forumNew topic

Cybersecurity

Attack surface, penetration testing, incident response.

2,991 topics · 44,743 messages
New topic

Latest topics

TopicReplyViewsLast post

Agency is suggesting a web pentest, how does it differ from a standard pen test and does a small site need it?

Vildan B***·10 months ago#web pentest#penetration test#web security#security vulnerability
32replies
49.6Kviews
Reyhan K*** · 8 months ago

Employee plugged in a USB stick they brought in, and I immediately started getting all sorts of warnings. Should I run a virus scan?

Furkan Y***·10 months ago#virus#usb#storage
43replies
9.1Kviews
Beyza V*** · 8 months ago

Agency is suggesting 'Red Teaming': What does this actually mean for a 20-person company?

Ümit B***·10 months ago#red teaming#penetration test#cybersecurity#information security
53replies
12.6Kviews
Merve A*** · 8 months ago

An information security audit was requested for our medical devices — what are they looking for exactly?

Ömer Ö***·10 months ago#medical device#information security#mdr#threat model#cybersecurity audit
36replies
6.1Kviews
Hakan Y*** · 8 months ago

Ransomware risk for a nursing home in France: what are we actually putting on the line with health data?

Oya O***·10 months ago#nursing home ransomware#health data#ransomware#data breach#cybersecurity
47replies
12.2Kviews
Okan Y*** · 8 months ago

Web analytics is showing bot traffic — fake visitors. What should I do to filter them out?

Havva Ö***·10 months ago#bot#analytics#filter
28replies
28.6Kviews
Gonca · 9 months ago

One vendor quoted a vulnerability scan, the other a penetration test. What's the difference and which do we need?

Neslihan K***·10 months ago#vulnerability scanning#penetration test#audit#information security
46replies
22.8Kviews
Zübeyde D*** · 9 months ago

We're running a web pentest on our live site — how to write a test plan to avoid downtime?

Caner B***·10 months ago#web pentest#penetration test#production environment#test plan
41replies
11.8Kviews
Selin K*** · 9 months ago

Tax inspector coming within a month — what do I need to prepare for a cybersecurity audit?

Gamze U***·11 months ago#audit#compliance#preparation
76replies
479.6Kviews
KORİ · 9 months ago

Can we do mobile app security testing ourselves for free without paying an agency?

Aycan K***·11 months ago#mobile app#security testing#application security#penetration test
44replies
11Kviews
Koray T*** · 9 months ago

Can printers and scanners also be attack targets, do we need to secure company printers

Beyza K***·10 months ago#printer#iot#network
28replies
13.3Kviews
Lale T*** · 9 months ago

NIS2 regulation: They told us we fall under it, how can I verify this in Italy?

Furkan Y***·11 months ago#nis2 regulation#cybersecurity#italy#compliance process
28replies
13.7Kviews
Hüsniye U*** · 9 months ago

Should we ask for a sample report when getting pentest quotes, and what should be in it?

Deniz D***·11 months ago#penetration test#pentest report#information security#cybersecurity
28replies
13.9Kviews
Burak O*** · 9 months ago

We were asked to get a penetration test done — what does a real-world example look like, and do we actually need it?

Kaan B***·11 months ago#penetration test#information security#cybersecurity#enterprise sales
38replies
17.6Kviews
Sinan B*** · 9 months ago

I use the admin account for daily tasks, is this very risky, how should I restrict it?

Onur S***·11 months ago#admin#access#rights
41replies
13.6Kviews
Beren T*** · 10 months ago

Client requires a cybersecurity operations center, is this mandatory for a 20-person company?

Nuri K***·11 months ago#operations center#information security#outsourcing#vendor management
28replies
7.3Kviews
Yasemin Y*** · 10 months ago

What should we do against ransomware — which layers are essential for a small business?

Salih·12 months ago#ransomware#cybersecurity#data backup#access permissions
34replies
16.1Kviews
Ömer Ö*** · 10 months ago

Auditor is asking for an AWS security audit policy — what actually goes in it?

Ülkü Ç***·11 months ago#aws security#audit policy#cloud security#access management
37replies
24.3Kviews
Sevil · 10 months ago

They're requiring a "cyber incident response team" — does a 20-person firm really need this?

Lale B***·11 months ago#cyber incident response team#vendor audit#cybersecurity#information security
30replies
11.2Kviews
Burak A*** · 10 months ago

We keep finding forgotten subdomains and servers, is an EASM tool actually necessary or just hype?

Irmak V***·11 months ago#external attack surface#cybersecurity#subdomain#asset management
30replies
5.8Kviews
Cem B*** · 10 months ago