5 min read
AI Changed the Rules: The Threats You Need to Model in 2026
Data poisoning, adversarial input, prompt injection, and model extraction. The five AI threats worth modeling once AI is embedded in how the business runs.
Read the post →Blog — page 4
Research and analysis
The latest security treads, threat analysis, testing methodology, and more — from the people doing the work.
116 posts
- 3 min read
External Penetration Testing in 2026: Why Proactive Security Matters More Than Ever
External assets stay the most attacked entry point into any organization. What external testing looks like in 2026, and how we approach the engagement.
Read the post → - 1 min read
OWASP Top Ten 2025
The 2025 edition of the OWASP Top Ten is out. What moved, what is new, what it says about where web application risk is actually concentrating now.
Read the post → - 2 min read
Why LinkedIn Is the New Phishing Hotspot — And What Your Organization Should Do About It
One in three phishing attempts now happens outside email, and LinkedIn is where your staff are easiest to reach. What that changes about your defenses.
Read the post → - 2 min read
Why Penetration Testing Is No Longer Optional: Lessons from the SharePoint Breach
A critical SharePoint flaw let attackers run code with no password at all. What the breach revealed about relying on vendor patches and nothing else.
Read the post → - 3 min read
The Future of Penetration Testing: How AI and Continuous Validation Are Redefining Security in 2025
Testing is moving from annual audit to continuous validation, and AI is accelerating both attack and defense. What that shift means for security leaders.
Read the post → - 3 min read
API Security: Best Practices for Protecting Your Application Interfaces
APIs carry the traffic and often none of the scrutiny. The vulnerabilities that recur, and the authentication, validation, and rate limiting that stop them.
Read the post → - 2 min read
The Role of Continuous Penetration Testing in Modern Cybersecurity Strategies
An annual test is a snapshot of an environment that changes daily. What continuous penetration testing involves, and how to judge whether you need it.
Read the post → - 3 min read
Red Teaming vs. Penetration Testing: Understanding the Differences
A penetration test asks what is vulnerable. A red team asks whether a determined adversary gets caught. Which question you are ready to have answered.
Read the post → - 3 min read
Network Penetration Testing: Strengthening Your Organization’s Defenses
What a network penetration test involves, stage by stage: scoping, enumeration, exploitation, privilege escalation, and the lateral movement that follows.
Read the post →