SecuSolutions Blog

There's a pattern we keep running into on engagements, and it's worth naming directly: employees increasingly trust AI output over professional expertise sitting right next to them. This expertise may be internal resources or colleagues, or external subject matter experts. Increasingly, oversight occur not because the AI is right more often, but because it comes across as so confident (often incorrectly), fast, and frictionless. This is a combination that is dangerous - in wa

An exhausted HR manager at 4:45 PM receives an "urgent" email from his CEO. He demands the entire staff user list, listed in plain csv: first name, last name, and email address, for an upcoming audit. Without hesitation, eager to put an end to an already grueling day, he complies, exporting and delivering the user list, without confirming the sender or verifying the request through other forms of communication. Just like that, the hacker now has a list of targets, knowing tha

People are the weakest link in your cybersecurity armour. A company can stack firewalls, scanners, and encryption high, yet a single employee and a fake invoice can knock every layer flat. When someone holds the door open for a stranger, the strength of the locks no longer matter. The same applies in security. If an employee hands an attacker the password, even the best security products can’t protect your organization. Phishing, ransomware, and malicious downloads pose serio

Talking to companies about security is what we do, and we’ve been doing it for nearly 25 years. Over the years we have had some interesting engagements with some very prominent companies. Many of the companies we have serviced have had very comprehensive security programs in place and have utilized the latest in security technologies. Some follow security standards like NIST, ISO and SOC. These companies, by security standards, are doing the right thing. So why are so many st

Throughout the years, we have conducted hundreds of penetration tests on companies across the globe. The tests we have performed have included large enterprises to small and medium sized businesses (SMB) and have taken place in practically every industry you can think of. The reasons these companies requested a penetration test are endless, but we have compiled the top 5 reasons we see for you here! In no order. ### Reacting to a Breach or Ransomware Attack For many companie

For decades we have been providing penetration testing services for companies across the globe. From small businesses to large enterprise organization and those between, we’ve served them all. Many of the companies we serve receive penetration tests annually, in some cases even twice a year, while others are receiving one for the first time. ### Companies having Penetration Tests Often The companies that receive frequent penetration testing already have an idea of what they w

This is part 2 of my last post “size doesn’t matter to a hacker”. Previously I pointed out why both large enterprise and SMBs are at risk of cyber-attack for different reasons, in today’s blog I will shed some light on what I believe both sizes can do to help reduce the probability of attack. ### Let’s start with enterprise. In a large organization communication breakdown is common. As mentioned in part 1, there are many reasons for this. A lack of good communication can have