Russia-Ukraine Tensions Escalate​

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is encouraging increased cyber security awareness in a new “Shields Up” advisory released last week as tensions escalate between Ukraine and Russia. Russia has threatened new invasions against Ukraine as an escalation of the Russo-Ukrainian War that began in 2014. The cyber security implications of these threats have already been […]

Commonly Exploited Vulnerabilities

Priority: High   Executive Summary: In a series of coordinated cyber attacks beginning on the 14th January 2022, orchestrated by Russian state-sponsored actors, more than 70 Ukrainian government websites have been defaced or rendered inaccessible. Russian threat actors have used spear-phishing, brute-force and exploited known vulnerabilities to gain access to target networks by compromising third-party […]

CVE-2021 20038..42: SonicWall SMA 100 Multiple Vulnerabilities (FIXED)

Priority: High Executive Summary: SonicWall has verified and patched vulnerabilities of critical and medium severity (CVSS 5.3-9.8) in SMA 100 series appliances, which include SMA 200, 210, 400, 410 and 500v products. SMA 100 series appliances with WAF enabled are also impacted by the majority of these vulnerabilities. A critical severity vulnerability (CVSS 9.8) in […]

ITC Secure and Cassava Technologies announce joint venture to expand industry leading security operations and Microsoft cloud security expertise in Africa

Joint venture between ITC Secure and Cassava Technologies heralds the creation of a world class Security Operations Centre (SOC) to deliver security services in Africa and cyber best practice. London, UK – December 15, 2021 – ITC Secure (ITC), a leading advisory-led cyber security services company and a Microsoft Gold cyber security partner, and Cassava […]

Sunburst – More heat than light

By now it is unlikely that anybody working in the cyber security industry is unfamiliar with the SolarWinds breach and code compromise, now known as the Sunburst hack. To recap; FireEye, on discovering that some of their intellectual property in the form of their offensive and red-teaming tools had somehow become available in the shadier […]

Solarwinds Supply Chain Attack (Sunburst Malware)

Priority: Critical Executive Summary: A highly sophisticated attack using a trojanised version of SolarWinds’ Orion software has been discovered, affecting both private and public organisations globally.1 The attack is believed to have started as early as Spring 2020 and is still ongoing, making this an imminent threat to any organisation using SolarWinds Orion. The attackers […]

ITC Secure Achieves Microsoft Gold Partner Status

London – November 19, 2020 – ITC Secure (ITC), the leading managed security services provider (MSSP) and specialist cyber advisory firm, today announced it has achieved Microsoft Gold Partner status. Through this, ITC joins the top 1% of Microsoft partners worldwide.  By achieving Microsoft Gold Partner status, ITC demonstrates expertise at the highest level of […]

EDR, MDR, NDR, XDR – how do you take your detection and response?

With Microsoft the latest big name to label their suite of security products and services with the “XDR” moniker, it might seem like those of us offering MDR services have got some catching up to do. Concerned as always that we are lined up with how our customers want to consume security services, especially our […]

Introducing ITC Sentinel MDR

How can businesses bridge the gap between the speed of compromise by the attackers, and the speed of detection by the defenders? http://www.youtube.com/watch?v=_q_uoUCfOQQ The solution isn’t doing more of the same, but rather leveraging a new strategy – focusing on a proactive approach. By harnessing the power of Microsoft Azure Sentinel and Microsoft Defender for […]