Blog

This part of the series covers how to create an Angular application, deploy it using Docker, and how to set up ZAP so you can start testing the application inside the test environment.

This part of the topic covers how to setup your machine so you can start with the security testing tool- ZAP.

Who's responsible for ransomware? The Iranian government, in no small part. State-sponsored hackers suggest an alarming future for cybersecurity.

Quick and dirty intro to Windows API as part of the upcoming Red Team series.

Can CISA defeat the evils of political and infrastructural inertia to harden the USA's critical sectors against cyber attacks? We'll probably find out in 20 years.

Sopho Zoho, Zopho Sohos? Jokes aside, these vulnerabilities are a solid entry as we head into horror season.

Meta's Quarterly Adversarial Threat Report discusses the changes in the threat environment and its efforts to expand and cover new areas of the Trust & Safety program. In the report, Meta has shared its various security enforcements and notable investigations and trends to help inform its community's understanding of the evolving threat landscape. This piece discusses in detail the information covered in the report.

Our latest dashboard release includes a few enhancements for our asset visibility features

Once again, hackers breached Uber. It's not Uber's worst attack - but it's one of their most interesting, and the takeaways are important for all.

Windows enumeration - System, Users, Network. Basic commands, and some automated tools to help with the process.

Back-to-back kernel popping?! Vulnerabilities added from Obama’s first presidency? What gives?...

As Uber's former CISO goes on trial, the future of cybersecurity is at stake. Start tracking this trial because the outcome affects every single one of us.

Zatko's testimony paints a damning picture, but are lawmakers willing to step up and regulate?

Two zero-days, both giving system/kernel level privileges...is someone tricking me? Sec teams: this one's important.

This article covers the basics of one of the OWASP Top 10 vulnerabilities from the latest list (2021) - Cryptographic failures.