CIL Security Advisory

Passwordless Authentication: The Future of Logging In?

IntroductionImagine your digital accounts as rooms in a house, each secured by a unique, complex key (password). Remembering hundreds is…

Your Two-Step Safety Net Under Attack

IntroductionYou likely use Multi-Factor Authentication (MFA) – that extra step beyond your password, like a code from your phone or…

Beyond the Login: Stopping Unauthorised Access in Your Web Apps

IntroductionAccess control abuse, including Insecure Direct Object Reference (IDOR) vulnerabilities, enables attackers to bypass permission checks and gain unauthorised access…

Living Off the Land Attacks: When Hackers Use What’s Already Inside

IntroductionLiving off the Land (LotL) is a technique used by attackers where instead of deploying external malware, they use trusted…

Your SharePoint System Under Direct Attack

IntroductionIf your organisation uses on-premise Microsoft SharePoint servers, your systems are currently under direct and active threat. Security researchers have…

Biometric Authentication Benefits and Risks

IntroductionBiometric authentication like fingerprint scans, facial recognition, and voice verification has become widely adopted across phones, apps, and even office…

The Risks Associated with Sideloading Apps on Mobile Devices

IntroductionSideloading is the process of installing apps on a mobile device from sources outside official app stores like Google Play…

Cloud Misconfigurations: A Leading Cause of Data Breaches

IntroductionCloud services offer scalability, flexibility, and cost-efficiency, but they also introduce new security challenges. One of the most common and…

Cyber Insurance: Understanding the Coverage and Limitations

IntroductionAs cyber threats grow in scale and complexity, organisations are increasingly turning to cyber insurance as a safety net against…