Zigrin Security

Profile set up by Edverise AI

Set Up By Edverise AI

Edverise AI built this profile by analyzing thousands of data points across the web. If you own this business, become an Edverise partner to manage and update your profile.

Become an Edverise Partner

Overview

$1,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

2 - 9

Employees

2017

Year Founded

ABOUT ZIGRIN SECURITY

We increase the cost of cybercriminal activities.

We are a group of cybersecurity specialists dedicated to delivering thorough, practical security assessments for internal networks, applications, cloud solutions, e-commerce sites, and mobile devices. Our clientele and partners consist of businesses, non-governmental organizations, public institutions, and military entities from across Europe.

Languages Spoken

EnglishPolish

HIGHLIGHTS

$1,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

2 - 9

Employees

2017

Year Founded

Services

Focus

Industries

Clients

Services Provided

50% Cybersecurity Assessments & Hardening

50% Other IT Consulting and SI

Portfolio

Securing company’s main website

Britenet

Britenet is a software development and outsourcing firm with a workforce exceeding 900 employees. The company focuses on developing systems that enhance operational processes across various business sectors. Its website serves as a platform to represent the brand to both current and potential clients, while also featuring job listings and a recruitment form for candidates to submit their resumes. Ensuring the security of the information hosted on the website was crucial for Britenet. A breach could severely damage the company’s reputation and lead to a loss of potential clients. The aim of the website penetration test was to uncover vulnerabilities and misconfigurations that might enable cyber adversaries to access sensitive information, alter the website, or prevent visitors from accessing it. We selected a black-box penetration test, simulating Internet-based threat actors, as the most effective approach. The focus was on discovering content and understanding the custom mechanisms used on the website. Consequently, we found 9 vulnerabilities, which varied from high-severity issues to informational findings that posed no immediate threat. Britenet addressed vulnerabilities that allowed for: 1. Unauthorized access to the application’s operating system and database housing its data. 2. Extraction of applicant information from submitted resumes. 3. Theft of source code and configuration files. 4. Execution of Denial-of-Service attacks that hindered visitor access to the website. 5. Theft of employee password hashes. 6. Impersonation of an employee in internal communications.

MISP Penetration Testing

NCSC - NATO Cyber Security Centre

MISP is an Open Source Threat Intelligence Platform utilized by various entities, including NATO, CiviCERT, CSSA Cyber Security Sharing & Analytics, and FIRST. However, it faces challenges due to its vast size and the involvement of hundreds of contributors. The source code sees updates every few days, with monthly releases on average, which heightens the risk of introducing new vulnerabilities. Additionally, with over 600 organizations globally using MISP, it becomes an attractive target for potential attacks. To address these vulnerabilities in web applications, we opted for several effective discovery methods: 1. Grey-box penetration testing—this is particularly suited for internal web applications or those mainly accessible to authenticated users, making it our primary approach since MISP requires user authentication. 2. Automated source code scanning—this provides a fast way to identify obvious vulnerabilities. 3. Manual source code review—to verify findings and eliminate false positives. 4. Examining past vulnerabilities—this approach involved looking for security issues similar to known vulnerabilities in older MISP versions due to its extensive attack surface. During our security assessment, we identified two vulnerabilities that the MISP team promptly addressed, one rated critical (9.9 out of 10) and the other of medium severity. The critical flaw had the potential to allow unauthorized access to sensitive information, theft of password hashes, user impersonation, and attacks on the internal infrastructure of victim organizations. The client opted to implement a silent patch and notify organizations about the vulnerability. All organizations that upgraded to the patched version of MISP were protected from the identified threats.