Jason Taylor

Jason has a passion for asking “what-if” questions and for trying to “break” software and test how it responds to unintended uses. Jason has a background in System Administration and Security Engineering in the financial sector. He holds both defensive and offensive certifications including OSCP, PNPT, GCIH, CASP+, and is Splunk Certified. When he’s not spending his time taking new training courses, he loves spending time with his wife and kids and occasionally working on an IoT project to automate some aspect of their greenhouse or chicken coop.

Jason can be reached by contacting us.

Wireless Encryption: WPA3 and the Gotchas Every Company Should Know About

By Brian Tant

Posted in Penetration Testing, Security Recommendations, Wireless

Brian Tant takes a look at WPA3. While offering much deeper security than WPA2, it is still vulnerable to transition Mode and side-channel attacks.

AI-Augmented Series: LLM-Aided Enumeration for Dormant WordPress Account Discovery

By Ryan Chaplin

Posted in AI

Ryan Chaplin leads off our Augmented-AI series with a scenario from a recent pentest using AI to write a script to discover an account to gain system access.

The @ctrl/tinycolor NPM Attack: The Brutal Anatomy of a Cascading Supply Chain Breach

By Brian Tant

Posted in AI, In The News

Over 40 major packages were exploited in this malware campaign. Learn what happened and what your organization should do if you have been affected.

Why We Don’t Change Risk Ratings on Pentest Findings (Even When You Ask Nicely)

By Tim Semchenko

Posted in Penetration Testing, Security Recommendations

Raxis’ Tim Semchenko explains why we can’t lower risk ratings for your penetration test findings just because you ask and why that’s a good thing.

PSE & Red Team Series: Badge Cloning

By Nathan Anderson

Posted in How To, Red Team,

Lead Penetration Tester Nathan Anderson is back with more PSE and red team advice, this time looking into three tools he uses to clone badges and gain access.

Windows Kills Common Offline/Account-less Install Method

By Ryan Chaplin

Posted in In The News, Networks

Microsoft Windows recently announced the removal of local-only installs on Windows 11. Raxis’ Ryan Chaplin looks at concerns and possible options.

Salesforce Compromise: What You Need to Know

By Jason Taylor

Posted in Exploits, In The News, Phishing, Security Recommendations

The FBI has released information to help organizations that are affected by recent attacks against Salesforce. Raxis’ Jason Taylor sums up next steps here.

SpamGPT: Protecting Your Company From Large-Scale Phishing

By Nathan Anderson

Posted in In The News, Phishing,

SpamGPT, a complex phishing and social engineering suite has made the news recently. Learn what it is and how organizations can protect their employees.

Cool Tools Series: Kerbrute

By Andrew Trexler

Posted in Exploits, Networks, Penetration Testing, Red Team

Raxis Principal Penetration Tester Andrew Trexler walks through the many uses of Kerbrute from user enumeration to brute-forcing and password spraying.

Microsoft Copilot Coming Soon to a Desktop Near You

By Jason Taylor

Posted in In The News, Security Recommendations

With Microsoft automatically installing Copilot on Windows systems with Microsoft 365 desktop apps installed, organizations will want to set up AI policies.

Lateral Movement: From Beachhead to Breach

By Nate Jernigan

Posted in Exploits, How To, Networks, Penetration Testing, Security Recommendations

Raxis Senior Penetration Tester Nate Jernigan discusses lateral movement in penetration testing and the methods and tools he uses when performing these attacks.

Lessons from the DaVita Healthcare Ransomware Attack

By Brian Tant

Posted in In The News, Networks, Penetration Testing, Security Recommendations,

The DaVita ransomware attack is one of the most impactful recent healthcare breaches. Learn what happened and what could have been done to limit the impact.

Raxis Cybersecurity Insights From The Frontlines

Jason Taylor

Wireless Encryption: WPA3 and the Gotchas Every Company Should Know About

AI-Augmented Series: LLM-Aided Enumeration for Dormant WordPress Account Discovery

The @ctrl/tinycolor NPM Attack: The Brutal Anatomy of a Cascading Supply Chain Breach

Why We Don’t Change Risk Ratings on Pentest Findings (Even When You Ask Nicely)

Windows Kills Common Offline/Account-less Install Method

Salesforce Compromise: What You Need to Know

Cool Tools Series: Kerbrute

Microsoft Copilot Coming Soon to a Desktop Near You

Lateral Movement: From Beachhead to Breach

About Raxis

Resources