28 October 2026

Red Teaming vs. Penetration Testing: Key Differences and Benefits

What's the difference between penetration testing and red teaming? Learn what each approach reveals, their key benefits, and when combining them can strengthen your organisation's cybersecurity.

23 October 2026

You've Updated PHP. But Is Your Website Really Secure?

Security patches for two critical PHP vulnerabilities are now available. But installing them doesn't necessarily mean the problem is over. Here's what your business should check after updating PHP, and when a more thorough security assessment may be needed.

22 October 2026

PHP2Shell: Critical PHP Vulnerabilities Were Targeted Before Public Disclosure

Two critical PHP vulnerabilities put business applications and servers at risk. With attacks detected even before public disclosure, organizations must act quickly to patch vulnerable systems and investigate potential compromise.

8 October 2026

Mobile Application Penetration Testing: Client-Side Risks Continue to Grow

The application your customers install on their phones is part of your attack surface – one you cannot see. We will show three ways it can be used to gain access to an account, none of which requires compromising your backend.

28 September 2026

The Most Common Web Application and API Vulnerabilities Found During Penetration Testing

The most common critical vulnerability in web applications has remained unchanged for years. We find it in every third test, and no firewall can stop it because the attacker uses exactly what the application is permitted to do.

23 September 2026

Cloud Penetration Testing: The Environment with the Most Vulnerabilities per Project

Cloud projects have the highest vulnerability density of everything we test, averaging 10.5 vulnerabilities per project. Yet the cloud provider is almost never at fault.