2021 OWASP Top 10
OWASP Top 10: Broken Access Control

In this blog post, Raxis lead penetration tester Mark Fabian discusses broken access control and[…]

Scottie Cole
Meet the Team: Scottie Cole, Lead Penetration Tester

From first responder to penetration tester, Scottie Cole knows how to work under pressure. Learn[…]

2021 OWASP Top 10
2021 OWASP Top 10 Focus: Injection Attacks

The latest draft of the OWASP Top 10 has been released. Though injection is now[…]

Nagios XI Stored Cross-Site Scripting (XSS): CVE-2021-38156
Nagios XI Stored Cross-Site Scripting (XSS): CVE-2021-38156

Nagios is open-source network and system monitoring software. Raxis’ Matt Dunn has discovered a cross-site[…]

Cookie Jar
Keep Your Cookies in the Cookie Jar: HttpOnly and Secure Flags

How can cookies be used against you? And how do you keep that from happening?[…]

Scottie in 2004 on Navarre Beach in the wake of the Hurricane Ivan
Hurricane Ida: Limiting the Damage

Lead penetration tester Scottie Cole is a Gulf Coast resident and former first responder. Read[…]

Adam Fernandez
Meet the Team: Adam Fernandez, Lead Developer

Adam Fernandez has been a Raxis team member since 2017, an inventor since high school,[…]

PRTG Network Monitor Stored Cross-Site Scripting Vulnerability (CVE-2021-29643)
PRTG Network Monitor Stored Cross-Site Scripting Vulnerability (CVE-2021-29643)

Raxis lead penetration tester Matt Dunn uncovers a new vulnerability in the PRTG Network Monitor[…]

Tim singing karoke
Meet the Team: Tim Semchenko, Senior Manager, Operations and Customer Delivery

Tim Semchenko’s diverse career brought him to Raxis where he now serves as senior manager[…]

Matt Dunn Mathur
Meet the Team: Matt Mathur, Lead Penetration Tester

Meet Raxis lead penetration tester Matt Mathur, a cybersecurity professional with a passion for learning[…]

Screaming person with smartphone
Don’t Take the Smishbait

Unwanted text messages are annoying, but some also hide malicious links. Here are some ways[…]

Passwords on Post-It notes
12 New Cyber Terms the World Needs Now

The cybersecurity profession has its own lingo. As experts in the field, the Raxis team[…]