SecurityMetrics Blog

Where Did that Request Come From? CVE-2020-11682 (CSRF)

What is CSRF? Cross site request forgery, commonly referred to as CSRF (pronounced sea-surf), is an attack in which a user who is authenticated to...
View Post

COVID-19 Cyber Attacks Security Update Center

COVID-19 Cyber Attacks Security Update Center. Your data security and compliance expert amid unprecedented challenges We recognize that businesses...

5 Blogs to Help You Survive PCI DSS and Prevent Security...

Here are 5 Blogs to Help You Survive PCI DSS and Prevent Security Breaches This Year. We cover formjacking, penetration tests, PCI DSS checklists,...

Update: COVID-19 Cybersecurity and Threats

As plans to reopen economies move forward around the world, the entire cybersecurity industry–including the SecurityMetrics Security Operations...

COVID-19 Cyber Attacks: Threat Report and Best Practices

Advanced persistent threats (APTs) and COVID-19 Cyber Attacks: The SecurityMetrics Security Operations Center (SOC) is actively monitoring the...

Authorization Bypass: A Cautionary Tale CVE (2020-11679,...

Attackers: Known or Unknown? That is the question. Far too often I come across applications where developers have made every attempt to secure...

Jen Stone: Principal Security Analyst

Jen Stone is a Principal Security Analyst for SecurityMetrics. In her 4 years at SecurityMetrics, she has completed over 80 security assessments...

Penetration Testing FAQs

Whether your business needs a penetration test for an industry compliance requirement, or because of a security incident, the process can seem...

How to Become PCI Compliant: The 2020 Guide to PCI DSS Compliance

Payment Card Industry (PCI) compliance is required for any organization that takes payment cards. The PCI Data Security Standard (PCI DSS)...

Implementing a PCI-Compliant Remote Workforce Setup

In order to protect the health of employees from the coronavirus (COVID-19) pandemic and to minimize the risk of financial losses due to...

Something from Nothing; a Pentest Story

While performing an external network layer penetration test I encountered a host that presented a single page that was essentially blank...

SecurityMetrics COVID-19 Coronavirus Update

For the last twenty years, SecurityMetrics’ mission has been to help customers close security gaps and prevent data compromise. With the upheaval...

2020 Data Breach Predictions and What We Learned from...

2019 Data Breach Predictions and Findings Prediction: Large-scale social media attacks leading to massive personal data losses. Findings: We saw a...

PANscan 2020 Study Shows Unencrypted Credit Card Data Storage Up

PANscan searches business networks for unencrypted credit card numbers. Can businesses store credit card information? The short answer is, “yes.”...

CVE-2020-5497 - MITREid Connect Cross-site Scripting

MITREid Connect Cross-site Scripting Vulnerability: CVE-2020-5497 Here's the situation: I was performing a penetration test that integrated with...

Need help securing your business?

Request a quote!

We are excited to work with you.

*Required

Thank you!

Your request has been submitted.