pentesting
Integrating Penetration Testing as a Service (PTaaS) with CI/CD Pipelines: A Practical Guide
Imagine this: you’re all set to launch a new software update, and then—bam!—you find out there’s a security flaw that could put your entire customer base at risk. It’s a... The post ...
How PTaaS Supports Shift-Left Security Practices?
Security and development teams often face a tough challenge: delivering a secure, quality product quickly without bogging down the pipeline. Security testing is traditionally squeezed in late, sometimes even right... The post ...
PTaaS vs. Bug Bounty Programs: Complementary or Competing Approaches?
Introduction Imagine you’re the CISO of a rapidly growing tech company. Your infrastructure is expanding daily, and with each new line of code, the potential attack surface grows. How do... The post ...
Decoding the Pentesting Process: A Step-by-Step Guide
In this cyber world, data protection is a main goal for every organization. In India, corporations spend an average of $2.8 million annually on cyber security. According to the ETCISO... The post ...
What are the actual benefits of pentesting? Insights from Harsh Modi
This blog is based on our conversation with Harsh Modi, Senior Security Engineer at Bell. It explores what are the benefits of pentesting, and its real-world implications ...
How Much Does Penetration Testing Cost?
Curious about how much penetration testing costs? You understand its importance, but budgeting for different pentests can be a challenge. This blog post will guide you through the intricacies of... The post ...
Fly Phishing
PHISHING SCHOOLHow to Bypass SPAM FiltersIf you have ever written the word “click” in a phishing email, then trust me; You need my help.Be honest with me.Have you ever written the word “click”, or “upgrade”, ...
One Phish Two Phish, Red Teams Spew Phish
PHISHING SCHOOLHow to Give your Phishing Domains a Reputation Boost“Armed with the foreknowledge of my own death, I knew the giant couldn’t kill me. All the same, I preferred to keep my ...
Plenty of Phish in the Sea
Phishing SchoolHow to Find the Right Phishing TargetsA weapon is useless unless you have something to aim it at. When we weaponize social engineering, our targets are the humans who have the ability ...
SCCM Exploitation: Compromising Network Access Accounts
Authors: Marshall Price and Connor Dowling TL;DR: SCCM Network Access Accounts (NAA) are frequently used despite being associated with several […] ...
