Blog
Insights From Cybersecurity Experts
Beyond the Checkboxes: Increasing Value & Reducing Risk
Part 2: Why Continuous Penetration Testing is a “No-Brainer” Investment Ever wondered whether you’re getting everything you can from your penetration testing program, you’re not alone....
Beyond the Checkboxes: How Continuous Testing Reveals What Others Miss
How continuous penetration testing reveals vulnerabilities that others miss through expert penetration testers, mature processes, a robust platform, and long-term partnership: continuous penetration testing reveals vulnerabilities that others miss.
Does this SOC fit?
A look into what the SOC process was designed for and how to determine if it is something you need.
Beyond the Slide Deck: Modern Tabletop Exercises That Prepare You for the Real Thing
For years, tabletop exercises (TTXs) have been a go-to method for testing an organization’s cybersecurity response plan. But as cyber threats evolve and real-world attacks grow more complex, so too...
The #1 Defense Against Business Disruption & Financial Loss from Cyber Threats
Your organization has invested millions in cybersecurity tools. You've deployed next-generation firewalls, implemented endpoint protection, and built a Security...
How CASM® Works: Part 1 – Asset Discovery with ML
A semi-technical look at how CASM, the platform powering Continuous Penetration Testing, uses machine learning to discover attack surface assets.
IT Infrastructure Modernization: Hidden Costs and Strategic Risks
Legacy IT infrastructure represents one of the most significant yet understated risks to modern business operations. While these aging systems continue functioning day-to-day, they're silently...
Revealing Hidden Password Vulnerabilities with Substring Analysis
In the rapidly changing world of cybersecurity, one truth remains: passwords continue to be a primary target for attackers. Even as new authentication methods emerge, many organizations still rely...
Know Your Adversaries, Improve Your Defense
Why Your Pentest May Not Be Enough In today’s rapid change, cybercriminals continuously refine their tactics, techniques, and procedures (TTPs) to exploit vulnerabilities and evade detection. For...
Dev or Dummy: Developing My First App with ChatGPT
From Zero to “Not Too Bad” in Two Months When I started working on Hash Master 1000, I had a vision of what I needed, but I lacked the capability to develop it myself. I wanted a single tool that...
Hash Master 1000: A Modern Password Analysis Tool
Password cracking has come a long way, but what about password analysis? Back in the day, Pipal was our go-to tool for basic statistics and base-word identification. In 2017, two of SynerComm’s...
The Case for Intent-Based Networking: Closing the Gap Between Vision and Reality
Modern networks aren’t failing because of lack of tools. They’re failing because the tools don’t talk to each other. Or worse—they don’t talk to the people managing them. There’s a fundamental...
Executing Shellcode via Bluetooth Device Authentication
While reading through the MSDN documentation for Bluetooth, I started thinking about what opportunities there were to leverage Bluetooth for offensive purposes. I ended up creating a shellcode...
When Network Changes Go Wrong: Lessons from the Field
One Missed Command. One Long Night. At 1AM, every detail matters. A missed command. A port that won’t come up. A DR site that stays dark. For most enterprises, the real risk of network failure...
The Growing Importance of Penetration Testing in 2025 and Beyond
As we welcome 2025, the cybersecurity landscape continues to evolve at an unprecedented pace. With the surge in sophisticated cyber threats and increasingly complex IT environments, the role of...