OSINT Resources and Tools

OSINT Resources and Tools

As our personal lives, businesses, entertainment, and communities move deeper into digital spaces, various levels of Open Source Intelligence (OSINT) have become commonplace. From verifying a suspicious social media account to conducting a highly targeted phishing...
How I Almost Got Phished: Advanced Phishing Example

How I Almost Got Phished: Advanced Phishing Example

Usually, I pride myself in being able to spot a phishing email from a mile away, however, I’ve always maintained that anyone, even the most security-minded individual, could be phished with enough research and time.  Recently, I was targeted by a few phishing...
Defend Against DoS with Rate Limiting

Defend Against DoS with Rate Limiting

Every web application is vulnerable to a type of attack in which a malicious third party repeatedly connects to your web server and/or makes bulk HTTP requests, consuming resources and preventing other legitimate requests from being processed. This is called a Denial...
How To Identify URL Phishing Techniques

How To Identify URL Phishing Techniques

In 2025, phishing is still one of the most ubiquitous and effective attack vectors cybercriminals use to steal credentials, distribute malware, and compromise organizations. Oftentimes, these phishing campaigns stem from deceptive URLs which are crafted to appear...
How to Pass a SOC 2 Audit

How to Pass a SOC 2 Audit

I often hear from people that audits are “brutal” and that passing a SOC 2 audit is a significant accomplishment. Most people I talk to feel that an audit is a burden and that passing it takes a lot of extra, unnecessary effort. At TCM Security, we...
Get Started with NoSQL Injection (NoSQLi)

Get Started with NoSQL Injection (NoSQLi)

Overview NoSQL databases, a term that stands for “Not Only SQL,” represent a shift from traditional relational databases. Unlike their SQL-based counterparts that rely heavily on tables and fixed schemas, NoSQL databases provide flexible storage...