Divya Maddini

Critical Vulnerability Patched in jsPDF The bug can allow attackers to read arbitrary files from the system, potentially exposing configurations and credentials.

1

𝐍𝐨𝐭𝐞 𝐭𝐚𝐤𝐢𝐧𝐠 𝐢𝐧 𝐎𝐒𝐈𝐍𝐓 𝐜𝐚𝐧 𝐛𝐞 𝐩𝐚𝐢𝐧, 𝐛𝐮𝐭 𝐰𝐡𝐲 𝐬𝐡𝐨𝐮𝐥𝐝 𝐢𝐭 𝐛𝐞? I’m recording a video showing you how you can use Forensic OSINT to make digital notes to support your OSINT investigation. It's a simple and accessible way to make notes to support your file work. Video coming soon 👀

27

1 Comment

Ready to take control of your cybersecurity - without the jargon or headaches? Our latest blog breaks down the Cyber Essentials checklist into practical steps you can actually use. From firewalls and patching to access control and malware defence, simply follow the path to certification and protection. Drop the stress. Grab your guide. Get Cyber Essentials done. Read more: https://lnkd.in/eGnxY6ks

1

NHS DSPT Mandatory Audit Assertion 7.3 — Incident Response Capability Assertion 7.3 of the NHS DSPT is all about incident response. Discover how to detect, contain, and recover from cyber incidents quickly and effectively.

1

The ISO/IEC 27001 ISMS Annex A controls need to be risk justified and then integrated into existing workflows and documented so evidence of conformity can be recorded each time the process is executed. This is easy, been doing this for twenty plus years. Now it's time to apply AI Prompts and Agents to automate these workflows. Let's see who can get the workflow right so the ISMS works.

3

Offshore doesn’t mean lower standards There’s a misconception that offshore SOCs compromise security. It doesn’t have to be true. We operate an offshore SOC aligned with: UK security standards ISO 27001 expectations SOC 2 evidence requirements #soc #offshoresoc #cybersecurity

18

1 Comment

🚨 High Risk Vulnerability Alert 🚨 AlertEnterprise Guardian has a security issue (CVE-2025-31511) where one can bypass manager approval by changing the user ID in a Request%20Building%20Access requestSubmit API. This is a clear example of why API security is so important. The risk level is high with a CVSS score of 7.5. Stay safe! #AlertEnterprise #Guardian #APIsecurity #OWASP #CVE202531511 https://lnkd.in/e55RETXw

2

#PCIDSS 11.3.1.1 now requires all vulnerabilities to be addressed—not just the critical & high ones. Addressed = resolved, mitigated, or removed…no more ignoring low-risk findings. Even harmless internal issues—like local-only disclosures—must be documented, justified, or fixed. Credentialed scanning raises the stakes, surfacing deeper vulnerabilities across thousands of assets. In large environments, this is not just challenging—it’s bordering on operational overload. QSA’s can now interpret “addressed” as action—not discretion. That leaves organizations asking: are we improving security, or just keeping up with compliance choreography? In 2025 #Risk is dynamic. Effective compliance means recognizing how risk evolves with changes in architecture, cloud usage, and emerging technologies. A modern risk program fosters a culture of resilience—not just regulatory alignment.

14

3 Comments

Exciting news! This new standard is one you will want to become familiar with & provide feedback on given its potential impact on other standards such as PCI DSS, PCI PIN, P2PE, etc... #PCIDSS

24

Modern threat actors move fast. Your cyber security response needs evidence, not guesswork. Effective security operations depend on detecting suspicious activity early, building a clear picture from evidence, and responding based on facts rather than noise. With ThreatDefence, organisations gain end-to-end SecOps capability with unified visibility, local 24/7 SOC support, and investigations built around evidence, so decisions can be made faster, with greater confidence and less guessing. #cyberrisk #securityoperations #cybersecurity

12

1 Comment

Progress isn't always linear, but your offensive security strategy should be. Our 7th annual State of Pentesting Report uncovers why critical vulnerabilities are slipping through the cracks—especially with new #genAI risks emerging. Build your action plan. Learn why knowledge from expert-led pentesting is power. Download the report and transform assumptions into actionable clarity. 🔗: https://hubs.la/Q03vrqqM0

18

🔒 These are CBEST insights you don’t want to miss. Each year, the Bank of England, Prudential Regulation Authority, and Financial Conduct Authority release a CBEST thematic report sharing real-world lessons from cyber testing across the UK finance sector. CBEST is the UK's leading threat-led penetration testing assessment framework, helping regulators ensure that Banks, Insurance firm and Financial Market Infrastructure companies (FMIs) uncover and fix vulnerabilities before attackers can exploit them, simulating real world attacks. 👇 We've pulled together some key takeaways from last year's report - swipe through the slides for a quick overview. Want the full findings? Get them straight from the source: 🔗 https://lnkd.in/emSWQdVJ Oh, and if you haven't heard, we're CBEST accredited to test financial institutions insurance businesses and FMIs in the UK. 🤫 #BoE #BankofEngland #banking #ukbanks #financesector

14

🔐 Security+ vs CEH vs CISSP… which one do UK employers actually care about? Stop guessing. 🚫 ✔ Security+ = Strong foundation 🎯 CEH = Offensive / ethical hacking roles 🏆 CISSP = Senior-level leadership cert They’re not competitors — they’re different stages. Start smart. Build properly. Progress strategically. 🚀 Comment “CERTS” if you want the right order 👇🔥 #CyberSecurity #CompTIA #CEH #CISSP #ITCareers #TechUK #Course2Career

Let me share an article prepared by our Senior L1 Auditor Tanuj Soni about A Security-Centric Analysis of Perpetual DEX Evolution and a Blueprint for Resilience. "...Perp DEXs don’t escape risk — they run into the On-Chain Trilemma: decentralization, performance, and security can’t be maximized at once. What followed is an arms race in architecture, and each shift moved the primary attack surface." Enjoy! https://lnkd.in/dFRMeFzx

9

Security backlogs are where vulnerabilities wait to be exploited. When alerts lack context or clear mitigation steps, they inevitably pile up. For security and DevOps teams in the highly regulated finance sector, letting known issues sit untouched simply is not an option. A Director of Cyber Security and DevOps recently shared on G2 how they finally broke this cycle using Picus. See why financial sector leaders trust Picus on G2: https://hubs.li/Q045QXL70 #CyberSecurity #DevSecOps #VulnerabilityManagement #FinanceSecurity #G2Leader

24