PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

IAM Access Analyzer Review

IAM Access Analyzer Review

Turn it on. Turn it on now! Instructions are here. AWS misconfigurations are costly and difficult problems to solve....
Read ›
Security Review of Nest Camera

Security Review of Nest Camera

The simplicity of turning on a light bulb with a voice command makes me giddy, and I totally geek out over building scripts......
Read ›
IAM Root: AWS IAM Simulator Tutorial

IAM Root: AWS IAM Simulator Tutorial

Another reason to be paranoid about your personal information being exposed, the recent Capital One breach should be sufficient nightmare fuel for you....
Read ›
Why Should We Address Security? A Guide for Small and Medium Businesses

Why Should We Address Security? A Guide for Small and Medium Businesses

It is still common to hear "Why bother with security", so this article explains why it is important....
Read ›
Why are Penetration Tests Expensive

Why are Penetration Tests Expensive?

This article explains the expense and costs behind a Secure Ideas penetration test and how a client can save money....
Read ›
What are the Risks of a Penetration Test

What are the Risks of a Penetration Test?

Penetration testing is not without risks. This article explains some of the concerns organizations should consider....
Read ›
What’s the Difference between Penetration Tests and Bug Bounties

What’s the Difference between Penetration Tests and Bug Bounties?

This page describes the differences between bug bounties and penetration tests...
Read ›
My Experience in the CISSP Mentorship Program

My Experience in the CISSP Mentorship Program

An explanation of the class and one consultant's experience with it....
Read ›
Game Console Hacking: Part 1 Lab Setup

Game Console Hacking: Part 1 Lab Setup

This is the first in a series of blog posts on my journey through video game hacking and security....
Read ›
Using Components with Known Vulnerabilities

Using Components with Known Vulnerabilities

When dealing with cyber vulnerabilities, there are lots of threats that are unknown and ever changing that can put users at risk....
Read ›
Better API Penetration Testing with Postman – Part 4

Better API Penetration Testing with Postman – Part 4

This is the final part of this series. We will use some of Burp Suite’s extensions to augment your API testing toolchain....
Read ›
Computers are People Too

Computers are People Too

There are those rare times during pen tests, when you are on a client’s network and you don’t have any valid domain credentials but you...
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.