forumNew topic

Cybersecurity

Attack surface, penetration testing, incident response.

2,991 topics · 44,743 messages
New topic

Latest topics

TopicReplyViewsLast post

Pentest uncovered 40 vulnerabilities — how do we organize remediation without drowning?

İbrahim T***·12 months ago#penetration test#vulnerability management#software security#risk assessment
36replies
22.3Kviews
Kadir A*** · 10 months ago

What resources are actually reliable for learning penetration testing — where should I start?

Sultan K***·12 months ago#penetration testing#penetration test#cybersecurity#ethical hacking#resource recommendation
31replies
5.9Kviews
Zuhal · 10 months ago

Why is ransomware so dangerous — what should a business our size prioritize?

Hüsniye E***·12 months ago#ransomware#cybersecurity#data backup#network security
37replies
23.8Kviews
Koray B*** · 10 months ago

Looking for vulnerability scanning tools — what can I run myself in an 8-person team without breaking anything?

Ülkü Ç***·last year#vulnerability analysis#cybersecurity#server security#crawling tools
79replies
34.1Kviews
Fadime · 10 months ago

We were told NIS2 applies to us — are we legally liable in Spain, and what do we need to do?

Okan F***·12 months ago#nis2#spain#cybersecurity#compliance
36replies
20.4Kviews
Aslı A*** · 10 months ago

An employee's personal phone got hacked and has company data on it — what should we do immediately?

Aslı A***·12 months ago#phone was hacked#byod security#data breach#incident response
39replies
22.8Kviews
Perihan K*** · 11 months ago

We migrated to AWS — is there a tool to audit our cloud security ourselves without paying an auditor?

Serkan Ç***·last year#cloud security#security audit#access management#open source
35replies
22.3Kviews
KORİ · 11 months ago

Data leak happened, what do I tell my customers? Should I be upfront or downplay it?

Lale A***·last year#crisis#communication#intervention
42replies
116.4Kviews
Hande Ş*** · 11 months ago

We fell victim to a cybercrime: file a complaint or notify first, and who do we contact in France?

İlker K***·last year#cybercrime#legal notice#data breach#france#information security
46replies
32.7Kviews
Gürkan · 11 months ago

Two quotes on the table: standard pen test vs a red team exercise at 3x the price — is it worth the money?

Bora G***·last year#red team#penetration test#cybersecurity#budget
70replies
16.4Kviews
Yiğit K*** · 11 months ago

Thinking of setting up a honeypot on our server — does it make sense for a small business, or is it risky?

Kübra M***·last year#decoy system#honeypot#server security#cybersecurity
31replies
5.8Kviews
Ceren E*** · 11 months ago

Insurance company requires a 'ransomware recovery plan' for policy renewal — what needs to be in it?

Oya O***·last year#ransomware#recovery plan#cyber insurance#backup strategy
45replies
28.8Kviews
Jülide K*** · 11 months ago

We need to comply with MEB's cyber incident response procedure — as a school, where do we start?

Recep K***·last year#cyber incident response#ministry of education regulations#private school#information security
45replies
30.9Kviews
KORİ · 11 months ago

How do I wipe saved addresses and location history on Google Maps without leaving a trace?

Mustafa A***·last year#map data#location history#data security#account cleanup
56replies
24.1Kviews
Veli · 11 months ago

someone got into my server, suspicious activity in logs — what to do immediately?

Okan U***·last year#server#hack#intervention
29replies
11.8Kviews
Kemal P*** · 11 months ago

Pen test flagged 40 vulnerabilities — do we really need a dedicated remediation tracking tool?

Ayşe T***·last year#penetration test#vulnerability remediation#information security#vulnerability management
33replies
6.9Kviews
Eda · 11 months ago

We were pitched a "SOC" service — what is it exactly, and does it make sense at our scale?

Kerem·last year#soc service#cybersecurity#log management#security monitoring
36replies
20.2Kviews
Okan U*** · 11 months ago

Vendor audit requires a vulnerability management policy, where do we start preparing the document?

Serkan G***·last year#vulnerability management#security policy#vendor audit#information security
41replies
13.1Kviews
Selim K*** · 11 months ago

We collect customer data on our website, what are the disclosure statement and privacy policy?

Merve B***·last year#kvkk#privacy#text
42replies
15.7Kviews
Özgür K*** · 11 months ago

How to define alert escalation times in a SOC contract — what should I look for in the SLA?

Lale K***·last year#soc alert time#sla agreement#escalation#information security
48replies
8.1Kviews
KORİ · 11 months ago