Industry standard penetration testing and the false sense of security.
Our clients often hire us to as a part of their process for acquiring other businesses. We’ve played a quiet role in the background of some of the largest acquisitions to hit the news and some of the...
View ArticleThe reality behind hospital and medical device security.
We recently presented at the DeviceTalks conference in Boston Ma about the vulnerabilities that affect hospitals and medical devices (insulin pumps, pacemakers, etc.). The goal of our presentation...
View ArticleGizmodo interview with Netragard – “Snake Oil Salesmen Plague the Security...
https://gizmodo.com/snake-oil-salesmen-plague-the-security-industry-but-no-1822590687 Adriel Desautels was suddenly in a serious mess, and it was entirely his fault. Sitting in his college dorm room...
View ArticleRetro: FACEBOOK – Anti-Social Networking (2008).
This is a retro post about a penetration test that we delivered to a client back in 2008. During the test we leveraged personal data found on Facebook to construct and execute a surgical attack...
View ArticleWe protect voters from people like us.
Dear Kris Kobach, We recently read an article published by Gizmodo about the security of the network that will be hosting Cross Check. In that article we noticed that you said “They didn’t succeed in...
View ArticleWhat hackers know about vulnerability disclosures and what this means to you
Before we begin, let us preface this by saying that this is not an opinion piece. This article is the product of our own experience combined with breach related data from various sources collected...
View ArticleWhat Thieves Know About Anti-Phishing Solutions & What This Means To You
Without taking proper precautions, your computer is a veritable smörgåsbord for hackers. Hackers have developed an array of techniques to infiltrate your system, extract your data, install self-serving...
View ArticleWhat they are not telling you about the CIA leaks.
The CIA leaks are making huge waves across the world. In a nutshell, the documents claim to reveal some of the hacking capabilities that the CIA has. Many privacy advocates believe that exposure of...
View ArticleHacking casinos with zeroday exploits for fun and profit
Most popular email programs like Microsoft Outlook, Apple Mail, Thunderbird, etc. have a convenient feature that enables them to remember the email addresses of people that have been emailed. Without...
View ArticleEXPOSED: How These Scammers Tried To Use LinkedIn To Steal Our Client’s...
Earlier this morning one of our more savvy customers received an email from noreply@linkedin.com. The email contained a “New Message Received” notification allegedly sourced from CEO Tom Morgan....
View ArticleHow we tricked your HR lady into giving us access to every customers credit...
We recently completed the delivery of a Realistic Threat PCI focused Penetration Test for a large retail company. As is always the case, we don’t share customer identifiable information, so specific...
View Article