The Consulting Practice

IT Security News. 📰

So it looks like critical infrastructure will likely be disrupted in the future via cybersecurity attacks (or other methods). Are you prepared? Do you have a backup plan? Does your company/organization have a backup plan? What about your city or country? Well actions you can take are to be prepared personally (e.g. extra food in the freezer, a backup cell phone). What about your company, city or country? Well calling, writing letters or emails to those responsible is a good first step to raise awareness and *hopefully* influence those in authority who can ensure that preparations are in place for disasters. Plan for Failure! We assist organizations with Disaster Recover Planning and preparedness.

Stay Secure, Stay Safe!

Chilli. 🌶️

https://www.cybersecuritydive.com/news/cybersecurity-resilience-critical-infrastructure-cisa-nick-andersen/823166/

Major critical infrastructure disruptions are inevitable, acting CISA chief says In recent years, the U.S. government has reoriented its cybersecurity strategy away from prevention and toward resilience.

IT Security News. 📰

Interesting that 75% of threats against some UK Infrastructure are from Nation States......and the beat goes on!

Stay Secure, Stay Safe!

Chilli. 🌶️

https://www.rusi.org/news-and-comment/rusi-news/hostile-states-behind-75percent-cyber-attacks-uk-infrastructure-ncsc-ceo

Hostile States Behind 75% of Cyber Attacks on UK Infrastructure - NCSC CEO RUSI's Annual Security Lecture, given by National Cyber Security Centre Chief Executive Dr Richard Horne, highlights the scale of cyber threats faced by the UK’s critical infrastructure.

IT Security News. 📰

Another day, another breach. This time with Fortinet. It may make sense to have overlapping technologies to monitor for breaches caused by other cybersecurity/network tools. For example, if you are able to observe a large data exfiltration occur that is not usual, then that may be a reason to do analysis - common sense really.

Stay Secure, Stay Safe!

Chilli. 🌶️

https://cybersecuritynews.com/fortinet-fortisandbox-vulnerabilities-exploit/

Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks Threat actors are actively exploiting multiple critical vulnerabilities in Fortinet's FortiSandbox platform, with live attack telemetry confirming exploitation attempts over the past 24 hours.

IT Security News. 📰

Some Open source tools to consider for OSINT, Web and API Security Testing in case you don't have any tools already. Might also be a good idea to use these tools to supplement/compare results you are getting from other testing tools.

Stay Secure, Stay Safe!

Chilli. 🌶️

https://cybersecuritynews.com/secsuite-ai-powered-tool/

SecSuite - AI-powered Tool for OSINT, Web and API Security Testing A new open-source security platform called SecSuite, developed under the TheSecuredAnalyst project, has been released, combining OSINT reconnaissance, web vulnerability scanning, API security assessment, compliance checking, and AI-powered analysis into a single unified toolkit.

Cybersecurity News. 📰

There are "Guardrails" popping up everywhere, and it seems like as soon as you put up these restrictions, then people will try to find workarounds so that they can bypass security controls. What me Worry?

Stay Secure, Stay Safe!

Chilli. 🌶️

https://techcrunch.com/2026/06/10/cybersecurity-researchers-arent-happy-about-the-guardrails-on-anthropics-fable/

Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable | TechCrunch Cybersecurity researchers are complaining that Anthropic's new model Fable has guardrails that are too strict for any cybersecurity work.

IT Security News. 📰

Interesting report on the increase in Cybersecurity attacks.

Stay Secure, Stay Safe!

Chilli. 🌶️

https://www.technologyrecord.com/article/action1-report-highlights-huge-surge-in-cybersecurity-attacks

Cybersecurity News. 📰

Another day, another breach! This time with ServiceNow....and the beat goes on.....

Stay Secure, Stay Safe!

Chilli. 🌶️

https://thehackernews.com/2026/06/servicenow-flaw-exploited-to-gain.html

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances A ServiceNow security issue allowed unauthenticated users, in certain circumstances, to gain greater access to susceptible instances than intended.

IT Security News. 📰

This approach (Claude Mythos) may be the future for ensuring that robust cybersecurity (and other) products are created more securely!

Stay Secure, Stay Safe!

Chilli. 🌶️

https://industrialcyber.co/news/dragos-applies-claude-mythos-preview-to-uncover-vulnerabilities-in-ot-security-software/

Dragos applies Claude Mythos Preview to uncover vulnerabilities in OT security software - Industrial Cyber Dragos joins Anthropic’s Project Glasswing, applies Claude Mythos Preview to uncover vulnerabilities in OT security software.

IT Security News. 📰

An interesting article about ensuring that you treat off-shore Cloud Environments secure. Also, we've come across a technology that partitions data across multiple cloud platforms simultaneously, making a security breach much less likely (check out -> "Binarii Labs" for more details)

Stay Secure, Stay Safe!

Cheers, Chilli. 🌶️

https://www.cybersecuritydive.com/news/how-cisos-can-manage-sovereign-cloud-security-risks/821323/

How CISOs can manage sovereign-cloud security risks Selecting and adopting cloud services from non-U.S. regional providers requires solid cyber risk and security assessment.

IT Security News. 📰

It is hard to believe how easy it is to socially engineer access to secure systems....and the beat goes on......We provide various external testing including social engineering for our clients so that they can improve their cyber-posture.

Stay Secure, Stay Safe!

Chilli. 🌶️

https://www.theregister.com/security/2026/05/14/to-gain-root-access-intruder-just-had-to-ask/5239853

To gain root access at this company, all an intruder had to do was ask nicely Human IT managers thought they were being nice to the boss, but were assisting a threat actor