Penetration Testing Archives

Downtime vs. Ransom: Should you pay ransomware ransom?

31/03/2026 by Krypsys

Should you pay ransomware ransom? When a ransomware incident occurs, the business impact is immediate. Core systems become unavailable, users lose access to critical applications, and normal operations stop. From an executive perspective, the priority quickly becomes restoration of availability. Under that pressure, paying the ransom can appear to be a pragmatic option. In practice, …

Building Trust in Cyber Security: Our CREST Accreditation

25/02/2026 by Krypsys

Krypsys has reached an exciting milestone by being awarded CREST accreditation: a globally recognised mark of excellence in cyber security services. What is CREST? CREST (Council for Registered Ethical Security Testers) is an international, not‑for‑profit accreditation and certification body for the technical cyber security industry. It provides independently assessed accreditation for organisations and rigorous professional …

Why “Compliance” Does Not Equal “Secure”

08/03/202621/02/2026 by Krypsys

In cybersecurity, the claim that compliance equals security is one of the most dangerous misconceptions in boardrooms and IT departments. It isn’t just semantics, it’s a flawed operational posture that leaves organisations exposed. The hard truth: meeting regulatory requirements does not mean you’re protected from breach, disruption, or data theft. Compliance is a baseline. Security …

Why Small and Mid-Size Businesses Are the Primary Cyber Targets

26/01/2026 by Krypsys

Small and mid-size businesses (SMBs) are no longer collateral damage in cybercrime. They are the primary target. Modern attackers deliberately focus on organisations with limited security maturity, inconsistent controls, and constrained budgets. The misconception that “we’re too small to be attacked” is one of the most persistent and dangerous assumptions in cybersecurity today. Threat actors …

The Most Common Security Gaps Found in Penetration Testing

26/01/202625/09/2025 by Krypsys

Every penetration test ends up uncovering a familiar set of problems. Different companies, different industries, but the same issues keep showing up. They’re the basics that attackers love because they work over and over again. Weak Passwords and a lack of MFA Passwords like Winter2025! still show up everywhere, because every year in penetration test, …

The Vital Role of Penetration Testing in 2024

12/02/2024 by Krypsys

In an age where technology permeates every aspect of our lives, cybersecurity has become paramount. With the increasing sophistication of cyber threats, it’s no longer sufficient to merely implement security measures and hope for the best. Instead, organisations must adopt proactive approaches to identify and mitigate vulnerabilities before they are exploited by malicious actors. This …

Enhancing Cloud Data Security: The Role of Penetration Testing in ISO 27018 Compliance

07/12/2023 by Krypsys

In the dynamic realm of cloud computing, organisations are increasingly entrusting their sensitive data, including personally identifiable information (PII), to third-party cloud service providers (CSPs). This shift brings forth a heightened responsibility for CSPs to safeguard this data in accordance with stringent data protection standards, such as ISO 27018. While ISO 27018 provides a comprehensive …

Is Manual Penetration Testing Still Necessary

04/05/2023 by Krypsys

In the world of cybersecurity, organisations often rely on both manual penetration testing and automated vulnerability scans to identify and mitigate security risks. While automated scans can be useful in identifying low-hanging fruit vulnerabilities, manual penetration testing offers several benefits that cannot be replicated by automated tools. In this blog post, we will explore the …

What to Look for in a Pen Testing Company

15/04/202403/05/2018 by Krypsys

Cybercriminals and penetration testing companies have a lot in common. Both search for vulnerabilities in your infrastructure; however, whilst the former may be looking to exploit these vulnerabilities in a way that would be detrimental to your business, the aim of the latter is to support you to better protect your company and its customers. …

Do You Need Penetration Test for the GDPR?

14/05/202118/10/2017 by Krypsys

Do you need penetration test to comply with GDPR? The GDPR requires that you assess applications and criticalinfrastructurefor security vulnerabilities and that the effectiveness of your security controls are tested regularly. Services such as penetration testing and regular vulnerability assessments will help meet this requirement. The GDPR brings a number of changes including breach reports being legally required within …

Penetration Testing Tools for Small Business

15/04/202420/06/2017 by Krypsys

Cyber-criminals unfortunately continue to up the ante of their attacks and in many ways, are adapting faster than the good guys

Cyber security: ‘resilience’ is the key to thwarting cyber-attacks

17/04/202402/04/2014 by rbadmin

Can any business ever defend against every potential cyber-attack or protect its networks from hackers? The short answer to that is no. Determined hackers are enterprising and surprisingly skilled at finding even the smallest chink in your business’ security network. So does that mean you shouldn’t bother with security at all? Well, no: on the …

Cyber-crime: Cisco claims retailers remain one step behind hackers

17/04/202425/03/2014 by rbadmin

What lessons have we learned from last year’s massive cyber-attack on Target where hackers seized the personal and bank card information of more than 110 million customers? Well, according to Cisco Systems, the global networking and technology giant, the answer is not a lot. Yes there has been a scramble to come up with some …

New study shows that most SMEs mistakenly believe they are immune from cyber-attack

17/04/202418/03/2014 by rbadmin

Do owners of small and medium-sized business ever considered the fact that they may at some stage face the prospect of cyber-attack? The chances are the answer to that question is no. The reason for this is that they feel they are not big enough, or important enough to warrant attention from hackers; after all, …

Nearly 100,000 travel insurance customer’s credit card details compromised in cyber-attack

17/04/202409/01/2014 by rbadmin

2013 ended just as it had begun with yet another cyber-attack against a firm holding customer data. The personal and confidential information of thousands of Staysure customers was stolen by hackers. The cyber-attack saw the credit card details of nearly 100,000 travel insurance customers compromised. The travel insurance provider has revealed that card payment details …