Silent Breach Blog

Where Y Combinator Went Wrong

Why its up to Incubators and Accelerators to Solve our Cybersecurity Woes

In 2016, a young sales intelligence firm, Apollo, emerged from Y Combinator against a backdrop of flashy PR and projected growth. Reveling in their nascent celebrity, Apollo went so far as to boast on their homepage that "no one ever drowned from revenue." But it was not revenue that they drowned in when, late last summer, Apollo's databases were hacked, releasing 212 million contact listings, con...

3 Lessons Learned from Accenture's Mistakes

By now we've all heard the news. Car rental behemoth, Hertz, is suing Accenture for $32 million for their failure to deliver "viable web and mobile applications". In fact, Hertz claims that the project needed to be "scrapped" entirely due to "serious security vulnerabilities and performance p...

Most Common Startup Cybersecurity Myths

If you've ever been in a meeting at a startup when the topic of cybersecurity came up, then you've probably seen the barely concealed eye-rolls, feigned attention, and predictable inaction. The reason for this is often simple: startups just don't see themselves as viable targets and are already under immense financial strain. Far more focused on "lean" development, marketing and financials, startu...

Top 5 Cyber Attack Trends for 2019

According to a recent World Economic Forum report, business executives in both North America and APAC consider cyber-attacks to be the number one risk of doing business, outranking terror attacks and asset bubbles. To prepare, here are our projected Top 5 Cyber-Attack Ve...

How to Choose a Cybersecurity Firm? Reading Between the Lines

With the cost of cybercrime set to top $5 trillion over the next five years, an incredible number of cybersecurity firms have been founded in the last few years. So, how do you sift through these countless listings and pick out the perf...

"We are only at the very beginning of our data security problems"

Bill Aulet is an entrepreneur, educator, speaker, and author of the best-selling Disciplined Entrepreneurship. Since 2009, he has served as the managing director of the Martin Trust Center for MIT Entrepreneurship as well as a senior lecturer at the MIT Sloan School of Management. ...

Silent Breach to work with Tech Accord partners

#SilentBreach is honored to join the #Cybersecurity #TechAccord and look forward to working together with its partners Microsoft, Orange, British Telecom, Dell, Hitashi, HP, Facebook, Cisco, and other big players in the industry to help protect users and customers everywhere. Read the articles here: https://cybertechaccord.org/rsaannouncemen...

Silent Breach's mission to protect millions of devices

Marc Castejon is the CEO and Founder of Silent Breach, a cybersecurity startup that specializes in network security and digital asset protection. With over 20 years of experience in the US retail market, Marc and his team have recently developed a software product to help retailers proactively protect their businesses. (Image Credit: Marc Castejon, CEO and Founder of Silent Breach / Image Credit ...

8 cyber security resolutions for 2019

There is no doubt that 2018 has been a bad year for cyber security. With the massive Facebook breach resulting in the exposure of 50 million accounts, Quora's 100s of millions...

Silent Breach nominated top 10 cyber security solutions for 2018

Silent Breach is very honored to be part of the top 10 cyber security solutions for 2018 in the retail sector. The original article is available here: https://retail-security.retailciooutlook.com/vendors/top-retail-security-solution-providers-2018.html Solution described in this ar...

20 Best Security Solution Providers of 2018

Silent Breach is honored to be certified as "20 Best Security Solution Providers of 2018" by Industry Era Magazine The original article is available here: https://www.industry-era.com/vendor-2018-security-Continuous-Protection.php Solution described in this article: read more...

Nominated cyber security solution

Safeguarding the Retail Sector with Continuous Monitoring Systems

Retail CIO Outlook magazine has published a great article on Silent Breach Read the full article here....

Hardening your webapp security

The recent explosion of webapps has led to a dramatic rise in cyber attacks specifically targeting vulnerabilities in web applications. Three quarters of the web applications tested by Silent Breach presented high or critical vulnerabilities that could have led to a data breach, or even total compromise of the website: Fortunately, the ...

Cyber and Information Security Management for Kosovo Banking Association

Silent Breach training expert Hristiyan Lazarov representing the Luxembourg House of Training in Pristina, Kosovo gave a lecture on "Cyber and Information Security Management" to the Kosovo Banking Association. This 3 day training session gave the assosiation an overview of the most common cyber security tactics used in the finance industry today, as well as an insight into trends in the security ...

Cyber Security Continuous Monitoring for the Retail sector

Silent Breach releases its new solution for Continuous Monitoring & Breach Response for the Retail sector.

...

Silent Breach reaches AT&T Hall of Fame for Q2 2018

The Silent Breach cyber security research team has reached the top 25 AT&T bug hunters for Q2 2018:

AT&T Hall of Fame available here: https://bugbounty.att.com/hof.php, for more information on Silent Breach...

Silent Breach finds vulnerability on Intel website

Silent Breach uncovered a vulnerability on Intel's server, which has been addressed by their internal security team. This self XSS attack allowed hackers to gather information on a user that could be used in social engineering attacks. Here's a screenshot below:

...

Silent Breach opens office in Singapore

Silent Breach is expanding its footprint in Asia-Pacific by opening an office in the SUNTEC Tower one, downtown Singapore. Press release available here....

Silent Breach finds vulnerability on Apple iTunes servers

Apple Inc. just confirmed patching their servers for a cross scripting issue (XSS) reported by Silent Breach Inc. in July 2017. Following Apple's instructions, Silent Breach has wait...

GDPR Compliance checklist

The European Parliament adopted The General Data Protection Regulation GDPR in April 2016, replacing an outdated data protection directive from 1995. It carries provisions that require businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU ...

8 cyber security resolutions for 2018

There is no doubt that 2017 has been a bad year for cyber security, with the Equifax breach, Wannacry ransomeware, Russian social media manipulation, etc... But to get you ready for 2018, here's our top 8 cyber-security recommendations to survive through this new year:

...

Emby MediaServer 3.2.5 - Stored XSS (0-day)

Another breach found by our research lab, on the emby MediaServer 3.2.5 (Stored XSS)

Exploit Title : Emby MediaServer 3.2.5 -...

Silent Breach finds vulnerability with Wikipedia.org

Silent Breach finds a vulnerability with the online Wikipedia web site and in its free open source MediaWiki platform:

This vulnerability allows an attacker to gather information on the target (Wikipedia.org) and more easily narrow down potential breaches in the modules used by this web site. This kind of vulnerability is commonly referred to as Information Exposure Through Sent Data ...

our blog