PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

Navigating Evolving Regulations

Navigating Evolving Regulations: Staying Ahead of Change

Regulatory landscapes across industries are shifting dramatically due to technological advances, geopolitical events, and societal changes....
Read ›
Unleashing the Power of Flipper Zero: A Hacker's Multitool Webcast

Unleashing the Power of Flipper Zero: A Hacker’s Multitool Webcast

As experts in the field, we are excited to announce an webcast that will delve into the intricacies of this powerful device from a hacker's...
Read ›
Painless Procurement: Trust Us, It's Science

Painless Procurement: Trust Us, It’s Science

Don't let lengthy contract reviews deter you. At Secure Ideas, our mission to enhance your security starts well before testing begins....
Read ›
Essential Security Requirements for Application Development

Essential Security Requirements for Application Development

Explore common security requirements for customer-facing applications....
Read ›
Sailing into the Unique Security Risks of AI Systems Part 1

Sailing into the Unique Security Risks of AI Systems Part 1

As we venture further into the vast ocean of Artificial Intelligence (AI) - employing it to automate tasks, solve complex problems, and make predictions...
Read ›
What is Required for a PCI Penetration Test?

What is Required for a PCI Penetration Test?

What's required for a penetration test that complies with PCI DSS 4.0? Learn the details necessary to meet compliance with the new standard....
Read ›
Finding Your Spidey Sense

Finding Your Spidey Sense

As you begin your web app pentesting adventure, it's essential to understand the treacherous landscape you're about to explore....
Read ›
Beyond Hacking: Expanding Your Security Arsenal

Beyond Hacking: Expanding Your Security Arsenal

Maybe you are coming from an organization that recently fell under broadened regulations (like higher education institutions and GLBA)....
Read ›
Quick Bites

Quick Bites Episode 8 – (Back From the) Dead Space

In this ep of Quick Bites, we're discussing the critical risk vulnerability in MOVEit Transfer, and how you can protect yourself from it...and Necromorphs....
Read ›
What is Professionally Evil Testing as a Service (PETaaS®)?

What is Professionally Evil Testing as a Service (PETaaS®)?

Discover PETaaS, a flexible & proactive cybersecurity approach offering continuous access to expert penetration testing. Boost your security now!...
Read ›
Understanding Server Side Template Injection (SSTI)

Understanding Server-Side Template Injection (SSTI)

Discover the risks of Server-Side Template Injection (SSTI) vulnerabilities, learn how to detect and prevent them, and safeguard your web applications....
Read ›
Introducing SamuraiWTF

Introducing SamuraiWTF 5.3: A Powerhouse for Web App Pen Testing

Explore SamuraiWTF 5.3, the latest in web application penetration testing. New updates to Katana offer enhanced tools for a robust security toolkit....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.