dotSec - Cyber security specialists https://validator.w3.org/feed/docs/rss2.html Australian Cyber Security Company | Penetration Testing & GRC Services | dotSec News and updates Contact us About us Tabletop Exercises for Executive & Technical Teams Practical Cyber Maturity for Australian Organisations CIS 18 Critical Security Controls Assessment ACSC Essential Eight Assessments and Uplift ISO 27001 compliance for Australian organisations PCI DSS compliance for Australian organisations Identity and access management SAIINT: Secure AI-integrated notable triage Managed system hardening and secure configuration Managed Web Application Firewall (WAF) Managed SOC, SIEM and EDR Social engineering and phishing exercises Vulnerability scanning and assessment services Red team and adversary simulation for Australian organisations AI-augmented penetration testing for Australian organisations Pentesting AI External Network Penetration Testing for Australian Organisations Web application penetration testing for Australian organisations Penetration testing services for Australian organisations Governance, risk and compliance Managed security Testing and assessment Verify control effect Apply cyber security controls Identify and prioritise risk Hugging Face: Over the router, through the firewall, off to Grandma’s house we go Five multi-billion-dollar companies in two months… the past and the future Managed SIEM services case study: tailored Splunk Enterprise Security for an Australian financial services platform Surprise PCI compliance request? An Australian SAQ guide It’s not what you know… Anthropic Mythos: The model, the myth and the mundane Scareware v1 – Just silly… probably Your developers work for Cyber Gangs Bypassing Windows application whitelisting Your service providers, the devil’s in the compliance detail Your website provider handles payments. Are you accepting the risk? Dangling DNS (1) – Abandon, despair! FIIG fined: Federal Court orders $2.5M penalty for cyber security failures Why ransomware victims pay, and what smart organisations do instead Dangling DNS (2) – Still dangling! 2023 State of Cyber Maturity for Australian Law Firm Why your staff click spelling-mistake laden emails (and how to actually stop them) Proxied Execution via Custom Trace Listeners Case study: data loss detection for national law firm What? It’s borked? Cyber insurance: A risky business