New Metasploit Module: Microsoft Remote Desktop Web Access Authentication Timing Attack
Raxis team member Matt Dunn has uncovered a vulnerability in Microsoft’s Remote Desktop Web Access application (RD Web Access). Learn more in this blog article.
Penetration Testing Blog
Offensive security, written by the professionals who live it.
What’s it Like to Work at Raxis?
Find out what it’s like to work as part of the Raxis team of elite penetration testers. This is Part One of our video series.
Why Companies Shouldn’t Overlook Mobile Application Testing
Penetration tests are as important for mobile applications as they are for their web app counterparts. Here’s why.
How to Pull Off a Mousejacking Attack
Raxis’ penetration testing team demonstrates how to conduct a mousejacking attack to gain access as part of a penetration test.
Sudo Privilege Escalation Vulnerability Discovered
Qualys has discovered and reported a serious vulnerability (CVE-2021-3156) affecting the sudo utility. Patches are now available and Raxis recommends applying them immediately.
Cisco Patches Critical Security Vulnerabilities
Cisco releases patches for some critical and high-severity vulnerabilities. Learn about the vulnerabilities and patches from the Raxis penetration testing team.
Bonnie Shares Words of Working Wisdom with Westminster Students
Recently, Raxis’ Bonnie Smyre did a video interview for Atlanta’s Westminster Schools as part of their Conversations Around Race and Equality (CARE) Initiative.
Understanding Vulnerability Management
One of our most common findings in Raxis penetration tests is the lack of an effective vulnerability management system. Here’s why that’s important.
The Most Important Cybersecurity Lessons of 2020
This past year was one to remember. Here are a couple of cybersecurity lessons we should take away from 2020.
Exploring Attack Security: Insights from Raxis Experts
In this episode of Confident Defense podcast, Conor Sherman engages in an enlightening conversation with Raxis’ Brian Tant & Brad Herring on Attack Security.
SolarWinds Supply Chain Attack – Updated 12/18/2020
The Raxis penetration testing team provides details on the SolarWinds supply chain attack and what you can do to secure your organization.
So, I Hacked a Tesla . . .
Tesla is leading the way in electric vehicle adoption. But the company has a few more miles to go with its cybersecurity safeguards.
297 posts, newest first.