PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...

All Entries

Top 5 Security Considerations for a New Web App: 1. Secure Coding

Top 5 Security Considerations for a New Web App: 1. Secure Coding

Explore web application security: Secure Coding is key to building robust, safe apps. Learn the foundational practices....
Top 5 Security Considerations for a New Web App

Top 5 Security Considerations for a New Web App

Given the criticality of web application security, it's imperative to delve deeper into what exactly it entails....
Quick Bites

Quick Bites Episode 11 – Ranking Application Risks

Learn how to rank the risk associated with vulnerabilities in your application, then prioritize the risk based on criticality....
SQL Injection Vulnerability: Identification and Prevention Methods

SQL Injection Vulnerability: Identification and Prevention Methods

The FBI and CISA released a Secure by Design alert calling for the elimination of SQL injection vulnerabilities. This post covers SQLi causes and detection...
Being Safe and Secure with Cross Origin Messaging

Being Safe and Secure with Cross-Origin Messaging

Explore onMessage and postMessage in browsers: Learn cross-origin JavaScript interactions, security issues, and flaw prevention....
Prompt Injection

Prompt Injection

Discover AI prompt injection with Cory Sabol: understand this AI threat, its impact, real examples, and defenses....
Quick Bites

Quick Bites Episode 10 – Half Shells and Full Shells

Today’s Quick Bites shows you hackers out there how to upgrade your simple netcat shell into a full PTY shell…with pictures!...
Intro to NMAP

Intro to NMAP

Explore our essential tool for network security and vulnerability detection, perfect for both beginners and experts...
What does PCI require for Developer Training?

What does PCI require for Developer Training?

Understand what the PCI DSS requires for annual developer training....
Uncharted Waters: Network Depths with runZero & OPNsense

Uncharted Waters: Network Depths with runZero & OPNsense

Looking deep into your network with runZero and OPNsense. Learn how to use runZero, when using OPNSense, to discover all devices on your network....
Navigating the California Consumer Privacy Act (CCPA)

Navigating the California Consumer Privacy Act (CCPA)

To comply with the CCPA, organizations must adhere to a set of regulations designed to safeguard California residents' data privacy rights....

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.