Zero Day: Log4Shell
13th December 2021 Late on Thursday 9th and into Friday 10th of December 2021, we began to see reports of a new zero-day vulnerability found in the popular Apache Log4j…
The Faces Behind Options InfoSec Committee
Options has continued to evolve to support our clients in the wake of an ever-changing, increasingly difficult to navigate threat landscape. Over the last year, there have been more zero-day…
One Year in Options
As Options welcomes its latest 2021 graduate intake, it made me think about how 12 months ago, I was in the same position, filled with a mixture of excitement and…
Change Freezes to Change Chills: The What, and the When.
The term “change freeze” is fairly ubiquitous in the IT world and certainly in our fintech corner of it. It is usually defined as a “scheduled halt to all planned…
F5 Vulnerabilities
One core belief in the Options’ security team is that in many cases, the risk presented by an exploit is proportional to the square of the time required to address…
Exchange Marauder Vulnerability – 2021’s First Trial by Fire
Over the last week, executive teams and boards across the Fortune 500 have become increasingly aware of the risks posed by the Exchange Marauder vulnerability. Once again, their email infrastructures…