Trying to wrap your head around what separates Continuous Penetration Testing from other forms of network security testing? Well, we get it.
That’s why we’ve put together this handy little video. Sit back, have a snack and learn how CPT works, why it’s advantageous and how it can help you keep your organization’s network safe.
Resources
Blog
Strategic
Keep up to date with the latest offensive security news, knowledge, and resources.
Maybe you’ve heard your IT security team talking about attack surfaces? Or, maybe the term has come up during a virtual conference or in your newsfeed. It’s important to take a step back and understand what an attack surface is and why you need to protect it.
Automated Vulnerability Scanners, on the surface, have a lot of appeal to IT directors. They run in the background and are “always on”. They alert you when you have an issue. But the harsh reality is they provide a false sense of security and leave your network exposed.
In-depth info. to consider before choosing how you’ll test network security. If you’ve thought about using a bug-bounty program to test your organization’s network, hit pause and read this first.
Bug-bounty programs live and die by their ability to target public-facing assets and then expose related vulnerabilities. But one asset is out of their reach, and it’s arguably the most dangerous to your network.
Recent reports from FireEye revealed a large-scale campaign to infect company networks using a modified version of the SolarWinds Orion monitoring agent.