Featured Blog
No Exploits Needed: Using Cisco’s Own Features to Extract Credentials
During a routine internal penetration test, we used nothing more than default settings and built-in router functionality to extract the running configuration from a Cisco device—no credentials required. The result? Access to password hashes, SNMP secrets, and infrastructure details that could enable full network compromise. This isn’t a story about zero-days—it’s a warning about what […]
Supply Chain Cybersecurity, Third Party Risk Management, Vendor Risk Management
Software Supply Chain Security: Understanding and Mitigating Major Risks
Cyberattacks, Cybersecurity, Cybersecurity leadership
Cyberattack 2024 Insights: The Threat Landscape and How to Secure Your Organization
Partnerships, Security contols, Security Controls Reports, Supply Chain Cybersecurity, Tabletop Exercises, Third Party Risk Management
Our Q3 2024 Top Control is Third Party Risk Management: Lessons from the CrowdStrike Outage
Bug Bounty Program, Policy Development
