Carson & SAINT | Cybersecurity

For organizations subject to PCI DSS requirements, selecting an Approved Scanning Vendor (ASV) is an important compliance decision. But while PCI Security Standards Council (PCI SSC) approval establishes a vendor’s eligibility to perform required external vulnerability scans, it doesn’t tell you everything about the experience of working with that provider. An effective ASV p...

Millions of exploit attempts have been recorded against PHP servers following the disclosure of two critical vulnerabilities known collectively as PHP2Shell. The rapid escalation has prompted urgent calls for organizations to identify affected systems and apply security updates. According to DataBreachToday, Cloudflare observed thousands of exploitation attempts before the vu...

Penetration testing gives organizations an opportunity to see their defenses from an attacker’s perspective. But the value of a penetration test depends on more than the number of vulnerabilities it identifies. A test might uncover dozens of weaknesses without clearly explaining which ones pose the greatest threat to business operations. Another might identify a smaller […]