In the ever-evolving world of cybersecurity, staying ahead requires a solid foundation in skills that can uncover hidden information…

In my journey through the world of cybersecurity, one of the most perplexing challenges I faced wasn’t a sophisticated malware strain or an…

Continuous Integration and Continuous Deployment (CI/CD) pipelines have become an indispensable part of the software delivery process…

Cyber threats are constantly evolving, making it harder for businesses to stay secure. Traditional security measures, like annual…

Embrace Zero Trust: Learn why “never trust, always verify” is the cybersecurity philosophy every user and business must adopt.

Argo CD, the widely adopted GitOps continuous delivery tool for Kubernetes, has issued a high-severity security advisory addressing a critical cross-site scripting (XSS) vulnerability. This vulner…

“Installing Go on Linux? Oh, it’s not like we have anything better to do than downloading, extracting, and configuring environment…

StepSecurity's "Harden-Runner" is a CI/CD security agent functioning as an EDR for runners, preventing exfiltration, detecting tampering, and securing over a million workflow runs weekly.

Hi there! My name is Lauren, and I’m currently a program manager at Accenture in the content management and platforms implementation space…

How much secure are the CI/CD pipelines that deliver your software? What happens when these tools designed to speed up development becomes…

Starting a career in cybersecurity is an exciting journey. You’re stepping into a dynamic field that’s all about problem-solving and…

From Theory to Contract: Why Your Pentest Needs More Than Just Technical Skills

In today’s digital age, every organisation maintains multiple web environments — development, testing, staging, and production. While all…

Turning Security Posture Into a Living, Breathing Capability Traditional security models struggle to keep up with dynamic infrastructure and rapid releases. By adopting Continuous Security …

ANTISOC uses a mix of techniques from traditional penetration tests like red teams, cloud, web applications, externals, internals, and, of course, social engineering. We combine this mix of techniques with a wide-open scope, with the goal of going beyond…

A walkthrough of how four “small” vulnerabilities chained together to hand me a shell on a production-grade web app

In this era of rapidly changing digital ecosystem, cyber attacks move faster compared to the ability of security solutions to keep up…

How to turn a working exploit into a repeatable GitHub Actions test with h5i

If your last penetration test report is more than a few months old, how confident are you that it still reflects your actual attack…