SecurityMetrics Blog

Implementing a PCI-Compliant Remote Workforce Setup

In order to protect the health of employees from the coronavirus (COVID-19) pandemic and to minimize the risk of financial losses due to...
View Post

2020 Data Breach Predictions and What We Learned from...

2019 Data Breach Predictions and Findings Prediction: Large-scale social media attacks leading to massive personal data losses. Findings: We saw a...

PANscan 2020 Study Shows Unencrypted Credit Card Data Storage Up

PANscan searches business networks for unencrypted credit card numbers. Can businesses store credit card information? The short answer is, “yes.”...

CVE-2020-5497 - MITREid Connect Cross-site Scripting

MITREid Connect Cross-site Scripting Vulnerability: CVE-2020-5497 Here's the situation: I was performing a penetration test that integrated with...

SecurityMetrics' 2020 Guide to HIPAA Compliance Has Launched

2020 SecurityMetrics HIPAA Guide We create and publish our HIPAA Guide each year: to give healthcare IT and HIPAA leaders an up-to-date resource...

What is Formjacking?

What is formjacking? Formjacking is a type of cyber attack where hackers inject malicious JavaScript code into a webpage form–most often a...

Jen Stone: Principal Security Analyst

Jen Stone is a Principal Security Analyst for SecurityMetrics. In her 4 years at SecurityMetrics, she has completed over 80 security assessments...

What is Vulnerability Scanning?

What is Vulnerability Scanning? Vulnerability scanners are technically computer programs that search systems for weaknesses. Hackers can take...

What is Network Security?

Network security consists of the policies, procedures, programs, hardware, software, and people you use to protect your corporate network. Network...

What is a Managed Firewall and Do You Need One?

Qualified managed security service providers (MSSPs) typically provide a managed firewall service as a solution for firewall operation,...

5 Tips to Implement Security Awareness at Your Company

Whether you’re a CIO, the head of IT, or in a non-security-related position, if your data security practices are unclear, your company is at a...

WiKID 2FA Enterprise Server Cross-Site Scripting

A stored and reflected cross-site scripting vulnerability, CVE-2019-17114, was identified on WiKID Systems 2FA Enterprise Server version...

WiKID Systems 2FA Enterprise Server CSRF

Multiple Cross-Site Request Forgery issues, CVE-2019-17118, were identified on WiKID Systems 2FA Enterprise Server through version 4.2.0-b2053....

Something from nothing; a Pentest story

While performing an external network layer penetration test I encountered a host that presented a single page that was essentially blank: <meta...

WiKID Systems 2FA Enterprise Server SQL injection

A SQL Injection vulnerability, CVE-2019-16917, was identified on WiKID Systems 2FA Enterprise Server through version 4.2.0-b2047. The uid and...

Need help securing your business?

Request a quote!

We are excited to work with you.

*Required

Thank you!

Your request has been submitted.