News

News

CVE-2013-5667 Thecus NAS Server get_userid OS Command Injection

Advisory Information Title: Thecus NAS Server get_userid OS Command Injection Date published: 13 January 2014 Reference: CVE-2013-5667 Advisory Summary A lack of input validation allows an attacker to execute OS commands directly on the operating system. Vendor Thecus <http://www.thecus.com/> Affected Software Thecus NAS Server N8800 Firmware 5.03.01 Description of Issue The issue exists because the […]

Read More

ICO issue BYOD advice

ICO issue BYOD advice. The Information Commissioner’s Office (ICO) has recently issued advice for companies with regards to BYOD (Bring Your Own Device). This guidance explores what you need to consider if permitting the use of personal devices to process personal data for which you are responsible. The ICO document can be found here: ico_bring_your_own_device_byod_guidance

Read More

CVE-2013-6880 FlashCanvas proxy.php XSS Vulnerability

Advisory Information Title: FlashCanvas proxy.php XSS Vulnerability Date published: 11 December 2013 Reference: CVE-2013-6880 Advisory Summary Script does not adequately verify the Referer header before requesting (via curl) the remote URL specified in the ‘url’ GET parameter and rendering it. Vendor FlashCanvas.net <http://flashcanvas.net/> Affected Software FlashCanvas 1.5 and possibly older. FlashCanvas is also used in […]

Read More

Graduate Junior Security Tester Training and Development

As part of our on-going development, 7 Elements is looking to take on another Junior Security Tester in the summer of 2014. Through our dedicated Graduate Junior Security Tester Training and Development Plan they will gain the skills and experience necessary to become an independent, effective and highly skilled manual security tester. More information on […]

Read More

Security Testing Scheduler required

e-Placement Scotland are working with us to help find a Security Testing Scheduler. Security Testing Scheduler: The role will be based from 7 Elements’ office. The placement will be for 6 months, starting in January 2014. Salary £15,000 per annum pro rata. Apply online here

Read More

Senior Security Tester

We are looking for a Senior Security Tester to join the team. We pride ourselves on our expertise in technical information assurance, as such the candidate must have a high level of technical ability and share our passion for information security. If this sounds like you then visit our careers page to find out more.

Read More

Security Testing Project Manager

We are looking for a Security Testing Project Manager to join the team. The role of the Security Testing Project Manager will be to work within 7 Elements’ busy technical team to manage the delivery of security testing whilst ensuring 7 Elements’ high standards of customer service are met.  The main focus of the role […]

Read More

Cloud Security Alliance Symposium

Our CEO, David Stubley will be presenting on the subject of Cloud Security at the Cloud Security Alliance Symposium on the 24th September. Further information can be found here.

Read More

Digital Technology Awards 2013

Last night the team from @7elements attended the ScotlandIS Digital Technology Awards 2013 awards to find out if we were successful in the ‘Best Newcomer’ category. With nerves increasing, thankfully our category was first up. The shortlisted companies were announced in reverse order for the award and were as follows: In 3rd place Guerilla Tea 2nd place, went to our team […]

Read More

ScotlandIS

7 Elements are proud to be a business member of ScotlandIS. ScotlandIS, is the trade body for the ICT industry in Scotland, more information about their role can be found here.

Read More