Cyber Security Services

Choose the right Managed Application Security Provider and protect your digital kingdom Imagine, if you will, that you are the esteemed ruler of a vast digital dominion, and your applications are the lifeblood of your realm. Yet, in the boundless expanse of cyberspace, there lurk dragons of the most fearsome kind-cyber threats, data breaches, and hackers. You require a champion, a (MASP), to safeguard your kingdom. But how, pray tell, does one select the right one? In the intricate dance of cybersecurity, choosing the right MASP is akin to selecting the perfect accompaniment for a grand ball. It requires finesse, discernment, and a touch of intuition. Fear not, dear reader, for I am here to guide you through this intricate quadrille. The Critical Role of a Managed Application Security Provider (MASP) Firstly, let us address the conflict. The digital world is a battlefield, and your applications are the front line. According to a recent report by Cybersecurity Ventures, cybercrime i...

During a recent security assessment of the back-office system, our team identified a critical vulnerability in the implementation of two-factor authentication (2FA) authentication. Specifically, we discovered that the 2FA generation API allowed the generation of a new 2FA secret for any back-office account without verifying if the account already had 2FA set up. This flaw allowed an attacker to bypass 2FA protection and gain access to the account using only valid credentials. The Root Cause: Flawed Implementation of 2FA Generate API Upon further investigation, we identified that the root cause of this vulnerability was in the implementation of the 2FA generate API, which did not verify if an account already had 2FA set up or not. Additionally, the JWT (JSON Web Token) access token provided after the first login step was enough to call the 2FA generate API, as it had a claim that indicated whether the account had passed 2FA or not, but lacked a claim indicating if 2FA was already se...

EDR solutions and specifically CrowdStrike Falcon are giving us a hard time recently. It seemed that no matter how covert we tried to be, a well-trained blue-team was able to utilize these type of solutions to pick up on our activity relatively fast. That’s why when we had an opportunity to travel to India and sit in the same room with the SOC team of one of the biggest companies in the world, a team that built their detection capabilities around CrowdStrike, we couldn’t resist the urge to test out some of our ideas on how these tools can be bypassed. tl;dr: We ended up with 3 new techniques for CrowdStrike bypass that force blue-teams (and CrowdStrike) to re-think some of their current detection and mitigation tactics. What is CrowdStrike anyway? CrowdStrike looks at the OS of a machine, logs pretty much everything that happens on it (processes, memory, etc.), and alerts on deviations and anomalies from standard behavior (I’m sure it does many more things, but for our purposes this de...

Penetration testing and vulnerability assessment are both important tools used in the field of cyber security. They serve different purposes and have distinct advantages and disadvantages. Penetration Testing Penetration testing, also known as “pen testing,” is a simulated attack on a computer system, network, or web application to evaluate the security of the system and identify any vulnerabilities that could be exploited by a real attacker. The goal of a penetration test is to penetrate the system, meaning to gain unauthorized access or to disrupt normal system operations. This is done by simulating the actions of a real attacker. It consists of tactics such as researching, social engineering, network scanning, and exploiting software vulnerabilities. Advantage of Penetration Testing One of the main advantages of penetration testing is that it provides a realistic assessment of the system’s security. Since the test is conducted using the same tools and techniques as a real attacker, ...

Introduction When it comes to protecting your business from cyber threats, managed application security services can be a valuable addition to your security strategy. These services provide expert guidance and support in identifying and mitigating applications’ vulnerabilities, helping you reduce the risk of data breaches and cyber-attacks. In this benchmark, we have compared the top five managed application security service companies in 2023 — Komodo Ranger, Nessus, Qualys, Synopsis, and Rapid7. Criteria for Comparison For comparing these companies, we have considered a range of criteria, including the services they offer, the expertise and experience of their security professionals, their reputation and track record in the industry, and the overall effectiveness of their services. We have also considered any additional features or services they may offer, as well as their pricing and affordability. Komodo Ranger Komodo Ranger is a leading provider of managed application security se...

Black Box Penetration Testing is a process of testing in which the tester has no prior knowledge of the system under test. The tester is essentially “blind” to the system’s internals and must rely solely on its external interface (e.g. web interface, API, etc.) to carry out testing. Despite its name, Black Box Penetration Testing is not actually about breaking into systems. Rather, it is about testing the system’s security from the perspective of an attacker. The goal is to identify any security weaknesses that could be exploited by an attacker to gain access to the system or its data. Black Box Penetration Testing is an important part of any security assessment. It can help to identify vulnerabilities that would otherwise be missed by traditional security testing methods. It is also a good way to gauge the security of a system from the perspective of a real-world attacker. Pros and Cons There are pros and cons to black box security testing, just like everything else in life. On the pl...

Disclaimer: This post is written using the ‘Da Vinci’ open.ai model and has been edited to make it more presentable. Watch this space for a more technical article on this topic in the future. It was fun and exciting to write this post using the ‘Da Vinci’ open.ai. This story is based on real experience and there is a lot to learn from it. So, we decided to share it with the world. Our firm moved to a new office which is located on the 25th floor of a contemporary business building in Tel-Aviv, providing a stunning view of the city’s skyline. The space features a range of amenities to ensure comfort and productivity, but the thing that we love most about the new office premises are the doors. The doors are connected to an IoT device that uses a Bluetooth protocol. A mobile application with a user-friendly interface allows employees to authenticate and control the doors. The application allows residents of the building to open and lock the door from their phones. The system piqued our cu...