Penetration Testing in Cyber Security: How It Works
How penetration testing works in cyber security: the five phases, why compliance teams ask for it and how to choose black, grey or white box access.
Blog Archive
13 articles from 2023
How penetration testing works in cyber security: the five phases, why compliance teams ask for it and how to choose black, grey or white box access.
Which penetration testing tools testers rely on, from Metasploit to Mimikatz, grouped by exploitation, password attacks and information gathering.
How penetration testing and red teaming differ, the pros and cons of each, and when a red team exercise adds more than a standard pen test.
Penetration testing is effective but has blind spots. Where it falls short, from scope limits to gaps between tests, and how to counter them.
To the untrained eye, they have similar-sounding names, but penetration testing and vulnerability scanning are very different services.
Whether AI can replace a cybersecurity company, which tasks it can take over, and six AI threats security teams need to manage in the coming years.
White hat, black hat and grey hat hackers explained, with the WannaCry attack as an example and what each type means for your business.
How ChatGPT and AI change the cyber threat picture, from automated attacks and social engineering to polymorphic malware, and what organizations can do.
How verifiable, measurable cybersecurity practices help startups overcome trust objections from larger buyers, with seven steps to a security strategy.
Criteria for deciding whether your organization needs a penetration test, from compliance and major IT changes to incidents, plus when you can wait.
What a cybersecurity consultant does, the risks one helps shield your business from, and how to decide whether your Toronto startup needs one.
Are password managers dangerous? What the LastPass breach means, why people still use them, and how cloud and local password managers compare.
Twelve ways to keep former employees from compromising IT security, from disabling accounts and changing admin passwords to reviewing suspicious activity.