Our free Surface Check has been run on 281 domains, and the encouraging headline is that most are in reasonable shape on the outside: a…

I used to think learning cybersecurity meant discovering more tools. Then I realized that knowing what to do with the output mattered far…

I thought I needed better hacking tools. What I actually needed was a better way to investigate what my tools were showing me.

This is the story of how a standard student account could reach into a virtual classroom and delete study materials that the teacher, not the student, had added.

Before your first customer trusts you with their data, make sure your authentication, permissions, infrastructure, and recovery plans can…

USB Investigation-lsblk

File uploads are one of the easiest ways to introduce dangerous content into a web application. Here is how to validate, isolate, and…

Your application can have secure authentication, carefully validated inputs, and well-written backend code, yet still expose users to…

A Python developer’s lesson in API testing, automation, and why passing tests can give you a dangerously false sense of security.

I used to treat security reconnaissance as a collection of commands. Then I started connecting the pieces with Python, and realized that…