Vulnerability Management and Assessment

3 Vulnerabilities to be on the Lookout for in 2020

3 Vulnerabilities to be on the Lookout for in 2020 1.Security Misconfigurations What is a security misconfiguration? A security misconfiguration...

REST Assured: Penetration Testing REST APIs Using Burp Suite: Part 3 – Reporting

Reporting for Penetration Testing REST APIs  Welcome back to the Penetration Testing REST API blog series for Part 3: Reporting....

REST Assured: Penetration Testing REST APIs Using Burp Suite: Part 2 – Testing

Welcome back! In part 1 of REST Assured blog series, we discussed the definitions and history behind APIs, and we...

A Tale Of Two Tools: When Splunk met SecurityCenter

Co-Authors:  Keith Rhea and Alex Nanthavong It was the best of times, it was the worst of times, it was...

Hardware Vulnerability: Understanding Spectre, Meltdown and the Price of Unchecked Modernization

Firewalls, encryption, antivirus software, armed security guards, dual authentication and every other added security mechanism that exists to secure data,...

Inherent Risk Tiering for Third-Party Vendor Assessments

  Importance of Third-Party Risk Tiering It can be a challenging and overwhelming task to adequately manage the risk associated...

Stop by Booth 118 @ AWS re:Invent to Learn How We Can Secure Your Cloud

When Perception is Not Reality: Perspectives on State-Sponsored Hacking and Retaliation

NBC News recently reported that the CIA is poised to launch a retaliatory cyber-attack against Russian computer systems. This comes...

Hacking Hillary: Recent Breaches against Democratic Political Groups

A recent leak of thousands of Democratic National Committee emails cast a long shadow over the Democratic Convention in Philadelphia...

Privilege Escalation via Group Policy Preferences (GPP)

While Privilege Escalation via Group Policy Preferences (GPP) is not a new topic in the penetration testing world by any...

Stocking the Toolbox – Cloud Unpacked

Ah the cloud. A stellar piece of human ingenuity and design that allows us to access our data from anywhere...

Vulnerability Management White Paper

Recently, I was asked to put together a white paper describing some work we’ve done related to supporting a vulnerability...