Active Directory Certificate Services (ADCS) is used to manage certificates for systems, users, applications, and more in an enterprise environment. Misconfigurations in ADCS can introduce critical vulnerabilities into an enterprise Active Directory environment.

Apple is challenging a court order to allow external App Store payment links, citing a recent Supreme Court ruling to argue judicial overreach in its ongoing battle with Epic Games.

Imagine this: You’re an attacker ready to get their hands on valuable data that you can sell to afford going on a sweet vacation. You do your research, your recon, everything, ensuring that there’s no way this can go wrong. The day of the attack, you brew…

This article was written to provide readers with an overview of a selection of our pentest results from the last 15 months. This data was gathered toward the end of September 2025. Shockingly, the data does not differ much from our prior analyses conducted…

In the legal dispute between Epic and Google, U.S. judges have signaled a clear inclination to require Google to alter its existing Google Play Store bundled billing model. In essence, Google woul…

This is a cheat sheet for external penetration testing techniques used in TCM Security's PNPT (Practical Network Penetration Tester)…

During a penetration test against the INLANEFREIGHT organization, you encounter a non-domain joined Windows server host that suffers from…

Rapid7 Labs exposes how attackers are abusing Microsoft Teams external access and Dumpit memory scrapers to breach corporate networks. Protect your team!

Welcome to GoGatoZ — a purpose-built Go tool for GitLab CI/CD security auditing that can perform and automate the entire CI/CD kill chain along with everything those one-off scripts did and then some.

External Network Penetration Testing: Best Strategies and Techniques