Cyber security incident response services in SA?

[JPDEL]

Can anyone recommend an (ideally) local company that can assist with a possible breach on a hosted website/server? Basically, identifying if a breach has happened, and if so, how to remedy the problem.

Thanks!

 

[Lord Flacko]

www.bui.co.za

 

[JPDEL]

www.bui.co.za

Thanks. But it seems they're more offering consultation for prevention, rather than specifically offering incident response for when a breach has occurred?

 

[Captain Morgan]

Highly recommend www.rack911.com.

US-based company, but they really know their stuff.

 

[RonSwanson]

What is the scope -- is cardholder data involved?

 

[JPDEL]

What is the scope -- is cardholder data involved?

No sensitive cardholder data. At the moment, it seems there's some kind of data leak, but it's not clear to what extent. Basically there's been some (failed) attempts on the server using user data that should not have been available to anyone (it's too specific to be random attempts). So need to try identify how they got that information (we've already gone through all access logs, and haven't been able to pick up the issue ourselves).

 

[JPDEL]

Highly recommend www.rack911.com.

US-based company, but they really know their stuff.

Thanks. Will check them out.

 

[Jet-Fighter7700]

what about the guy that runs https://haveibeenpwned.com/

isnt he always on the lookout for breaches to add to his DB?

 

[OCP]

Not cheap but DarkTrace will both detect and can prevent breaches.

Have discovered lots of interesting things on our networks with it.

 

[irBosOtter]

Not cheap but DarkTrace will both detect and can prevent breaches.

Have discovered lots of interesting things on our networks with it.

We had a POC with them last year, expensive, and did not pick up the most basic hack attempts that one can run from kali Linux.... Still an awesome tool to see what's going on on the network

 

[evilbob]

Hi, I am in incident response myself, but I am internal to a bank. The two local companies I would use are MWR (now part of F-Secure) https://www.f-secure.com/en/consulting and Foregenix https://www.foregenix.com/ . Those are not cheap options however they have deep experience and skills.

 

[LCBXX]

Why not reach out to one of the big-4 audit firms. All of them have, expensive, cybersecurity and forensic capability.

 

[Monka]

Can anyone recommend an (ideally) local company that can assist with a possible breach on a hosted website/server? Basically, identifying if a breach has happened, and if so, how to remedy the problem.

Thanks!

Pm your details

 

[Moto Guzzi]

What do you make of this........This was around 5 years ago, but what prevents similarities today.

Old leaks, but it show up on Google search.
By following the Paypal request for funding.......
This page...www.scylla.sh seems to belong to https://www.hyperiongray.com/about/ which has logs for problems here...https://github.com/acaceres2176/scylla/issues

Some info here:

I am confused as to why a ligit company let such info be visible...?