Scope:

CyBourn was contracted to provide Penetration Testing and Vulnerability Scanning services for the IT Environment. This included discovery and assessment of the external attack surface, a timed RED Team exercise consisting of stealth techniques running an attack scenario, external black-box penetration testing, internal vulnerability scanning services, internal grey-box penetration testing for the internal network infrastructure and core business applications, ICS infrastructure penetration testing, and wireless infrastructure penetration testing.

Key Risks:

• OT specific risks on the ICS infrastructure
• Exploitation of internal vulnerabilities

Key Issues and Challenges:

• Testing on live environments

Results:

The CyBourn RedTeam employs a tested array of tactics and techniques which have proven effective in avoiding standard SOC detection techniques. We constantly test and improve these procedures as part of internal adversary simulations to strengthen our capabilities. Among other things, CyBourn was able to gain access to the men’s locker room CCTV cameras, highlighting the vulnerabilities that could be exploited by attackers, if left unaddressed. This provided Chelsea Football Club with valuable insights, enhancing their security posture and ensuring the best protection of their assets.