The Systems That Time Forgot

You cannot protect what you cannot inventory: this piece argues IT asset management underpins every security program, defining what counts as an asset and the questions organizations must answer.

For the past five years it seems like almost everything in information security has focused on application security and, for the NetSPI consulting practices, our application security business (app pen testing, code review, etc.) has significantly increased.

A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.

External penetration testing examines internet-facing services, while internal testing simulates insider threats or post-breach attackers. This article compares the two approaches and their use cases.

IPinfo research on masked IP trends: VPN, proxy and Tor usage across IPv4 and IPv6, with takeaways for allowlisting, denylisting and shrinking cloud attack surface against hidden malicious actors.

Learn why IoT devices may be the next big security risk – for both employees' personal lives and corporate networks.