A few weeks ago, we posted a security challenge in our article - “How I got root with Sudo”. This post generated much discussion on social media and was focused around how to escalate privileges on real world examples of insecure configurations of Sudo.

Now that everyone’s had the time to have a go, we are ready to put some people out of their misery and publish the answers!

As we mentioned, there was more than one way to solve the challenge and at Securus, we came up with at least two ways to get a root shell; an “easy” way and an “intrusive” way. Numerous people responded with varying solutions, but overall all submissions fell into either categories.

Congrats to the 3 people found the intrusive way and the 15 who managed to find the easy way.

Read more: https://www.securusglobal.com/community/2014/05/14/solutions-to-the-sudo-challenge/

Imperva (partner of Securus) have recently introduced new technology which enables customers to proactively define security strategies as opposed to reacting once they receive the security alerts.

By doing this, Imperva customers will be able to better protect against data access in real-time situations, as soon as suspicious behaviour is detected. The update of Imperva’s flagship SecureSphere platform confirms four major enhancements:

1. The ability to protect against access to SharePoint files in real-time based on business policy.
2. Two new feeds to ThreatRadar Reputation Services – Malicious Scanner and the Comment Spam
3. SecureSphere WAF for AWS is now shipping with SecureSphere 10.5.
4. Dramatically lowers TCO in Database Security- up to 90% fewer virtual appliances, reduce labour costs by up to 70% and reduces infrastructure costs by up to 90%.

Read More: https://www.securusglobal.com/community/2014/05/13/enhancements-to-impervas-securesphere-10-5-platform/

You often hear about the dangers of general phishing attacks as well as targeted spear phishing attacks, but there can be a feeling that mainstream media will over hype these to the point that sometimes it feels as if the world’s falling in. Recently, one of our clients chose to see how effective a spear phishing attack would be against senior management.

Securus Global were engaged to identify a number of reports to a particular individual within our client (all senior IT management), send them all an e-mail, convince them to click on a link to a “malicious” site and provide some credentials. Sounds pretty hard doesn’t it? Especially as the targets are senior management in an IT division. What could possibly go wrong?

Read more: https://www.securusglobal.com/community/2013/12/05/does-spear-phishing-work/

As Securus Global continues to grow, we are currently looking for new Web App Penetration Testers in both our Sydney and Melbourne Offices!

More info: https://www.securusglobal.com/community/2014/04/03/hiring-penetration-testers/

Connect, Follow or Like us on social media to stay up to date with everything SG related: LinkedIN | Twitter | Facebook

Also be sure to checkout our tech team's blog and other industry news that we publish regularly on our website here: https://www.securusglobal.com/community/