Uncategorized Archives

Blog

Phishing as a Service (PHaaS) – an effective attack vector for all threat actors

17. November 2022

Phishing has professionalized. It is literally available to criminals in a »as a service« model, and the most effective examples are extremely convincing. And therefore dangerous. What can you as...

Blog

New 0-day vulnerabilities in Microsoft Exchange Server actively exploited

30. September 2022

Two reported 0-day vulnerabilities affecting Microsoft Exchange Server 2013, 2016, and 2019 (on-prem) tracked as CVE-2022-41040 and CVE-2022-41082...

Blog

Insider Threats: What are they and how to mitigate them

20. September 2022

While often neglected, an organization’s own personnel pose one of the biggest threats to its security. Human error...

Blog

Cisco Enterprise Agreement 3.0 – EA Agreement: What is new and what is right for you

1. September 2022

The Cisco Enterprise Agreement is now available in version 3.0. It simplifies your Cisco solutions’ purchase, consumption, and...

Blog

Diving Deep: How to detect Malware Persistency pt. 1

3. August 2022

During a cyber-attack adversaries might gain access to an environment through a certain system, but that might not...

Blog

Diving Deep: How to detect Typosquatting

21. June 2022

Typosquatting is a type of social engineering attack where a threat actor registers domains with deliberately misspelled names...

Blog

Vulnerability Spotlight: How to detect Follina the Windows MSDT 0-day

1. June 2022

Microsoft confirmed a security vulnerability tracked as CVE-2022-30190 and released it on their MSRC portal on May 30th,...

Blog

Diving Deep: Malware Injection Techniques – Part 1

31. May 2022

Malware Injection Techniques This is the first entry in the Malware Injection Techniques article series that we will...

Blog

Ransomware-as-a-Service: An infamously lucrative business model

18. May 2022

Ransomware as a type of malware is not a 21st century invention. We can trace it back to...

Blog

Conti Ransomware Gang falls apart

1. May 2022

Conti ransomware gang was infamously known as one of the most sophisticated adopters of ransomware-as-a-service (RaaS) model, earning...

Blog

Increased threat against industries leveraging ICS and SCADA devices

14. April 2022

US agencies (CISA, NSA, FBI) and Department of Energy issued a new Cybersecurity Advisory (CSA) warning on 13.04.2022...

Blog

Secure access anywhere: Secure SD-WAN as a Service

5. April 2022

We are in the midst of the biggest change since industrialization; huge amounts of IT are currently moving...

Blog

What you need to know about the increased Digital Risks following the cyber-attacks on Ukraine

16. March 2022

Amidst the ongoing warfare, we were able to track the development of new dedicated and tailored malware (HermeticWiper...

Blog

SASE – Buzzword or an intelligent road for cloud security?

28. February 2022

Read all about what SASE is and how it can be the solution for your IT security in...

Blog

Critical Vulnerability in Apache Log4j

13. December 2021

A critical vulnerability has been discovered in Apache Log4j (CVE-2021-22448), which has a maximum CVSS score of 10....

Blog

Is your Active Directory secure?

1. September 2021

How do you discover and assess misconfigurations and newly discovered vulnerabilities in your most critical asset – Active...

Blog

CNS Insights: Welcome to the jungle

19. June 2021

Today, all parts of any organisation are attached to its’ network. At Conscia, we have worked with mapping...

Blog

CIS Controls version 8

15. June 2021

Center for Internet Security (CIS) has recently updated the CIS controls (May 2021) and we no longer have...

Blog

Where and how to begin the cyber security journey?

18. May 2021

Where to start? Many European organizations struggle to start the cyber security journey. Most of the organizations know...

Blog

Major security mistake costs businesses millions

17. May 2021

Cybersecurity is on the board agenda for all companies or should at least be there. Everyone understands the...

Get the latest insights in our blog, written by our own experts.

Phishing as a Service (PHaaS) – an effective attack vector for all threat actors

New 0-day vulnerabilities in Microsoft Exchange Server actively exploited

Insider Threats: What are they and how to mitigate them

Cisco Enterprise Agreement 3.0 – EA Agreement: What is new and what is right for you

Diving Deep: How to detect Malware Persistency pt. 1

Diving Deep: How to detect Typosquatting

Vulnerability Spotlight: How to detect Follina the Windows MSDT 0-day

Diving Deep: Malware Injection Techniques – Part 1

Ransomware-as-a-Service: An infamously lucrative business model

Conti Ransomware Gang falls apart

Increased threat against industries leveraging ICS and SCADA devices

Secure access anywhere: Secure SD-WAN as a Service

What you need to know about the increased Digital Risks following the cyber-attacks on Ukraine

SASE – Buzzword or an intelligent road for cloud security?

Critical Vulnerability in Apache Log4j

Is your Active Directory secure?

CNS Insights: Welcome to the jungle

CIS Controls version 8

Where and how to begin the cyber security journey?

Major security mistake costs businesses millions

Do you have any questions?

Contact