Strategic
Resources Blog

Strategic

Keep up to date with the latest offensive security news, knowledge, and resources.
VIDEO: How Continuous Penetration Testing Works (the best)
May 03, 2021

VIDEO: How Continuous Penetration Testing Works (the best)

Trying to wrap your head around what separates Continuous Penetration Testing from other forms of network security testing? Well, we get it. That’s why we’ve put together this handy little video. Sit back, have a snack and learn how CPT works, why it’s advantageous and how it can help you keep your organization’s network safe.
What Is an Attack Surface... and Why Protect It?
May 03, 2021

What Is an Attack Surface... and Why Protect It?

Maybe you’ve heard your IT security team talking about attack surfaces? Or, maybe the term has come up during a virtual conference or in your newsfeed. It’s important to take a step back and understand what an attack surface is and why you need to protect it.
What Vulnerability Scanners Miss... and the Cost
Apr 01, 2021

What Vulnerability Scanners Miss... and the Cost

Automated Vulnerability Scanners, on the surface, have a lot of appeal to IT directors. They run in the background and are “always on”. They alert you when you have an issue. But the harsh reality is they provide a false sense of security and leave your network exposed.
Continuous Pen Testing vs. Bug Bounties: A Comprehensive Comparison
Jan 15, 2021

Continuous Pen Testing vs. Bug Bounties: A Comprehensive Comparison

In-depth info. to consider before choosing how you’ll test network security. If you’ve thought about using a bug-bounty program to test your organization’s network, hit pause and read this first.
Why Users Are a Top Threat – And Bug Bounties Fall Short
Dec 18, 2020

Why Users Are a Top Threat – And Bug Bounties Fall Short

Bug-bounty programs live and die by their ability to target public-facing assets and then expose related vulnerabilities. But one asset is out of their reach, and it’s arguably the most dangerous to your network.
How to hunt for SolarWinds Orion usage
Dec 17, 2020

How to hunt for SolarWinds Orion usage

Recent reports from FireEye revealed a large-scale campaign to infect company networks using a modified version of the SolarWinds Orion monitoring agent.