda” at Mobile World Congress
- A look back at NCC Group’s web performance conference
- Vulnerabilities found in geofencing apps
- Coping with success – preparing for peaks
-
April
- Security of Things: An Implementers Guide to Cyber Security for Internet of Things devices and beyond
- How monitoring can reveal persistent performance problems
- The Grand National: a chance for the UK’s betting sites to shine?
- Logs, Logs, the Audit Trail - Features of a Successful Log Management Solution
- Heartbleed OpenSSL vulnerability
- Making the most of Mother’s Day
- Attack Vector: A Technical Support Call That Will Cost You More Than A Phone Bill
-
May
- Batten down the hatches: Cyber threats facing maritime DP operations
- What is phishing?
- Top 10 Windows Server Security Misconfigurations
- Do hardcore gamers make good security consultants and researchers?
- Bugs in your TV
- Why are the Commonwealth Games already making the headlines?
- The rise and rise of SaaS and the impact on enterprises
- Show me the money! The link between performance and profit
- The case of the missing file extensions
- Apache Struts vulnerability
- Retailer performance benchmark: Q1 2014
-
June
- Writing robust Yara detection rules for Heartbleed
- Web performance and HTML5/CSS3
- How is the BBC’s World Cup team selector performing?
- Top ten image optimisation tips no. 9: don’t use too many images
- Top ten image optimisation tips no. 8: be aware of Base64 encoding – but approach with caution…
- Gameover ZeuS & Cryptolocker - Why two weeks and what you can do
- Extracting the payload from a CVE-2014-1761 RTF document
-
July
- Understanding Ransomware
- Top ten image optimisation tips no. 10: keep an eye on the future
- Top 10 Common Database Security Issues
- Too late to test?
- Shooting phishers in a barrel using .trust
- How Organisations Can Mitigate the Effects of Security Breaches
- Father’s Day card retailer performance
- A new Flying Kitten?
- Exploiting IoT technologies
-
August
- Independent assessments “few and far between” among organisations seeking cloud providers
- How a fantasy football site could improve its web performance game
- Contingency plans “not common practice” among organisations that adopt the cloud
- CESG Cloud Security Guidance
- A retail web performance story
- Variable set analysis in load testing
- Supplier viability and data-back up “top concerns” among organisations in retail, distribution & transport sector
- PCI DSS 3.0 and those ‘new’ penetration testing requirements
- Maintaining your Christmas presence
-
September
- Why you need to be using Cache-Control: no-transform on your images
- What should you expect from a load test?
- What is your monitoring service really telling you about performance?
- The Pillars of Trust on the Internet
- Shellshock Bash Vulnerability
- Phishing - All you need is one
- Does your site benefit from prerendering in search results?
-
October
- Drupal Vulnerability
- Does a print CSS file slow your site down?
- CloudWatch: Amazon Web Services & Shellshock
- Analysis of the Linux backdoor used in freenode IRC network compromise
- Xen Hypervisor Denial of Service Analysis
- What happens when you embed a video in a web page?
- The facts about BadUSB
- Should you use prerender on your website?
- NCC Group 2014 Graduate Challenge: Are you an NCC Group Ninja?
- Is it time to start using srcset and the picture element?
- In-game cheating
- If Compliance were an Olympic Sport
-
November
- What is two-factor authentication?
- Why site owners need to take responsibility for third-party content
- What is social engineering?
- UK retail performance benchmark – how one site made it into the top ten
- Rich Telemetry for Cyber Incident Response and Malicious Code Analysis on Microsoft Windows
- Pushing the boundaries – making a fast website even faster
- Is hope an effective strategy for managing risk?
- Customer confusion over new(ish) gTLDs targeting financial services
- Confidence and trust suffering in the wake of breaches
-
December
- A quick plug for cyber security this Christmas
- Cyber threats in the marine sector: Takeaways from our executive dinner
- Highlights from Velocity Europe 2014
- Launching the first in our series of Research Insights
- One Year Later: Lessons Learned from the Target Breach
- Organisations in financial services sector “should consider the risks” when adopting the cloud
- The 12 "hacks" of Christmas
- Black Friday: a disaster for some retail sites while others sailed through
- Tis the Season to Be...
- How to dispose of unwanted Christmas GIFs
-
January
-
2015
-
January
- Big Data: What is it and why is it so important?
- Analysis of setting cookies for third party websites in different browsers
- A cynic’s view of 2015 security predictions – Part two
- A cynic’s view of 2015 security predictions – Part one
- Windows Firewall Hook Enumeration
- Wearables security – it’s no longer just about privacy
- The web performance diet
- Red Team – “Train Like You Fight”
- Mega hacks and the employees that lost
- Just so you know we’re listening to our website performance division customers
- Intel® Software Guard Extensions (SGX): A Researcher’s Primer
-
February
- Violating the Virtual Channel – RDP Testing
- Viewing and removing image metadata
- Technology doping: Competitive advantage by abusing security flaws in smart sports equipment
- How we helped a major CDN identify and fix a faulty node
- Truecrypt Phase Two Audit Announced
- Testing: Delivering the benefits of hindsight
- Secure Software: So you have a threat model, now what?
- How should employers communicate data breaches to employees?
- The cloud: Hope won’t help when the chips are down
- Ghost Vulnerability
- Digital Strategy in the boardroom
- DARPA OnStar Vulnerability Analysis
- Cyber criminals “love” Valentine’s Day
- A new dimension to Performance Analyser
- Adventures in Xen exploitation
- A cynic’s view of 2015 security predictions – Part three
- A cynic’s view of 2015 security predictions – Part four
- Abusing Blu-ray Players Pt. 1 – Sandbox Escapes
-
March
- NCC Group Graduate Solution - Challenge 5: Quite the pickle
- NCC Group Graduate Solution - Challenge 4: How do you spell 'palilalia'?
- NCC Group Graduate Solution - Challenge 3: Don’t feed the Troll
- NCC Group Graduate Solution - Challenge 2: Unknown data
- SMACK, SKIP-TLS & FREAK SSL/TLS vulnerabilities
- NCC Group Graduate Solution - Challenge 1: Hacker Proof Profiles
- NCC Group Graduate Challenge 2014
- Exploiting Samba CVE-2015-0240 on Ubuntu 12.04 and Debian 7 32-bit
- CS Debuts Crypto Training at Black Hat
- Acclerating Cloud Adoption for Regulated Banking
- Is Google about to tell the world that your site is too slow?
- OpenSSL Audit
- Derusbi: A case study in rapid capability development
- Exploiting the Cloud and Mitigating the Risk of SaaS Supplier Failure
- A new way for you to access your monitoring data
- SMACK, SKIP-TLS & FREAK SSL/TLS vulnerabilities
- New standards enable V2x connectivity in the EU
- How a Performance Analyser demo turned into something more valuable
- Valentine's Day landing page performance
- Samba _netr_ServerPasswordSet Expoitability Analysis
-
April
- Open Source at NCC Group
- Cyber security and the board
- Xen SMEP (and SMAP) bypass
- A performance check-up for your website
- A back-to-front TrueCrypt recovery story: The plaintext is the ciphertext
- Custom network speeds in Performance Analyser
- Post-mortem threat modelling: what can be learned
- Why new image formats could make your site faster
-
May
- Understanding Commercial Sector Threat Intelligence and Cyber Security
- TLS Certificates and .trust
- NCC Group's Web Performance & Optimisation conference – a round-up
- Some notes about the Xen XSA-122 bug
- Introducing the Trusted Gateway
- Evolving supply chain integrity
- Benefits of using SaaS to deliver Treasury Management Systems
- What Is the Webpage Toaster?
- How to get important images to load early
- How do the UK’s political parties view cyber security?
-
June
- Speed Index – how it works and what it means
- Types of services that would help to mitigate against the risk of SaaS supplier failure
- Blind Return Oriented Programming
- Username enumeration techniques and their value
- Getting your monitoring data to work with an Arduino board
- Version 3.1 of PCI DSS released
- Building a technical security consultancy in the 21st century: Part 1
- How to make sure web fonts don’t slow your site down (much)
- Delivering an improved online user experience with the new global NCC Group website
-
July
- What will HTTP/2 mean for performance?
- The .trust Policy Advisory Board
- Rise of the pro-active breach discovery: Hunter Teams
- What are the benefits and drawbacks of loading JavaScript asynchronously?
- Broadcasting your attack – DAB security
- Google’s #NoHacked initiative welcomed by NCC Group
- Those who can; teach
- Should you whitelist your vulnerability scanning service provider?
- A Pain In The WAF
- Introducing KeychainEditor
- How server push in HTTP/2 will make web pages faster
- Denial ain’t just a river in Egypt
- BNP Paribas makes historic domain switch
- Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE-2015-0057) bug on both 32-bit and 64-bit tl;dr
- Review of Cyber Risk in the Latest Financial Policy Committee Financial Stability Report
- Why are pentesters so needy?
-
August
- Exploiting MS15-061 Use-After-Free Windows Kernel Vulnerability
- How to subset fonts with unicode-range
- Digital Smokescreen Diversion Use in Sophisticated Attacks
- Five performance optimisation techniques that should be handled with care
- libtalloc: A GDB plugin for analysing the talloc heap
- From toad to princess - why new domain extensions are no magical wand in the kingdom of search engines
- The web performance Summer Hackathon 2015
- .brand Registry Agreement deadline FAQs
-
September
- How does your website perform on mobile devices?
- Stolen Fingerprints – Panic or Meh?
- Cyber-maturity – defending your networks from malware, shadow IT, and poor practices via proactive discovery
- Announcing an east coast offering of our Beyond the Beast Crypto Training
- Cyber-Security Resilience Strategy: a guide for new CISOs
- Offensive Forensics: A day in the life of a television Cyber Hunter
- Federal Trade Commission Security Guidance: a lot of carrot with a threat of stick
- When the press come knocking: preparing your Cyber Incident Response strategy
- Build Your Own Wi-Fi Mapping Drone Capability
- Why the FBI issued an Internet of Things (IoT) Cyber Security Public Service Announcement: trying to get ahead of the curve
- How to make secure sites fast
- Hunted: A cyber-hunter’s view - “You all make it far too easy”
- Factoring RSA Keys With TLS Perfect Forward Secrecy
- Does your organisational culture undermine your resilience to social engineering?
- Exploiting CVE-2015-2426, and How I Ported it to a Recent Windows 8.1 64-bit
- Code Injection on Android
-
October
- Understanding Microsoft Word OLE Exploit Primitives
- Threat Intelligence: the Importance of Human Analysis, Interpretation and Narrative
- A better way to keep track of your web performance support tickets
- Threat intelligence: what we can learn from malware analysis
- A recent tale of when the phishers came knocking on NCC Group’s door
- Porting the Misfortune Cookie Exploit: A Look into Router Exploitation Using the TD-8817
- Did your website have problems this morning?
- Vehicle emissions and cyber security
- What happens when you break one of the basic web performance rules?
- MitM'ing Custom Protocols on Mobile Devices
- Does TypeScript Offer Security Improvements Over JavaScript?
-
November
- Are supersized banner ads making retail websites slower?
- Efficient review of AWS security groups
- The Chancellors Announcement and Active Cyber Defence
- Introducing Chuckle and the importance of SMB signing
- Should the Internet have a kitemark?
- Is something rotten in the State of Denmark
- Threat Intelligence: Benefits for the Enterprise
- NCC Group’s evidence to the Science and Technology Committee inquiry on the Investigatory Powers Bill technology issues
- Best Practices for the use of Static Code Analysis within a Real-World Secure Development Lifecycle
- New free website monitoring app
- NCC Group Grad Challenge 2015
- Threat Intelligence: informing strategy by knowing your adversaries
- Why we launched a third-party tag review service
- December
-
January
-
2016
-
December
- Digital Transformation – The trends of 2016
- What makes an effective and engaging cyber security awareness session?
- 10 Christmas cyber breach hunting tips for DevOps and Sys Admins
- A huge upgrade to our monitoring app
- A day in the life of an automation tester at NCC Group
- A brief overview of Agile - its uses, benefits and drawbacks
- IT Strategy or Digital Strategy?
- General Data Protection Regulation – 18 months to go, how far along the journey are you?
- How did Britain's top retail sites cope with Black Friday?
-
November
- Getting to grips with UAE regulations
- Prepare for 19-Digit Credit Cards
- Velocity Europe 2016 and the people who are making the web faster
- Why you need to monitor third-party services
- Understanding your digital stakeholders
- DriverBuddy Tool Release
- Life as an intern in NCC Group's recruitment team
- Top ten qualities of a QSA
- Shrinking Time: The next big leap in miniature technology
- Life as a software tester at NCC Group
- Another reason not to use document.write() to add script references
- National Cyber Security Strategy “lays the ground work for greater regulation of cyber security”
- NCC Group’s Fox-IT division proposes government intervention to improve IoT device security
- Introducing RedSnarf and the importance of being careful
- Working in the cyber defence team at NCC Group
- Eight things to consider when selecting a software development partner
- Top five web performance mistakes
-
October
- Settling into the Dubai way of life
- When a phishing platform became a TV extra
- How a favicon could slow your web page down
- What DDoS disasters can teach us about securing the Internet of Things
- Why economics and the free market likely contributed to Friday’s Internet service disruption
- NCC Group’s Fox-IT division discovers TorrentLocker distribution in Netherlands
- Communicating the benefits of Agile testing and development
- Maritime Cyber Security – Bring me solutions, not problems
- Ten things every marketer should know about web performance no. 3: traffic affects performance
- iOS instrumentation without jailbreak
- The Password is Dead, Long Live the Password!
- The Office of Civil Rights to Increase Focus on Breaches Involving Less than 500 Patients
-
September
- Protecting your digital self from cyber stalkers and hackers - A Hunter's view
- Why you need synthetic monitoring as well as RUM and APM
- Ten things every marketer should know about web performance no. 2: big images slow web pages down
- NCC Group reviews the new "Federal Automated Vehicles Policy"
- NCC Group cyber security experts talk about their time on Channel 4 TV show Hunted
- Tips about how to “survive the media” after a breach
- Simulated Attacks - Assessing Your Cyber Defence Capabilities
- NCC Group advises Swiss regulator FINMA
- Life as an associate director at NCC Group
- A peek behind the great firewall of Russia
- Avoiding pitfalls developing with Electron
- NCC Group’s new HQ
- How loading JavaScript can slow websites down (even if it’s asynchronous)
- Introducing BLESuite and BLE-Replay: Python Tools for Rapid Assessment of Bluetooth Low Energy Peripherals
- Working in NCC Group’s Risk Management and Governance division
- A Brief Guide to Managed Detection and Response Services
- Don't forget to optimise and test your site before Black Friday
- Mind the Gap: The Great Cyber Responsibility Divide in the Maritime Sector
- Introducing nOBEX – a tool for testing Bluetooth phone and messaging profiles
- Working in NCC Group’s Web Performance division
- Continuity plan vital if using SaaS applications
- Car Brakes, Prison Cells, Nuclear Power Plants…Hackable?
- Introducing BinProxy
- Why are Britain's top retail sites 25 per cent slower than they were a year ago?
-
August
- Working in NCC Group’s Managed Security Services division
- Ten things every marketer should know about web performance no.1: why performance matters
- Working in NCC Group's Security Consulting division
- An adventure in PoEKmon NeutriGo land
- The CIS Security Standard for Docker available now
- Multiple Vulnerabilities in Lenovo Kernel Driver
- NCC Group now an Amazon Web Services Technology Partner
- Working as a senior IT security consultant in NCC Group’s Security Consulting division
- My first week at NCC Group, by Elliot Morrow
- Why protecting personal information is vital to ensure it doesn’t fall into the wrong hands
- New upgrade to Interactive Dashboard gives you a better overview of your web estate
- Surviving the media after a breach
- Why I decided to become a security consultant at NCC Group
- Working in NCC Group’s Managed Security Services division
-
July
- Cloud proving popular in financial services sector
- Could a few simple steps make your landing page four times faster?
- The Automotive Threat Modeling Template
- Working in NCC Group’s Software Testing division
- Research findings for the FCA’s Guidance on Cloud IT Services
- NCC Group - Top 10 Fast Facts
- Life as an account director at NCC Group
- Where are you on the Performance Maturity Model?
- NCC Group CEO: Cyber Security Committee the way forward
- Managing Software Risk in the APAC Region
- Ransomware: How vulnerable is your system?
- Life as a security consultant at NCC Group
-
June
- Looking for a career in ethical hacking in the UK – part one – Where to start...
- Real World Crypto 2017
- Brexit and why the EU General Data Protection Regulation still matters to us
- The best free online image optimisers
- Project Triforce: Run AFL on Everything!
- It only takes one typo in the software supply chain to compromise security
- Talking strategy with our business leaders
- Writing Exploits for Win32 Systems from Scratch
- Where it all began - Visit to Bletchley Park
- What does good web performance look like?
- What are State-sized adversaries doing to spy on us? Or how to backdoor Diffie-Hellman
- Forced Executive Ownership, Liability, and the New PCI Requirement 12.4
- Sakula: an adventure in DLL planting
- My Hash is My Passport: Understanding Web and Mobile Authentication
- Want your website to get a good search ranking on mobile? Make it fast.
- Guest blog post: The countdown to the NCC Group Born to Ride Challenge
- The ever evolving SaaS landscape
- SaaS Assured FAQ
- When a Trusted Site in Internet Explorer was Anything But
- Introducing the NCC Group Managed Network Intruder Alarm service
- Abusing Privileged and Unprivileged Linux Containers
-
May
- Cyber Security Westminster eForum speech: Moving to Resilience
- Why background images are slow to display – and how to make them appear faster
- "A truly unique event in the UK cyber security calendar"
- GSM/GPRS Traffic Interception for Penetration Testing Engagements
- Performance Matters – NCC Group’s 2016 Web Performance Event
- When CVSS Fits and When it Doesn’t
-
April
- Cyber resilience: a board level issue for the legal profession
- Adventures in Windows Driver Development: Part 1
- Five tips for getting hired at NCC Group
- Accelerated mobile pages – what are they and what do they mean for the web?
- Private Sector Cyber Resilience and the Role of Data Diodes
- When greater vehicle safety ≠ greater cyber security
- From CSV to CMD to qwerty
- PCI DSS 3.2 – what you need to know
- New improvement to Performance Analyser helps you fine tune your tests
- Can breach impact be measured?
- General Data Protection Regulation (GDPR) – are you ready?
- A guide to the EU Data Protection Regulations
-
March
- Who's responsible when an ecommerce site collapses under the weight of traffic?
- The same reliable monitoring data, but with a brand new interface
- Beware of phishing attacks
- Threat prioritisation: DREAD is dead, baby?
- What is ransomware?
- Sysinternals SDelete: when secure delete fails
- DROWN Attack (SSL)
- What's so special about Performance Analyser?
-
February
- Valentine's Day - the worst time for a florist to slow down its website?
- Breaking into Security Research at NCC Group
- The web performance hackathon – January 2016
- Building WiMap the Wi-Fi Mapping Drone
- The Northern Powerhouse “must be about people”
- Script-injected CSS will no longer block rendering in Chrome
-
January
- Cyber risk and security guidance for non-executive directors (NxDs)
- NCC Group launches a real user monitoring product
- What was the cost of the National Lottery's website failure?
- Cyber Security For The Financial Sector
- Under the hood versus over the top
- NCC Con Europe 2016
- Guidance Through Dangerous Waters: Guidelines for Cyber Security Onboard Ships
- Remote Exploitation of Microsoft Office DLL Hijacking (MS15-132) via Browsers
- Phishing Mitigations: Configuring Microsoft Exchange to Clearly Identify External Emails
-
December
-
2017
-
December
- What can ‘ghost ships’ tell us about the North Korean cyber threat?
- Knowing when your customers are seeing slower load times than expected
- How we've been working to make your life easier – web performance updates 2017
- Who wins the web performance ashes – the ECB or Cricket Australia?
- HIDDEN COBRA Volgmer: A technical analysis
- Performance testing for success during peak
- Dashboard update makes it easier to see your monitors' status
- Baking web performance KPIs into the development and release process
-
November
- BlackHat Europe 2017: NCC Group pre-event challenge part two
- A simple way to deliver alternative image formats - and why you shouldn’t be using it!
- Black Hat Europe 2017: NCC Group’s pre-event challenges part one
- Eggplant AI from Testplant: No test automation experience, no problem
- Black Friday 2017 - performance round-up
- Why developers are still building slow websites
- Kubernetes security: Consider your threat model
- Common security issues in Azure & the importance of configuring your cloud environment
- How to prevent CSS holding up the display of a web page
- Eggplant AI from Testplant: First impressions
- Cisco ASA series part eight: Exploiting the CVE-2016-1287 heap overflow over IKEv1
- WhatsApp scams and the use of internationalised domain names
- Bypassing Android’s Network Security Configuration
-
October
- A quick guide to responsive images
- Cisco ASA series part seven: Checkheaps
- BadRabbit ransomware hits targets within Eastern Europe
- Cisco ASA series part six: Cisco ASA mempools
- Ten things every marketer should know about web performance no. 7: how to find out if a slow mobile site is holding you back
- Employee Spotlight: Anthony, Principal Security Consultant, Australia
- Cisco ASA series part five: libptmalloc gdb plugin
- Avoid a data hostage situation with Managed NTM from NCC Group
- Exploring SIEM solutions and their security benefits
- Can we nudge our way to improved cyber security? Why a simple thank you might help
- How recent data breaches can help you avoid a catfish attack
- Policy as Code: An opportunity to increase resilience while lowering the cost of compliance
- Exposing the vagaries of ORM through load testing
- Cisco ASA series part four: dlmalloc-2.8.x, libdlmalloc, & dlmalloc on Cisco ASA
- SusanRTTI: an IDAPython plugin for viewing run-time type information
- Decoder Improved Burp Suite Plugin Release, Part 2
- Splunk .conf2017 highlights
- Cisco ASA series part three: Debugging Cisco ASA firmware
-
September
- The peak survival guide for your website no. 2: performance testing
- Splunk 5.x: EOL & what does that mean for you?
- Splunk .conf2017: Splunk 7 released and other news
- Get ready: Chrome will be flagging a lot more pages as insecure
- Cisco ASA series part two: Static analysis & datamining of Cisco ASA firmware
- Cisco ASA series part one: Intro to the Cisco ASA
- Is your website faster than top UK retailers?
- EternalGlue part one: Rebuilding NotPetya to assess real-world resilience
- Machiavelli not Monty: Why CISOs may need a degree in politics more than security
- Decoder Improved Burp Suite plugin release part one
- NCC Group at BSides Manchester 2017
- NCC Group releases insights in to GCC countries
- Rare ASP.NET request validation bypass using request encoding
- Employee spotlight: Tony, Principal Security Consultant, NCC Group North America
- Poison Ivy string decryption
- Invoice fraud: Third party vulnerabilities
- Common CSRF prevention misconceptions
- Signaturing an Authenticode anomaly with Yara
-
August
- Analysing a recent Poison Ivy sample
- Load testing reveals issues in the cloud
- Educational Tools for Binary Ninja
- DeLux Edition: Getting root privileges on the eLux Thin Client OS
- The peak survival guide for your website no. 1: set your objectives early and clearly
- Request encoding to bypass web application firewalls
- Employee spotlight: Emily, Escrow Sales Manager, US
- CENTA: A global cyber advisory practice for regulated industries
- Why prerendering web pages could be a thing of the past
- Introducing G-Scout
- Why you should still care about where scripts are placed on a web page
- Incremental threat modelling: A follow-up
- When a web application SSRF causes the cloud to rain credentials & more
- The forgotten factor in multivariate testing
- UK government cyber security guidelines for connected & autonomous vehicles
- Smuggling HTA files in Internet Explorer/Edge
- Developing trust and gitting betrayed
- Why you now have more control over how text displays on your website
- FedEx & TNT Express: A lesson in M&A cyber security due diligence & collateral economic disruption
- The value of having a chartered engineer on the team
-
July
- Penetration testing: Thinking in scenarios
- Frequently asked questions about ransomware
- Sobelow: Static analysis for the Phoenix Framework
- Silent but deadly? How cyber risk is affecting your insurance
- Ten things every marketer should know about web performance no. 6: custom fonts make text slower to display
- 300 examples of Digital Transformation part five: Technology
- Call Map: A tool for navigating call graphs in Python
- UK Transport Strategy 2017 - A cyber security view: Part 1 - London
- Cloud or on-premise?
- When batteries go bang as electric cars charge: Insights from a cyber security perspective
- NCC Group recognised for cyber security efforts in maritime sector
- Three essentials for your website's peak trading period
-
June
- 300 examples of Digital Transformation part four: Digital communications
- Ten things every marketer should know about web performance no. 5: third-party content can slow you down
- Implementing eGovernment initiatives in the United Arab Emirates
- Live incident blog: June Global ransomware outbreak
- How NCC Group’s Network Threat Monitoring service identified an undiscovered Remote Access Trojan
- Managing cloud risk
- Are Chrome and Firefox flagging your pages as Not Secure?
- A WarCon 2017 presentation: Cisco ASA - Exploiting the IKEv1 heap overflow - CVE-2016-1287
- Easier access to Real User Monitoring insights
- How to approach large scale telephony transformation
- 300 examples of Digital Transformation part three: Digital business
- Working as a client services administrator for NCC Group’s Escrow division in the US
- Making self-service load tests easier
- 300 examples of Digital Transformation part two: Digital disruption
- Is image scaling killing your website's performance? Find out in seconds!
-
May
- Protecting business critical applications & systems in the Kingdom of Saudi Arabia
- 300 examples of Digital Transformation part one: Stakeholders & customers
- The curious link between WannaCry & a Victorian civil engineer
- AssetHook: A redirector for Android asset files using old dogs and modern tricks
- SOCAlive! Introducing a safe, repeatable and scalable way to assess Security Operations Centre (SOC) efficacy
- Performance Matters - the London web performance conference
- How a faster website keeps visitors more engaged
- How our Security Operations Centre responded to a global ransomware outbreak
- Setting a new standard for Kubernetes deployments
- WSSiP: A WebSocket Manipulation Proxy
- Live incident blog: Global Ransomware outbreak
- NCC Group’s steps to a successful SIEM deployment
- Five simple steps to make your website faster
- Rising risk: Protecting your organization’s mission-critical applications
- Guest blog: Is there such thing as a digital mindset?
- Black Team war stories part five: Brief, brave & brazen
-
April
- Could you be barring millions of shoppers from your website?
- Content Security Policy as a tool for web performance governance
- Why is my website getting slower? Real user monitoring has the answers
- 99 per cent of ASX 100 companies agree that cyber responsibility sits at board level
- Black Team war stories part four: Keys to the kingdom
- Trust and Threat: Using Trust Relationships and Threat Models as Security Design Drivers
- Breach notification & what it entails ahead of GDPR
- Accountability is key with GDPR
- Less than a third of UK businesses have board member responsible for cyber security
- Is there a Manual for Modernisation?
- Black Team war stories part three: The confident customer
- Microsoft zero-day vulnerability – OLE2Link – threat intelligence and signatures
- Black Team war stories part two: All security guards are vigilant, right?
- Network Attached Security: Attacking a Synology NAS
- How do you make cyber security mean something for smaller businesses?
- Cyber espionage warning
- Black Team war stories part one: Keypad entry
-
March
- Cyber security in the transport industry – whose responsibility is it?
- Ten things every marketer should know about web performance no. 4: How testing can harm sales
- NCC Group at HACKtheMACHINE
- Betting on more than digital?
- Keep your head in the clouds: Managing SaaS applications in the GCC
- We see the world in black, blue & red with a little purple
- How we predicted an increase in conversions from a decrease in load times
- NCC Group scouts for talent at Inter-ACE 2017
- Changing Perceptions: A new view on gender equality in the cyber security industry
- Autochrome
- Web performance jargon buster
- Fix Bounty
- NCC Group’s recruitment team go back to school
- NCC Group launches Diversity Working Group
- Proving the link between performance and profit with real user monitoring
- Improvements to real user monitoring deliver better insight into performance, conversion and revenue
- Rest of World versus US maturity in assessing cyber security during Mergers & Acquisitions
- Be prepared – what to do when a big part of the Internet goes down
-
February
- The Mobility Revolution and Cyber Security Assurance
- Using real user monitoring to put a value on lost conversions
- NCC CON US 2017
- Security of the Internet of Things (IoT) in healthcare
- SCOMplicated? - Decrypting SCOM “RunAs” credentials
- Why did top UK retail sites end 2016 bigger and slower than ever? And what should they do about it?
- How GDPR will drive change in M&A cyber due diligence
- Life as a marketing assistant at NCC Group
- Understanding Uninitialized Reads
- ISM RAT
- Security of the Internet of Things in the home
- NCC Group's Cryptography Services Complete an Audit of Cloudflare's TLS1.3
- Exciting new ideas from the web performance hackathon
- Compromising Apache Tomcat via JMX access
- Don't Risk Getting a HIPAA Risk Assessment Wrong
-
January
- Berserko: Kerberos authentication for Burp Suite
- What are the lessons for UK retail from our post-peak web performance webinar?
- Digital transformation - What we would do differently
- The data protection landscape is about to change forever
- A day in the life of a test analyst at NCC Group
- Get new insights from Performance Analyser with more frequent scheduling
- NCC CON Europe 2017
- The unsung heroes who helped deliver Black Friday success for one of the UK's top retailers
- Keeping up with FCA cloud regulations
- Life as a senior tester at NCC Group
-
December
-
2018
-
April
- Phishing stories: Red Teaming across the globe from the safety of my desk
- A guide to GDPR for IT
- Readable Thrift
- Introducing Azucar
- Decoding network data from a Gh0st RAT variant
- Reflections on CyberUK
- Ethereum top 10 security vulnerabilities for smart contracts
- Security in a vacuum: Hacking the Neato Botvac Connected, part two
- Why working as an NCC Group security consultant is a rewarding career
-
March
- Monitoring dashboard improvement makes it easier to view from a distance
- Tackling 5G security with threat modelling
- How to deliver faster animations with will-change
- Revisiting security debt: Are we ready to have a discussion yet?
- Prudential Standard CPS 234
- Is your organization’s critical healthcare solution protected?
- Employee Spotlight: Lydia, Managing Consultant, RM&G, UK
- Introducing BLEBoy
- APT15 is alive and strong: An analysis of RoyalCli and RoyalDNS
- A guide to GDPR for Security
- How to use client hints to deliver responsive images – and why we should all soon be doing it
-
February
- Analysis: Global risks, threat intelligence and UK legislation
- Exploring the risk landscape for DDI (DNS, DHCP & IPAM)
- Valentine’s Day: the worst day to break up with your customers
- EternalGlue part two: A rebuilt NotPetya gets its first execution outside of the lab
- Ten things every marketer should know about web performance no. 8: Why you need faster landing pages
- How to avoid the crypto-minefield
-
January
- The creeping rise in content that’s slowing down Britain’s retail sites
- How to stop a print stylesheet slowing down your web page
- Spectre and Meltdown: What you need to know
- NCC Group analysis: UK Cost of Cyber Crime report and public perception
- Security oversight: The big picture view of security 2018
- Mandatory data breach notification: Are you ready?
- NCC Group's trends of 2018
- How people manage the third-party tags on their websites
- A guide to GDPR for the Marketing function
- A guide to GDPR for the HR function
- From Splunk 5.x to 7.0: Just what have you been missing out on?
-
April
- UK SC RSS Feed
-
In the media