The Exploit

Notes from the Front Lines of Penetration Testing

Brian Tant

Brian brings to Raxis a rich and varied background in Information Technology spanning more than 20 years. Sought after by clients for his unique blend of business acumen and technical prowess, Brian has consistently delivered value to hundreds of organizations spanning the globe throughout his career. Brian is the Chief Penetration Testing Officer for Raxis and currently leads the Raxis Penetration Testing and Social Engineering team.

  • Raspberry Pi
    Raspberry Pi Planted in Failed ATM Heist

    By

    Brian Tant
    Raxis Chief Penetration Tester Brian Tant discusses the Raspberry Pi used in a recent ATM heist and how Raxis uses the same type of device in our pentesting.
    Read More
  • Raxis Team DefCon 2025
    Raxis at DefCon 2025

    By

    Brian Tant
    DefCon 33 has come and gone, and the Raxis team was there keeping up with cutting edge exploits for penetration tests, phishing, and PSE.
    Read More
  • Raxis Team at DefCon 32
    Tips to Stay Secure at DefCon 2024

    By

    Brian Tant
    The Raxis pentesting team is at DefCon in Vegas this weekend. It’s an awesome conference that has lessons and contests for everything from lock picking and car hacking to new network and application exploits that our team may try on your next penetration test. For those of you who may not have attended before (or […]
    Read More
  • Cyber Attack Disrupts Car Dealerships
    Ongoing Cyber Attack Disrupts Car Dealerships

    By

    Brian Tant
    Wednesday thousands of car dealerships across North America experienced a cyberattack resulting in widespread outages and significant operational degradation.
    Read More
  • Password Length: More than Just a Question of Compliance
    Password Length: More than Just a Question of Compliance

    By

    Brian Tant
    Password length requirements are a key part of password security, but, with PCI, NIST, OWASP, and CIS offering different recommendations, what length is best?
    Read More
  • Red Team vs Blue Team
    Red Teams, Blue Teams, and Purple Teams, Oh My!

    By

    Brian Tant
    Red Teams, Blue Teams, and Purple Teams are cybersecurity terms describing different approaches to testing & improving security measures within an organization.
    Read More
  • CIS vs. NIST
    CIS vs. NIST: Understanding Cybersecurity Standards and Frameworks

    By

    Brian Tant
    Raxis’ CTO Brian Tant discusses two important gap analysis tools security professionals use to assess cyber defenses: CIS 18 and NIST 800-53.
    Read More
  • Brian Tant
    Brian Tant, Chief Penetration Testing Officer

    By

    Brian Tant
    Brian Tant is Raxis’ Chief Technology Officer. Learn more about how he became a rock-star ethical hacker.
    Read More
  • .be .wa .re .sc .am .me .rs
    A High-Tech Take on an Old-Time Scam

    By

    Brian Tant
    Don’t fall prey to scammers trying to convince you that your domain name is about to be stolen by an overseas company.
    Read More
  • Hands holding mobile phone
    Why Companies Shouldn’t Overlook Mobile Application Testing

    By

    Brian Tant
    Penetration tests are as important for mobile applications as they are for their web app counterparts. Here’s why.
    Read More
  • Understanding Vulnerability Management
    Understanding Vulnerability Management

    By

    Brian Tant
    One of our most common findings in Raxis penetration tests is the lack of an effective vulnerability management system. Here’s why that’s important.
    Read More
  • Smart phone with security alert
    Imminent Threat for US Hospitals and Clinics, RYUK Ransomware Alert (AA20-302A) – Updated 11/2/2020

    By

    Brian Tant
    A new nationwide cyberattack appears to be targeted at U.S. based hospitals, clinics, and other health care facilities. Healthcare on heightened alert.
    Read More