A High-Tech Take on an Old-Time Scam
Don’t fall prey to scammers trying to convince you that your domain name is about to be stolen by an overseas company.
-
-
SonicWall Patches Three Zero-Day Vulnerabilities
Cybersecurity company SonicWall has released patches for three zero-day vulnerabilities that are currently being exploited.
-
NSA, FBI, CISA Statement on Russian SVR Activity
The US government is warning businesses to beware of vulnerabilities being exploited by the Russian Foreign Intelligence Service (SVR RF). But that’s not the only group taking advantage. Here’s what you should do.
-
Remediating Account Enumeration Vulnerabilities From Your Penetration Test
Account enumeration reveals whether usernames are valid for use in other attacks. Lead Penetration Tester Matt Dunn explains how it works and how to prevent it.
-
Three Questions to Ask Before Connecting a Device to the Internet
Should you connect your latest device to the Internet? Lead Penetration Tester Scottie Cole recommends asking yourself some questions before you do.
-
Why Companies Shouldn’t Overlook Mobile Application Testing
Penetration tests are as important for mobile applications as they are for their web app counterparts. Here’s why.
-
How to Pull Off a Mousejacking Attack
Raxis’ penetration testing team demonstrates how to conduct a mousejacking attack to gain access as part of a penetration test.
-
Sudo Privilege Escalation Vulnerability Discovered
Qualys has discovered and reported a serious vulnerability (CVE-2021-3156) affecting the sudo utility. Patches are now available and Raxis recommends applying them immediately.
-
Cisco Patches Critical Security Vulnerabilities
Cisco releases patches for some critical and high-severity vulnerabilities. Learn about the vulnerabilities and patches from the Raxis penetration testing team.
-
Understanding Vulnerability Management
One of our most common findings in Raxis penetration tests is the lack of an effective vulnerability management system. Here’s why that’s important.
-
The Most Important Cybersecurity Lessons of 2020
This past year was one to remember. Here are a couple of cybersecurity lessons we should take away from 2020.
-
SolarWinds Supply Chain Attack – Updated 12/18/2020
The Raxis penetration testing team provides details on the SolarWinds supply chain attack and what you can do to secure your organization.
