Research / Infosec Culture (5)

Vault 7 - Why Professional Attackers Are Not Good Defenders

The skillset required to be good at offence is entirely different from the skillset required to be good at defence – in large part because the offence is focused on executing a single attack (i.e., compromising a system), while the defence is focused on preventing all attacks (i.e., d …

Read Story

I'm Afraid You Have 'State Actor'

When it comes to cyberattacks, the threat of a nation-state adversary infiltrating your network is among the most serious threats you can face. But just how frequently does this actually happen? First Published 17th January 2020 Just because you feel it doesn't mean they are there. 4 …

Read Story

The Commoditisation of Hacking

The commoditisation of hacking tools, materials, and services is an uncomfortable trend that is slowly becoming visible as more hackers work together to share information on how to exploit vulnerabilities. First Published 21st November 2019 It's just like selling shovels in a gold rus …

Read Story

Putting Breach Awareness into a Historical Context

Putting Breach Awareness into a Historical Context

How is the world of data breach awareness changing? Is there a shift from protecting companies to protecting individuals? And if so, where does all this awareness lead us to in contrast to where we've been? First Published 30th October 2019 There is a lot we can learn about the future …

Read Story

YouTube Moves to Prohibit Hacking Videos

YouTube explicitly made a change to its Harmful and Dangerous Content policy by prohibiting videos that were instructional in nature that contained duplicating, accessing or exploiting data on websites. First Published 9th July 2019 | Latest Refresh 3rd September 2022 Is there a negat …

Read Story

Cybercrime in Space - Let's focus on what matters

Cybercrime in Space - Let's focus on what matters

NASA astronaut Anne McClain allegedly logged into her ex-wife's bank account and then deleted the transaction history, while aboard the ISS. If so, what are the implications of the first cybercrime in space? First Published 28th August 2019 In space, no one can hear you chuckle. 4 min …

Read Story

Talent Can't Keep Up with Security Demands

The recent high-profile mass hacks have brought the need for InfoSec talent to the forefront. However, it's proving difficult for companies to find the staff to keep up with their security requirements. First Published 16th July 2019 Tech talent burnout is real. So is the scarcity of …

Read Story

Can Security Be Forced Upon Companies?

In the wake of two high-profile data breaches, lawmakers are asking tough questions to company executives, which is forcing them to reevaluate how they store, transfer and protect client data. First Published 12th March 2019 Make me do it. 4 min read | Reflare Research Team This week …

Read Story

Australian Parties Hacked - Pass the Blame

Australia has been gripped by a series of cyber-attacks. As the accusations fly in light of the most recent breach, there is one blindingly obvious thing missing from the blame game - evidence. First Published 25th February 2019 Australia's new National Centre for Cyber Security. 4 mi …

Read Story

Uber Fined for 2016 Data-Breach

Uber Fined for 2016 Data-Breach

Uber was recently fined for failing to protect the data of 57 million users worldwide in 2016. This comes under the EU-wide GDPR 2018, which was adopted into law after a “one-year grace period”. First Published 30th November 2018 This wasn't the first time Uber had been found to have …

Read Story

Subscribe by email