PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

Your Risk Framework Is Broken: The Al Reality Check Every CISO Needs

Your Risk Framework Is Broken: The Al Reality Check Every CISO Needs

AI eliminated the attack complexity barriers your risk frameworks rely on. CVSS, NIST, and OWASP assumptions are obsolete. Here's the audit you need today....
Read ›
Rolling for Resilience Part 2: The Communication Gauntlet

Rolling for Resilience Part 2: The Communication Gauntlet

A typical table-top exercise where the parties are technically all in the same room, but operationally acting like solo adventurers in different realms....
Read ›
Bypassing Browser PDF Security: Using Embedded JavaScript Forms for Social Engineering

Bypassing Browser PDF Security: Using Embedded JavaScript Forms for Social Engineering

From PDFs to social engineering, I explore how trusted apps and browsers can be exploited in penetration testing to reveal hidden risks....
Read ›
The Real AI Revolution in Penetration Testing

The Real AI Revolution in Penetration Testing

AI-powered custom exploit development & penetration testing for complex protocols. Professional assessments in hours, not days....
Read ›
Quick Bites

Quick Bites 13 – Network Pentest Restrictions Can Hurt Your Business

Explore the importance of proper scoping in network penetration testing, the risks of over-restricting tests, and how to ensure meaningful security outcomes....
Read ›
But AI Can Give Me the Commands! Why You Still Need to Learn the Linux File System

But AI Can Give Me the Commands! Why You Still Need to Learn the Linux File System

Understanding the Linux file system is essential for effective troubleshooting and system management, beyond relying solely on AI for commands. Learn the structure to navigate...
Read ›
Secure Password Management in PowerShell Best Practices

Secure Password Management in PowerShell: Best Practices

PowerShell credential security best practices: avoid hardcoded passwords, use secure strings, environment variables, Credential Manager, SecretManagement modules, and cloud vaults to protect automation workflows....
Read ›
Rolling for Resilience: A Strategic Guide to Cybersecurity Table top Exercises

Rolling for Resilience: A Strategic Guide to Cybersecurity Table-top Exercises

Discover how tabletop exercises & gamification can transform cybersecurity training by making it engaging, collaborative, and effective in building a resilient security culture....
Read ›
Risk Driven Approach The Federal Government’s Shift in Cybersecurity Burden

Risk-Driven Approach: The Federal Government’s Shift in Cybersecurity Burden

Explore the shift from all-hazards to risk-informed security testing. Learn how Threat-Led and Assumed Breach testing support the new risk-informed paradigm....
Read ›
Understanding Garbage Findings

Understanding Garbage Findings

Learn how to identify garbage findings in penetration testing reports by evaluating real risk, impact, and conditions in application security assessments....
Read ›
houston

Houston, We Have a Problem

Discover how comprehensive satellite penetration testing addresses vulnerabilities across spacecrafts, ground systems, and communication links to ensure end-to-end cybersecurity in space operations....
Read ›
Cybersecurity Essentials for SMBs: Building a Robust Program

Cybersecurity Essentials for SMBs: Building a Robust Program

Learn how SMBs can build a robust cybersecurity program by focusing on essential steps, roles, and strategies to safeguard their business and customers....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.