Raxis Blog Categories

As a leading penetration testing company, Raxis delivers expert-led, authorized cyberattacks.

Raxis Blog Posts by Category

Security Recommendations

Don’t Take the Smishbait

Unwanted text messages are annoying, but some also hide malicious links. Here are some ways to avoid being “smished.”

Read More
ManageEngine Applications Manager Stored Cross-Site Scripting Vulnerability (CVE-2021-31813)

Raxis’ Matt Dunn has discovered another ManangeEngine cross-site scripting (XSS) vulnerability, this time in the Applications Manager product (CVE-2021-31813).

Read More
Why Mutual Assured Destruction is an Incomplete Cyber Defense Strategy

Is the threat of full-scale retaliation enough to prevent large-scale cyberattacks? Raxis’ Bonnie Smyre explains why this Cold War strategy is not effective.

Read More
A High-Tech Take on an Old-Time Scam

Don’t fall prey to scammers trying to convince you that your domain name is about to be stolen by an overseas company.

Read More
SonicWall Patches Three Zero-Day Vulnerabilities

Cybersecurity company SonicWall has released patches for three zero-day vulnerabilities that are currently being exploited.

Read More
NSA, FBI, CISA Statement on Russian SVR Activity

The US government is warning businesses to beware of vulnerabilities being exploited by the Russian Foreign Intelligence Service (SVR RF). But that’s not the only group taking advantage. Here’s what you should do.

Read More
Remediating Account Enumeration Vulnerabilities From Your Penetration Test

Account enumeration reveals whether usernames are valid for use in other attacks. Lead Penetration Tester Matt Dunn explains how it works and how to prevent it.

Read More
Three Questions to Ask Before Connecting a Device to the Internet

Should you connect your latest device to the Internet? Lead Penetration Tester Scottie Cole recommends asking yourself some questions before you do.

Read More
Why Companies Shouldn’t Overlook Mobile Application Testing

Penetration tests are as important for mobile applications as they are for their web app counterparts. Here’s why.

Read More
How to Pull Off a Mousejacking Attack

Raxis’ penetration testing team demonstrates how to conduct a mousejacking attack to gain access as part of a penetration test.

Read More
Sudo Privilege Escalation Vulnerability Discovered

Qualys has discovered and reported a serious vulnerability (CVE-2021-3156) affecting the sudo utility. Patches are now available and Raxis recommends applying them immediately.

Read More
Cisco Patches Critical Security Vulnerabilities

Cisco releases patches for some critical and high-severity vulnerabilities. Learn about the vulnerabilities and patches from the Raxis penetration testing team.

Read More