The Exploit

Notes from the Front Lines of Penetration Testing

Category: Security Recommendations

Get actionable cybersecurity advice from Raxis experts. Explore best practices, tips, and recommendations to strengthen your organization’s security.
  • Copilot Coming Soon to a Desktop Near You
    Microsoft Copilot Coming Soon to a Desktop Near You

    By

    Jason Taylor
    With Microsoft automatically installing Copilot on Windows systems with Microsoft 365 desktop apps installed, organizations will want to set up AI policies.
    Read More
  • Lateral Movement: From Beachhead to Breach
    Lateral Movement: From Beachhead to Breach

    By

    Nate Jernigan
    Raxis Senior Penetration Tester Nate Jernigan discusses lateral movement in penetration testing and the methods and tools he uses when performing these attacks.
    Read More
  • Lessons from the DaVita Healthcare Ransomware Attack
    Lessons from the DaVita Healthcare Ransomware Attack

    By

    Brian Tant
    The DaVita ransomware attack is one of the most impactful recent healthcare breaches. Learn what happened and what could have been done to limit the impact.
    Read More
  • Dangers of Storing Sensitive Data in Web Storage: 5 Real Attack Scenarios
    Dangers of Storing Sensitive Data in Web Storage: 5 Real Attack Scenarios

    By

    Ryan Chaplin
    Lead Penetration Tester Ryan Chaplin walks us through 5 real-world attack scenarios used in real-world penetration tests by Raxis.
    Read More
  • Choosing a Penetration Testing Company: Part 3
    Choosing a Penetration Testing Company: Part 3

    By

    Caroline Kelly
    Caroline Kelly concludes our three-part “Choosing a Penetration Testing Company” series with how Penetration Testing as a Service (PTaaS) provides great value.
    Read More
  • Microsoft Releases Security Patch for Actively Exploited On-Premises SharePoint Vulnerabilities
    Microsoft Releases Security Patch for Actively Exploited On-Premises SharePoint Vulnerabilities

    By

    Jason Taylor
    Microsoft has released patches for two critical vulnerabilities allowing unauthenticated remote code execution that affect on-premises SharePoint installations.
    Read More
  • Choosing a Penetration Testing Company: Part 2
    Choosing a Penetration Testing Company: Part 2

    By

    Brad Herring
    Brad Herring continues our three-part “Choosing a Penetration Testing Company” series with a look at the factors to consider when choosing the best vendor.
    Read More
  • Cisco Releases Patch for CVE-2025-20188 - 10.0 CVSS
    Cisco Releases Patch for CVE-2025-20188 – 10.0 CVSS

    By

    Scottie Cole
    Critical Alert – Patch Immediately. Cisco Releases Patch for CVE-2025-20188 – 10.0 CVSS. This vulnerability affects Cisco Catalyst 9800 wireless controllers.
    Read More
  • Choosing a Penetration Testing Company: Part 1
    Choosing a Penetration Testing Company: Part 1

    By

    Cole Stafford
    Cole Stafford starts our three-part “Choosing a Penetration Testing Company” series by looking at what penetration testing is and the types of penetration tests.
    Read More
  • Understanding PTaaS: Penetration Testing as a Service
    Understanding PTaaS: Penetration Testing as a Service

    By

    Bonnie Smyre
    What does Penetration Testing as a Service (PTaaS) really mean? In this blog we discuss the details and how do you find the best PTaaS for your organization.
    Read More
  • Cybersecurity: It’s how to say “Yes.”

    By

    Mark Puckett
    Contrary to common misconceptions, cybersecurity acts as a powerful enabler in the digital age, fostering innovation, driving business growth, and empowering organizations to harness technology’s full potential. By building trust, accelerating innovation, enabling emerging technologies, enhancing efficiency, ensuring compliance, supporting remote work, and protecting intellectual property, robust cybersecurity measures create a secure foundation for organizations to thrive and innovate in an increasingly interconnected world.
    Read More
  • Accepting Penetration Test Risks & How Compensating Controls Can Help
    Accepting Penetration Test Risks & How Compensating Controls Can Help

    By

    Tim Semchenko
    Tim Semchenko discusses documenting acceptance of risks and implementing compensating controls as options when pentest findings cannot be fixed immediately.
    Read More