Contextual Security
  • About Us
    • Our Team
    • Careers
  • Services
    • BASE (Base Assessment of Security Elements)
    • Penetration Testing
    • PCI Compliance
    • Cybersecurity Maturity Model Certification (CMMC)
    • HIPAA Risk Assessment
    • General Data Protection Regulation
    • CIS Top 20
    • SecurityXtension
    • Rogue Access Point (AP)
    • HITRUST
    • Types of Pen Testing
  • Specialty Industries
    • Retail
    • Healthcare
    • Power
    • Finance
  • Blog
  • Contact Us
  • (844)-526-6732
  • Let’s Chat
Select Page

BloodHound Basics

by Andrew Nash | Aug 3, 2022 | cybersecurity, penetration testing, Uncategorized

“Hacking” isn’t magic, but sometimes it is presented that way. Much of penetration testing and “hacking” is learning the tools of the trade and how they work “under the hood.” In this series we hope to provide a high-level overview of common...

Exploiting the JMX Console (A slightly different path to compromise)

by Terence Martin | Jul 19, 2022 | cybersecurity, penetration testing

On a recent engagement, the client I was assessing had a relatively strong security posture. None of the old standby attacks were working. The client had disabled LLMNR and WPAD based on a previous security assessment, and all the client’s Windows machines were...
Why are you asking to be Whitelisted?

Why are you asking to be Whitelisted?

by Slade Griffin | Oct 23, 2020 | cybersecurity, penetration testing, whitelisting

Recently I have been asked by clients why we request that our scans be whitelisted when we are performing external security assessments. Many people believe that a blocked scan is the same as blocking a vulnerability which is present on a host. This could not be...

Recent Posts

  • BloodHound Basics
  • Exploiting the JMX Console (A slightly different path to compromise)
  • PCI DSS 4.0 Timeline
  • Intro to PCI DSS 4.0
  • The Need for Incident Response Playbooks

Recent Comments

    Archives

    • August 2022
    • July 2022
    • June 2022
    • March 2022
    • December 2021
    • November 2021
    • April 2021
    • March 2021
    • February 2021
    • January 2021
    • December 2020
    • November 2020
    • October 2020
    • September 2020
    • August 2020
    • July 2020
    • April 2020
    • March 2020
    • February 2020

    Categories

    • Compliance
    • cybersecurity
    • incident response
    • PCI DSS 4.0
    • penetration testing
    • Uncategorized
    • whitelisting

    Meta

    • Log in
    • Entries feed
    • Comments feed
    • WordPress.org

    Intro to PCI DSS 4.0

    by Brandon Polk | Jun 30, 2022 | Uncategorized

    Does your organization do anything with credit cards? Chances are you must be Payment Card Industry (PCI) compliant in some form or fashion. PCI compliance touches financial institutions, merchants, hardware and software vendors, managed support vendors, and a variety...

    The Need for Incident Response Playbooks

    by Kevin Thomas | Jun 17, 2022 | cybersecurity, incident response

    The most recent Cost of a Data Breach Report (Ponemon 2021) found that “Lost Business Cost” represented the largest percentage (38%, or $1.59M) of the $4.2M average cost of a data breach. One of the key contributors to the “Lost Business Cost”, along with the cost of...

    0-Day

    by Slade Griffin | Jun 3, 2022 | Uncategorized

    What are we talking about? On May 30 CVE 2022-30190, https://nvd.nist.gov/vuln/detail/CVE-2022-30190, was issued by Microsoft. According to the Common Vulnerability Scoring System this is currently ranked as a high-severity vulnerability with a 7.8 out of 10. A...

    « Older Entries
    Next Entries »

    Contextual Security
    5100 Poplar Avenue, 27th Floor
    Memphis, TN 38137
    844-526-6732
    info@contextualsecurity.com

    Let’s have a chat. We will call you right back!

    14 + 9 =

    Solid security begins with knowing. Excels by doing.

    • Home
    • Services
    • Industries
    • SecurityXtension
    • Resources
    • Contact Us
    • (844) 526-6732

    copyright 2020 | Contextual Security

    • Follow
    • Follow