Blog

News & Insights

What we're seeing in the field—and what to do about it.

Software Security for Startups

Your startup should care about cybersecurity, but only sort of.

Simplify Your Life with a Password Manager

A little learning curve puts you ahead of so many and makes life easier

Pragmatic Steps to Get CMMC Level 1 Compliant

Get started securing your business as a federal subcontractor with meme driven guidance.

It's Getting Harder to Recognize Scams

Generative AI lowers the barrier for scammers to create believable texts, emails, voices, images, and even video. Just like any new technology, this will be an arms race of offense and defense.

A Physical Site Security Audit Checklist You Can Actually Use

This audit checklist is designed to guide you through a thorough review of your site’s security based on leading standards from organizations like ASIS International, ISO, NFPA, and BOMA. Let’s break it down into actionable steps, making sure you can spot weak spots and implement fixes without drowning in paperwork.

Show Me the Incentives, and I'll Show You the Outcomes

Don't blame people as the weakest link in cybersecurity- blame their incentives.

January 19, 2026

The Intriguing World of Ransomware Payments

Dive into the mysterious world of ransomware payments! Learn about how hackers use digital money like Bitcoin.

January 19, 2026

The M&A Process Through a Cybersecurity Lens

When you’re in the middle of a merger, acquisition, joint venture or divestiture, the clock’s ticking. Deals move fast, and it’s easy to let things slip through the cracks—especially cybersecurity, where things work until they come crashing to a halt.

January 16, 2026

CrowdStrike's Calamity: Charting Core Contingencies

Preparing for the unpredictable

January 16, 2026

Practical Steps for TSA Cybersecurity Compliance at Airports

Helping calm the cyber seas for smoother sailing at airports... sorry, wrong analogy!

January 19, 2026

Reducing Loan Risks with Cybersecurity Assessments

Banks are beginning to incorporate cybersecurity assessments into SMB loan evaluations.

January 19, 2026

Is Your Wildix Phone System as Secure as it Could Be?

Don't give hackers access to your internal Wildix chats and voicemails

January 19, 2026

AT&T Hacked (Again?) What Now?

Add a fraud alert to your credit report

January 19, 2026

Is your MSP secure?

What security measures do you have in place to protect my systems and information?

January 19, 2026

Invisible Thieves: How Payment Diversion Scams Work

Follow along from email hack to payment theft

January 19, 2026

How to Ask Your Vendors to Verify Their Security Practices

Your vendors' security practices directly impact your own.

January 19, 2026

Don’t Let This Simple Mistake Drain Your Bank Account

Are You Making It Easy for Cybercriminals to Steal Your Cash App Balance and Account Access?

January 19, 2026

The 3 Cybersecurity Awareness Tips Most Likely to Make a Difference

There's so much noise. What should a normal person actually be concerned about?

January 19, 2026

Strengthening Cybersecurity in Biotech: Insights from the NSCEB and the Latest Findings

This article explores the cybersecurity challenges in the biotech industry.

January 19, 2026

Software Security for Startups

Your startup should care about cybersecurity, but only sort of.

January 19, 2026

Simplify Your Life with a Password Manager

A little learning curve puts you ahead of so many and makes life easier

January 19, 2026

Pragmatic Steps to Get CMMC Level 1 Compliant

Get started securing your business as a federal subcontractor with meme driven guidance.

January 19, 2026

It's Getting Harder to Recognize Scams

Generative AI lowers the barrier for scammers to create believable texts, emails, voices, images, and even video. Just like any new technology, this will be an arms race of offense and defense.

January 19, 2026

An RSC Parser Because React Thought Wire Protocols Were Fun

A Burp extension for when your response tab looks like spaghetti (React's Flight protocol)

January 19, 2026

Add Email Spoofing Checks to Your Nuclei Scans

New Nuclei template integrates email spoofing checks into reconnaissance workflows.

January 19, 2026

The MCP Security Tool You Probably Need - MCP Snitch

The Model Context Protocol (MCP) has rapidly emerged as the standard for connecting AI agents to external tools and services.

January 19, 2026

Pentesting Next.js Server Actions

Adversis releases a Burp Extension for NextJS Hash-to-Function Mapping

January 19, 2026

Privilege Escalation With Jupyter From the Command Line

A recent penetration test led to an interesting way to escalate privileges on a Jupyter instance running as root.

January 19, 2026

Living off Node.js Addons

Swap out compiled Node.js addons with your own code and force a legitimate Electron application load your code

January 19, 2026

CyberPrices.io: Cybersecurity Cost Transparency

CyberPrices.io - our latest innovation designed to bring transparency to cybersecurity pricing

January 19, 2026

Tailscale Security - A Threat-Based Hardening Guide for Growing Companies

A threat analysis and compliance mapping guide for Tailscale deployments. Check out tailsnitch to audit your setup

January 16, 2026

Meeting NIST 800-63B Password Requirements with ASP.NET Core Identity

Get compliant with NIST Identity guidelines to protect your end users and meet your client's demands

January 19, 2026

Strategic CISO: Timing Your Security Assessment for Executive Impact

Whether you’re presenting to your board, executive leadership team, or quarterly business review, transform your penetration testing from a compliance checkbox to your strategic advantage.

January 16, 2026

Strategic CISO: Before the Test — When Your Startup is Really Ready for Penetration Testing

Whether you actually need a security assessment and when you should get one isn't so clear cut.

January 16, 2026

Your VPN Without MFA is Rhysida's Front Door

Strategies that Work to Defend Aviation and Healthcare Against Rhysida Ransomware

January 19, 2026

Your MFA Isn't Protecting You: Inside the EvilProxy Campaigns Draining Bank Accounts

How financially-motivated cybercriminals are using EvilProxy to bypass your two-factor authentication, hijack CFO accounts.

January 19, 2026

Blind Enumeration of gRPC Services

When you're handed an SDK with no documentation and told "the backend is secure because it's proprietary," grpc-scan helps prove otherwise

January 19, 2026

Unpatched Edge Devices are Volt Typhoon's Persistence Point

Strategies to Defend Utilities and Critical Infrastructure Against Volt Typhoon

January 19, 2026

An In Depth (and Actionable) Guide to Cybersecurity Table Tops

Incident response tabletop exercises are crucial for preparing your organization to handle cyber incidents.

January 19, 2026

The Compliance Trap

Does that SOC 2 report actually mean anything? Go beyond compliance with systems thinking.

January 16, 2026

How to Write a Hashcat Module

Cracking 389 Directory Server password hashes automatically with the password cracker Hashchat

January 19, 2026

Security Advisory: Chamber of Commerce Software API Vulnerabilities

Major Chamber of Commerce software platforms have API security gaps exposing member data.

January 19, 2026

Rental Car Vendor's Security Flaw Exposed Damage Claims Reports

Legitimate emails with bad practices and an insecure website add insult to injury.

January 19, 2026

Lessons Learned From a Year of SMB Cybersecurity Assessments

Gaps, assumptions, and missing cyber controls continue to plague SMBs

January 19, 2026

A Fast Track Guide to Losing Money and Data in Business

How Businesses Get Hacked: A mordant 3-step guide on how to lose money and information.

January 19, 2026

Awareness Alone Is Dumb: How to Make Cybersecurity Habits Stick

How to Make Cybersecurity Habits Stick When Awareness Isn’t Enough. Mantras don't count.

January 19, 2026

Cyber Security Study of Northwest Montana

Disclaimer: All research and information presented in this document were obtained solely from publicly available sources, and no actions were performed on any systems or networks to gather this data.

January 19, 2026

A Safe and Sound Shopify Shop

So you've opened a Shopify store. That's great news! Chances are, you're making something really special and we're excited to help make you and your customers experience secure.

January 19, 2026

Your SSN Isn't a Secret

Your Social Security Number is not supposed to be sensitive. Unfortunately platforms and online systems use it to verify your identity.

January 28, 2026

The (Un)Surprising Wi-Fi Password Mistake Thousands are Making

Adversis estimates that 10% of networks in the region are using a password with a 406 area code and phone number. Is your Wi-Fi password your phone number?

January 19, 2026

The (Un)Surprising Wi-Fi Password Mistake Thousands are Making

Adversis estimates that 10% of networks in the region are using a password with a 406 area code and phone number. Is your Wi-Fi password your phone number?

January 16, 2026

Your Documents, ShareFile'd

Adversis did some brief public research on Citrix ShareFile websites and found over 9,000 customer subdomains, over half of which have links accessible to anyone who can identify them. It’s possible your company is among them.

January 19, 2026

ForeScout Secure Connector Local Privilege Escalation

A local privilege escalation in a security tool, who would have imagined..

January 19, 2026

A BigCommerce Security Primer

BigCommerce is an eCommerce platform that quite a few large brands use. Let's take a look at how to make sure our BigCommerce store is configured securely.

January 19, 2026

Unraveling the Secrets of Montana's Internet

Montana. Known for its ruggedness. But how secure are we?

January 19, 2026

Pandora's Box: Another New Way to Leak All Your Sensitive Data

Yes, the cloud is still leaking data. This time, we can't blame the SRE team though, everyone has been sharing files publicly, yes, even you probably.

January 19, 2026

A Clean Pen Test Report Can Still Disqualify You

Enterprise buyers don't necessarily want a clean bill of health. They want proof you handle problems well.

January 30, 2026

AIUC-1 Compliance Navigator

A free reference tool for navigating the AIUC-1 AI Risk Management Framework

January 19, 2026

A Password Manager Guide for Work

Simple guidance for your co-workers on how to actually use a password manager, and why.

January 19, 2026

Sample Web App Penetration Test Report

See how we translate technical findings into actionable business insights—explore a penetration testing report with prioritized remediation guidance.

January 30, 2026

Policies, Procedures, and Playbooks

The terms 'Policies,' 'Procedures,' and 'Playbooks' are often used to establish guidelines and standard practices. They're related but serve different purposes. Here's how they work and interact.

January 19, 2026

How to Safeguard Taxpayer Data and Comply with IRS Publication 4557

Take simple, common sense steps to keep your business and client information safe.

January 19, 2026

A Physical Site Security Audit Checklist You Can Actually Use

This audit checklist is designed to guide you through a thorough review of your site’s security based on leading standards from organizations like ASIS International, ISO, NFPA, and BOMA. Let’s break it down into actionable steps, making sure you can spot weak spots and implement fixes without drowning in paperwork.

January 19, 2026

Get Started

Let's Unblock Your Next Deal

Whether it's a questionnaire, a certification, or a pen test—we'll scope what you actually need.

Noah Potti

Principal