Our Blog
Resources and insights
The latest industry news, interviews, technologies, and resources.
Four Must-Haves for Effective Penetration Testing
The true value of a pentest lies in the actionable insights and collaboration with your pentest team. Here are four critical elements you should never skip.
Application Security 101: Basics, Best Practices, & Challenges
This article reviews the key concepts and principles of application security, providing an overview for developers, IT professionals, and business leaders.
Getting Started with IoT and Hardware Hacking: Part 3 – Analyzing and Enumerating Firmware
In part three of our intro to hardware hacking series, we learn about firmware analysis and how to hunt for vulnerabilities on IoT devices.
Why You Should Use Password Filters
Attackers targeting login portals has become common place, so much that many organizations don’t even bother reviewing logs due to the immense number of password spraying campaigns. Adversaries continue this attack path because it’s proved successful The good news is...
Is “After-Hours” Testing Worth It?
Conducting security testing in the off-hours may be the best option to avoid disruption to business processes. However, we often find that it isn’t necessary.
Six Tips For Better Domain Administrator Management
Domain Administrator accounts are often the target of advisories and rightfully so as their access typically gets you into anything you’d like within an organization. However, through years of security testing there are trends of poor account management with this...
Is Metadata Helping Your Attackers?
Publishing documents and sharing media on your website seems harmless at the surface level but lurking underneath could be the crux of your security program. Metadata stored on documents could be leaking information and aiding adversaries in attacking your...
Top 5 Ways COVID Changed Security Assessments
There is no doubt that COVID has changed how the world conducts business, so it’s no surprise that security assessments have as well. The increase in remote employees and the need for availability of applications and resources from afar has disrupted organizational...
So You Want to Be a Hacker: 2021 Edition
Video Version: https://www.youtube.com/watch?v=mdsChhW056A Introduction Recently, I posted a 36-part Twitter thread (https://twitter.com/thecybermentor/status/1343471814132031488) on how to become an ethical hacker in 2021. Given that it was well received, I thought...
Stay Ahead of Cyber Threats
Get expert insights on the latest penetration testing strategies, emerging vulnerabilities, and cybersecurity best practices—straight to your inbox.
Loading form...
We care about your data in our privacy policy.








