Your industrial control equipment was too annoying to hack, but not any more
Posted on 2026-09-02by mattin Industry
Five years ago I had a moment where I was staring at my screen with only one thought in my mind: This is going to be super annoying.
Blog
DIY: Temporary Email Service
Posted on 2025-10-09by alexeiin Tools of the Trade
Every website requires you to register an account now, even when they don’t really need one. I mean, come on… Why do you need my email to deliver a pizza?
Continue reading
Cyber Security Basics for Business Leaders
Posted on 2025-01-08by nathanin Industry
Cyber Security is, without a doubt, the fastest growing concern of any business in the modern age. With major breaches reported daily, many of which cause significant impact to their customers. I’m often struck by how much opportunity there is to enhance executives’ understanding of the cyber threats their organisations face.
Continue reading
CRTM Course Review
Posted on 2024-12-07by nathanin Certifications
Recently a friend of mine and I decided to tackle Altered Security’s Certified Red Team Master (CRTM) and we found that it wasn’t what we expected at all.
Continue reading
Should you add a penetration tester to your allowlist?
Posted on 2024-08-30by davidin Industry
I have seen this topic frequently over the years with many clients asking: “which is the best approach?”. I have compiled as much information as possible for businesses to make the most informed decision.
Continue reading
Securing the laptops that schools give to children
Posted on 2024-05-27by mattin Business Security
This week Alexei and I will be presenting at the AISNSW ICT Management and Leadership Conference. Alexei is giving workshops on physical security and going from on-prem active directory to cloud based Microsoft 365. I’ll be presenting on Essential 8 for schools, why they might use it and what it’s trying to protect.
Continue reading
We got phished! (but it was just a test)
Posted on 2024-05-17by alexeiin Volkis News
Over the last couple of weeks, we had a fellow security consultancy perform a penetration test on us! That’s right, even though we can do it ourselves, it’s always best to get someone independent to look at your security. We believe in following our own recommendations, so here we are. What did we learn?
Continue reading
What do you really need to authenticate?
Posted on 2024-04-30by mattin Business Security
I was working on a penetration test for a gym company a while ago and found a vulnerability. When looking at the profile I found you could change the number in the URL and view other profiles. “Unfortunately” you couldn’t change the other user’s password, but wait! There’s a forgotten password function and I’m able to change the user’s email address! How about I just change the email address, submit the forgotten password page, and then…great I’ve got access to the account!
Continue reading
CARTP Course Review
Posted on 2023-11-30by nathanin Certifications
So, what does a certification addict do when he’s bored? He starts a new one!
Continue reading
Recent Posts
- Your industrial control equipment was too annoying to hack, but not any more
- DIY: Temporary Email Service
- Cyber Security Basics for Business Leaders
- CRTM Course Review
- Should you add a penetration tester to your allowlist?
- HTB CBBH Course Review
- Securing the laptops that schools give to children
- We got phished! (but it was just a test)
- What do you really need to authenticate?
- CARTP Course Review