Checking for PrintNightmare vulnerability

In the world of Active Directory security, running the Print Spooler service on a Domain Controller is an unforced error. We saw exactly why with ‘PrintNightmare’—a vulnerability that turned a mundane background service into a highway for ransomware and domain-wide compromise. The reality is simple: if your DC is managing print jobs, it’s also managing Read More …

RCE – Remote Code Execution

Ever wonder how cyber attacks like data breaches or widespread disruptions happen? Sometimes, it’s due to a serious weakness called Remote Code Execution, or RCE for short. Imagine you have a computer, and someone, without physically touching it, can open programs, delete files, or even install their own software. That’s essentially what RCE enables. It’s Read More …

Security leaks for sale

There is new gold to be found on the internet, and possibly in your own computer. Secret backdoors, that do not have a digital lock yet, are being traded at astronomical amounts. In the cyber world trade, where there are no rules, you are in luck with “white-hat” hackers, who guard your online security. But Read More …

Looking at Attack Surface Mapping

Hot Take Incomming……. Warning…… I am going to come right out and say it, and it will sound completely arrogant, but I think the majority of Attack Surface Mapping vendors out there are doing it wrong. ASM for those who are new to blogs like these, stands for Attack Surface Mapping.  This process is meant Read More …