News
28 October 2026
Red Teaming vs. Penetration Testing: Key Differences and Benefits
What's the difference between penetration testing and red teaming? Learn what each approach reveals, their key benefits, and when combining them can strengthen your organisation's cybersecurity.
27 October 2026
Social Engineering and Vishing: Why Are Attacks on People Still So Successful?
Even if your spam filter caught 100% of phishing emails, attackers could still get their hands on your data. All it takes is one phone call using a cloned version of your colleague's or manager's voice.
23 October 2026
You've Updated PHP. But Is Your Website Really Secure?
Security patches for two critical PHP vulnerabilities are now available. But installing them doesn't necessarily mean the problem is over. Here's what your business should check after updating PHP, and when a more thorough security assessment may be needed.
22 October 2026
PHP2Shell: Critical PHP Vulnerabilities Were Targeted Before Public Disclosure
Two critical PHP vulnerabilities put business applications and servers at risk. With attacks detected even before public disclosure, organizations must act quickly to patch vulnerable systems and investigate potential compromise.
22 October 2026
TECHBOARD #3: Ransomware Disrupts Japanese Cloud Provider, Attackers Breach Ivanti VPN Without Authentication
A ransomware attack on a Japanese cloud provider raises concerns about data recovery. TECHBOARD #3 also covers Ivanti zero-days, data breaches in the Czech Republic and Denmark, and prompt injection in HTTP headers.
21 October 2026
Red Teaming in Practice: How We Infiltrated an Organization Through Email and a Back Door
We sent employees an email impersonating their own CISO. Then, after business hours, we entered through a back door and connected to the internal network. This is the anatomy of one of our real-world Red Teaming engagements.