Raxis Blog Categories

As a leading penetration testing company, Raxis delivers expert-led, authorized cyberattacks.

Raxis Blog Posts by Category

Security Recommendations

  • SOC 2 Compliance
    SOC 2 Compliance: Is it Right for Your Organization?
    SOC 2 is a compliance and privacy standard that outlines how to manage customer data & related systems to ensure confidentiality, integrity, and availability.
    Read More
  • Raxis Achieves SOC 2 Type 2 Compliance
    Raxis Achieves SOC 2 Type 2 Compliance
    We are thrilled to announce that Raxis has successfully achieved SOC 2 Type 2 compliance, providing assurance to our clients that their data is handled securely
    Read More
  • You See a Wireless Mouse. We see an easy way in.
    What to Expect with a Raxis Wireless Penetration Test
    Wireless attacks are typically low-risk, high-reward opportunities that don’t often require direct interaction. See more about a wireless penetration test.
    Read More
  • Simultaneous Sessions
    Why We Take Simultaneous Sessions Seriously on Penetration Tests
    Raxis Lead Penetration Tester Matt Dunn explains why you simultaneous sessions is a significant finding on a penetration test.
    Read More
  • CIS vs. NIST
    CIS vs. NIST: Understanding Cybersecurity Standards and Frameworks
    Raxis’ CTO Brian Tant discusses two important gap analysis tools security professionals use to assess cyber defenses: CIS 18 and NIST 800-53.
    Read More
  • Why they're not the same: Vulnerability Scans and Pentests
    Chained Attacks and How a Scan Can Leave You Vulnerable
    Vulnerability scans are useful tools for protecting your network. Find out why you shouldn’t rely on them exclusively.
    Read More
  • Metasploit Module: Azure AD Login Scanner
    New Metasploit Module for Penetration Testing: Azure AD Login Scanner
    Raxis’ Matt Dunn has published another Metasploit module, this one describing a vulnerability in Azure’s Active Directory Seamless Single Sign-on. Learn more here.
    Read More
  • Introduction to Cross-Site Scripting
    Introduction to Cross-Site Scripting
    This video covers the basics of cross-site scripting, including reflected, stored, and DOM-based XSS as well as remediation to protect against these attacks.
    Read More
  • Nagios XI Stored Cross-Site Scripting (XSS): CVE-2021-38156
    Nagios XI Stored Cross-Site Scripting (XSS): CVE-2021-38156
    Nagios is open-source network and system monitoring software. Raxis’ Matt Dunn has discovered a cross-site scripting vulnerability that could leave users open to attack.
    Read More
  • Cookie Jar
    Keep Your Cookies in the Cookie Jar: HttpOnly and Secure Flags
    How can cookies be used against you? And how do you keep that from happening? Raxis’ Matt Dunn explains.
    Read More
  • Scottie in 2004 on Navarre Beach in the wake of the Hurricane Ivan
    Hurricane Ida: Limiting the Damage
    Lead penetration tester Scottie Cole is a Gulf Coast resident and former first responder. Read his tips for avoiding hackers and scams that can be as costly as a natural disaster.
    Read More
  • PRTG Network Monitor Stored Cross-Site Scripting Vulnerability (CVE-2021-29643)
    PRTG Network Monitor Stored Cross-Site Scripting Vulnerability (CVE-2021-29643)
    Raxis lead penetration tester Matt Dunn uncovers a new vulnerability in the PRTG Network Monitor (CVE-2021-29643). Read more here.
    Read More

Categories