Introduction

One map, two cost functions

Attack Surface Management is the discipline of seeing your company the way the internet already sees it — and closing the gap before…

How adversaries map your organization before you know they’re watching — and how defenders can flip the script

The Boredom of a 15-Year-Old in a Digital Desert:

Part 2 of the Active Directory Home Lab Series (https://medium.com/@keskarshrishailya/active-directory-home-lab-setup-4b6acb321035)

The tiny image beside a browser tab reveals surprisingly profound server details. A resourceful security expert engineered a brilliant artificial intelligence framework. This system scrutinized mi…

The Origin Energy Data Breach: The Warning That Was Ignored Until 900,000 Customers Paid the Price

In 2017, Equifax lost the personal data of 147 million people. In 2008, Heartland Payment Systems leaked over 130 million card numbers…

Infrastructure ACLs only work if you know every listener an appliance exposes. Six steps to enumerate API surfaces, map their…

In cybersecurity, you can’t protect what you don’t know exists. In many organizations, there is a gap between the assets the security team…

Surface Reduction

TL;DR

API discovery is the practice of finding every endpoint that answers requests in your estate, whether or not anyone documented it…

Hi everyone, i just attended my first attack/defense Hackathon https://ctftime.org/event/3352 . it was a great experience, i got to meet a…

What modern penetration testing actually starts with

The recent cyber attack on ASOS has dominated headlines, and for good reason. With the BBC reporting a customer base of roughly 17 million…

What a reconnaissance session taught me about OSINT, active recon, and the defender’s responsibility to control exposure.

A supermarket can keep its payment systems running, its website online, and its customer records intact while suffering a serious…

Why understanding exposure requires more than periodic scans — and why discovery without reconciliation is only half the story.