Featured Blog
Exposed Secrets, Broken Trust: What the DOGE API Key Leak Teaches Us About Software Security
Earlier this week, Krebs on Security reported that an employee of the Department of Governmental Engineering (DOGE) accidentally published a secret API key that granted access to unreleased AI models from Elon Musk’s xAI venture (source). Even more disturbing: researchers found the DOGE API key still worked after the employee was notified of the leak […]
Pen Testing, Security contols, Security Controls Reports
Top Cybersecurity Control for Q4 2023: Penetration Testing
Incident Response, Zero day exploits
Double Trouble: Understanding Two Cisco Zero Day Vulnerabilities & Guide to Zero Day Attack Response
Business email compromise, Social Engineering
Social Engineering Scams: Cross-Tenant Impersonation Attacks, Voice Cloning Risks, and More
Microsoft Office 365
M365 Security: Leveraging CIS Standards for Optimal Security and Advanced Threat Mitigation
News, Social Engineering
2023 MGM Breach: A Wake-Up Call for Better Social Engineering Training for Employees
Compliance, Cybersecurity Planning, NIST CSF
