April 2021 Roundup

April 2021: Cybersecurity Roundup

This past month in cybersecurity:

  1. What the FLoC, Google? How Google is Developing New and Exciting Ways To Track You
  2. Apple Introduces AirTags
  3. Coinbase Went Public
  4. AT&T Launches New Managed Endpoint
  5. Biden Administration’s Cybersecurity Roadmap

Read More

March 2021 Roundup

March 2021: Cybersecurity Roundup

This past month in cybersecurity:

  1. Cyberattack Disrupts Molson Coors Operations and Production
  2. $2B of COVID-19 Relief Package Reserved for Cybersecurity and Tech
  3. Google Revealed How Much Personal Data They Collect in Chrome and Google iOS Apps
  4. Ubiquiti Accused of Covering Up Huge Data Breach
  5. IRS Warns of Phishing Scams Targeting Colleges and Universities

Read More

Mobile Pentest (Image Adapted from OWASP MATG)

What Is Mobile App Security Testing?

Mobile devices accounted for 52.6% (Statista, 2019) of Internet traffic in 2019. With 5G technology emerging, this is predicted to increase fivefold by the end of 2024 (https://www.ericsson.com/en/5g/what-is-5g).

Mobile applications are becoming ever more prevalent in our daily lives, and many services are moving to a mobile-first strategy.

Read More

January 2021 Roundup

February 2021: Cybersecurity Roundup

This past month in cybersecurity:

  1. Mysterious ‘Silver Sparrow’ Malware on Macs
  2. Myanmar Draft Cybersecurity Law
  3. Kia Motors $20 Million Ransomware Attack
  4. Kroger Data Breach
  5. Malicious Firefox Extension ‘FriarFox’

Read More

OWASP ASVS

OWASP Application Security Verification Standard (ASVS)

Over the years, we’ve had multiple clients come to us and mention that they had a previous “penetration test” or “vulnerability assessment” performed only to receive a report containing only vulnerability scanner results, like OpenVas or Nessus.

While those reports are undoubtedly useful, they don’t replace the depth and coverage that a high-quality penetration test or vulnerability assessment provides.

To help standardize application security testing, OWASP has created a standard called ASVS (Application Security Verification Standard).

Read More

Mailchimp Subscribe Modal

Add Mailchimp Subscribe Modal to your Hexo Blog

If you use Hexo for your blog, you know how easy it is to create a beautiful and user-friendly experience for your followers. Even better, Hexo is entirely open-source, which means you are free to customize the code to work best for your needs.

We’ve known for a while that we need a clean way for new visitors to subscribe to our blog. We put it off because we imagined a significant design and implementation effort to integrate it into our MailChimp email list.

Bri loves tinkering with open-source code, and she recently discovered a straight-forward way to modify our Hexo theme (Minos) and allow new visitors to subscribe to our mailing list.

Ready to add this functionality to your blog? Read on!

Read More

January 2021 Roundup

January 2021: Cybersecurity Roundup

This past month in cybersecurity:

  1. FireEye Released Technical Details Related to SolarWinds
  2. FBI Seizes NetWalker Ransomware
  3. Emotet Malware Network Dismantled By Police
  4. New Zealand Central Bank Suffered Data Breach
  5. Mimecast Products used to Spy on Customers

Read More

Cit0day Breach Detection

Quick Summary

Cit0day had a massive data breach in November 2020, which leaked credentials for over twenty thousand websites. It is more complicated than usual to determine which credentials you need to change because there were so many websites involved in the breach.

You can use a tool we created to check which domains you need to change your password for.

Just navigate to the following link and follow the instructions:

https://passcheck.pensivesecurity.io

Read More

December 2020 Roundup

December 2020: Cybersecurity Roundup

This past month in cybersecurity:

  1. Multiple US Government Agencies Hacked
  2. Swatting “pranks” via Smart Home Devices
  3. Cyberattacks Against Vaccine Distribution Operations
  4. 45 Million Medical Images Openly Accessible Online
  5. Baltimore County Schools Ransomware

Read More

November 2020 Roundup

November 2020: Cybersecurity Roundup

This past month in cybersecurity:

  1. Chase Unlimited Reward Point Vulnerability
  2. Apple lets some Big Sur Network Traffic Bypass Firewalls
  3. Cit0day Leaks 23,618 Hacked Databases
  4. Tesla Model X Key Fob Hack
  5. Hacked Crypto Exchange KuCoin Recovery

Read More

Your browser is out-of-date!

Update your browser to view this website correctly. Update my browser now

×