CovertSwarm
About CovertSwarm
If you release code, hire people, open new premises or change your board more often than you attack yourself, you are not keeping pace with your own risk. CovertSwarm was founded in 2020 on that argument, frustrated that organizations relied on occasional penetration tests, thick reports and long gaps in between.
The Swarm runs realistic attacks across digital, physical, and social environments, then shows how weaknesses chain into paths an attacker could use against the business.
What we write about
- Continuous offensive security testing: Why occasional testing can’t keep pace with how often your organization changes.
- Emerging threats: New attack techniques and what they could let an attacker do to your organization.
- Offensive AI and AI security: Prompt injection, multi-agent risk and how attackers can turn AI and agentic systems against the organizations running them.
- Red teaming and adversary simulation: Chaining weaknesses into the attack paths a real adversary would follow.
- Regulatory threat-led testing: CBEST, STAR-FS and threat-led testing, from a team with CREST accreditation for both.
- Physical security and social engineering: Getting into buildings and past staff, and what that access exposes.
- Vulnerability research: Flaws in software and systems, and what an attacker could do with each one.
Latest posts
Video: Zero-Day Exploitation From A Bad Actors Perspective
On the 11th April members of the CovertSwarm team took part in an online discussion, hosted by the London CTOs group. In this session we discuss zero-day vulnerability exploitation and the tactics and techniques used by bad actors, in the…
Multiple Windows Zero-Days Identified (CVE-2022-24521, CVE-2022-26904 and CVE-2022-26809)
We would like to bring to your attention, that Windows recently has addressed a total of 128 security vulnerabilities. 10 of these 128 vulnerabilities are rated with the severity Critical. Security patches for these vulnerabilities were made available by Microsoft.…
Zero Day Vulnerability Identified In Java Spring Framework – CVE-2022-22965 (Spring4Shell)
A zero-day remote code execution (RCE) vulnerability has been identified in the Spring framework. VMware Spring is a open-source Java toolkit for building powerful Java apps, including cloud-based apps. Part of the Spring ecosystem is a set of components called…
Remote Code Execution Vulnerability In Veeam Backup & Replication – CVE-2022-26500 & CVE-2022-26501
We would like to bring your attention to the following unauthenticated remote code execution vulnerability within Veeam Backup & Replication. This issue is being tracked as CVE-2022-26500 & CVE-2022-26501 and has been given the CVSS v3 score of 9.8. At…
Video: Your Best Defence is Your Worst Enemy – Rethinking Your Cyber Security Strategy.
Last week, CovertSwarm’s COO, Luke Potter, was invited to speak at an online panel discussion, sponsored by VMware, and in collaboration with our partners at Ekco, to discuss emerging cyber threats, the rapidly growing threat landscape and exactly why point…
Critical Root Privilege Escalation Vulnerability Alert In Linux – CVE-2022-0847
We would like to bring your attention to the following critical root privilege escalation vulnerability that we have recently become aware of. This vulnerability affects all major Linux distributions and is considered to be easy to exploit. Proof of concept…
Who are CovertSwarm?
We’re glad you asked…
CovertSwarm – Dundee and Angus College Curriculum Partner
It is with great pride we announce our ongoing relationship as a Curriculum Partner for the Computing and Creative Media Department at Dundee and Angus College. Over the coming months we will be working closely with the college to help…
Introducing CovertSwarm – The Podcast
We are very excited to share with you today, the first official CovertSwarm podcast. Join CovertSwarm’s CEO, Anders Reeves and COO, Luke Potter, in the first episode of an ongoing series as they discuss why the cyber industry must change,…
Zero Day Vulnerability Identified In Magento 2 And Adobe Commerce (CVE-2022-24086)
We would like to bring your attention to the following 0-day exploit we have recently become aware of. A zero day remote code-execution (RCE) bug in the Magento 2 and Adobe Commerce platforms has been discovered. This vulnerability has been…
The emerging crisis in Ukraine
In light of this morning’s devastating news on the ongoing crisis in Ukraine, our thoughts and prayers are with anyone affected.
0-day Vulnerability In Horde Webmail Email System
We would like to bring your attention to the following 0-day exploit we have recently become aware of. The Horde Webmail Software has been found to contain a nine year old unpatched security vulnerability. Exploitation of this vulnerability could be…
Authentication Bypass/Instance Takeover Vulnerability via Zabbix Frontend – CVE-2022-23131
A vulnerability has been discovered within Zabbix front end which if configured with SAML could allow a remote unauthenticated attacker to exploit this issue in order to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack,…
Critical RCE Vulnerabilities in WordPress Plugin PHP Everywhere
We would like to bring your attention to the following set of critical vulnerabilities that we have recently become aware of within the WordPress plugin ‘PHP Everywhere’. Description Three remote code execution vulnerabilities have been identified within the WordPress ‘PHP…
Critical Vulnerability Alert in Samba – CVE-2021-44142
We would like to bring your attention to the following Critical vulnerability we have recently become aware of. All versions of Samba prior to 4.13.17 are vulnerable to an out-of-bounds heap read write vulnerability that allows remote attackers to execute…
Remote Root Exploit via Log4Shell & PwnKit Vulnerabilities
CovertSwarm demonstrating a full remote ‘root’ attack chain – enabled by Log4Shell (CVE-2021-44228) + PwnKit (CVE-2021-4034) Over the past months there were several releases of new CVE’s, two of which especially have a major impact on modern systems. Today we…
Critical 0-day vulnerability in Polkit pkexec component
Description A vulnerability in Polkit’s (PolicyKit) pkexec component identified as CVE-2021-4034 (PwnKit) is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system. The issue exists within PolicyKit…
CovertSwarm appoints Luke Potter as Chief Operating Officer
CovertSwarm is modernising the penetration testing, red teaming, and bug bounty industries with its challenger ‘Constant Cyber Attack’ service offering and platform. Today, they announced the strategic appointment of Luke Potter as their Chief Operating Officer (COO).
What is Fingerprinting in Ethical Hacking?
Fingerprinting (also known as footprinting) is the process of enumerating a target online presence, often the first step when planning an attack.
What is an Application-level Attack?
Application-level attacks are those attacks that exploit weaknesses in a program, rather than in its underlying infrastructure.
Log4Shell RCE: Critical Zero Day Security Vulnerability
The vulnerability is within the Java library Apache log4j v2 and has been classified with a CVSSv3 base score of 10 meaning this vulnerability is of critical severity.
Password Policy Best Practices
Your password is the gateway to your account. Once inside, a hacker can access a wealth of personal or company information, and use it for their own ends— like divulging trade secrets, fraud or accessing data. Crafting a secure password is essential in reducing risks to your account and information and keeping your data safe — whether at home, work, or on-the-go.
Video: An Ethical Hacker’s View on your Security (London CTOs)
Thanks to a recent client recommendation for CovertSwarm’s services to the London CTOs community, CovertSwarm was invited to present to the network where we discussed all things Pen Testing, Red Team and Cyber Attack related. A video of the presentation…
What is Penetration Testing as a Service (PTaaS)?
Penetration Testing as a Service (PTaaS), which is more commonly shortened to ‘Pen Test as a Service’ is the delivery of penetration testing services via a cloud-hosted portal with the testing itself normally conducted by a third-party contractor either employed or subcontracted (via a human resource ‘marketplace’) by the vendor's portal.