The Exploit

Notes from the Front Lines of Penetration Testing

Category: Security Recommendations

Get actionable cybersecurity advice from Raxis experts. Explore best practices, tips, and recommendations to strengthen your organization’s security.
  • Dangers of Storing Sensitive Data in Web Storage: 5 Real Attack Scenarios
    Dangers of Storing Sensitive Data in Web Storage: 5 Real Attack Scenarios

    By

    Ryan Chaplin
    Lead Penetration Tester Ryan Chaplin walks us through 5 real-world attack scenarios used in real-world penetration tests by Raxis.
    Read More
  • Choosing a Penetration Testing Company: Part 3
    Choosing a Penetration Testing Company: Part 3

    By

    Caroline Kelly
    Caroline Kelly concludes our three-part “Choosing a Penetration Testing Company” series with how Penetration Testing as a Service (PTaaS) provides great value.
    Read More
  • Microsoft Releases Security Patch for Actively Exploited On-Premises SharePoint Vulnerabilities
    Microsoft Releases Security Patch for Actively Exploited On-Premises SharePoint Vulnerabilities

    By

    Jason Taylor
    Microsoft has released patches for two critical vulnerabilities allowing unauthenticated remote code execution that affect on-premises SharePoint installations.
    Read More
  • Choosing a Penetration Testing Company: Part 2
    Choosing a Penetration Testing Company: Part 2

    By

    Brad Herring
    Brad Herring continues our three-part “Choosing a Penetration Testing Company” series with a look at the factors to consider when choosing the best vendor.
    Read More
  • Cisco Releases Patch for CVE-2025-20188 - 10.0 CVSS
    Cisco Releases Patch for CVE-2025-20188 – 10.0 CVSS

    By

    Scottie Cole
    Critical Alert – Patch Immediately. Cisco Releases Patch for CVE-2025-20188 – 10.0 CVSS. This vulnerability affects Cisco Catalyst 9800 wireless controllers.
    Read More
  • Choosing a Penetration Testing Company: Part 1
    Choosing a Penetration Testing Company: Part 1

    By

    Cole Stafford
    Cole Stafford starts our three-part “Choosing a Penetration Testing Company” series by looking at what penetration testing is and the types of penetration tests.
    Read More
  • Understanding PTaaS: Penetration Testing as a Service
    Understanding PTaaS: Penetration Testing as a Service

    By

    Bonnie Smyre
    What does Penetration Testing as a Service (PTaaS) really mean? In this blog we discuss the details and how do you find the best PTaaS for your organization.
    Read More
  • Cybersecurity: It’s how to say “Yes.”

    By

    Mark Puckett
    Contrary to common misconceptions, cybersecurity acts as a powerful enabler in the digital age, fostering innovation, driving business growth, and empowering organizations to harness technology’s full potential. By building trust, accelerating innovation, enabling emerging technologies, enhancing efficiency, ensuring compliance, supporting remote work, and protecting intellectual property, robust cybersecurity measures create a secure foundation for organizations to thrive and innovate in an increasingly interconnected world.
    Read More
  • Accepting Penetration Test Risks & How Compensating Controls Can Help
    Accepting Penetration Test Risks & How Compensating Controls Can Help

    By

    Tim Semchenko
    Tim Semchenko discusses documenting acceptance of risks and implementing compensating controls as options when pentest findings cannot be fixed immediately.
    Read More
  • Why Raxis Attack is a Huge Win for Organizations
    Why Raxis Attack PTaaS is a Huge Win for Organizations

    By

    Caroline Kelly
    With the recent launch of Raxis Attack, a powerful PTaaS service, Caroline Kelly is excited to share how it can help organizations of all sizes stay secure.
    Read More
  • The CrowdStrike Outage: Lessons Learned
    The CrowdStrike Outage: Lessons Learned

    By

    Scottie Cole
    Just a few days ago the world felt the rippling effects of a third-party push to networks across the globe. What would have normally been a routine undertaking instead caused mass disruption of information systems and brought businesses of all sizes to a standstill. Almost everyone was impacted by this incident in one way or […]
    Read More
  • Cyber Attack Disrupts Car Dealerships
    Ongoing Cyber Attack Disrupts Car Dealerships

    By

    Brian Tant
    Wednesday thousands of car dealerships across North America experienced a cyberattack resulting in widespread outages and significant operational degradation.
    Read More