PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

All Entries

Bird's Eye View: Navigating the Landscape of Kubernetes Security

Bird’s Eye View: Navigating the Landscape of Kubernetes Security

This blog post describes an upcoming webcast presented by Secure Ideas on the topic of Kubernetes Security. It aims to provide a high level overview....
Navigating Evolving Regulations

Navigating Evolving Regulations: Staying Ahead of Change

Regulatory landscapes across industries are shifting dramatically due to technological advances, geopolitical events, and societal changes....
Unleashing the Power of Flipper Zero: A Hacker's Multitool Webcast

Unleashing the Power of Flipper Zero: A Hacker’s Multitool Webcast

As experts in the field, we are excited to announce an webcast that will delve into the intricacies of this powerful device from a hacker's...
Painless Procurement: Trust Us, It's Science

Painless Procurement: Trust Us, It’s Science

Don't let lengthy contract reviews deter you. At Secure Ideas, our mission to enhance your security starts well before testing begins....
Essential Security Requirements for Application Development

Essential Security Requirements for Application Development

Explore common security requirements for customer-facing applications....
Sailing into the Unique Security Risks of AI Systems Part 1

Sailing into the Unique Security Risks of AI Systems Part 1

As we venture further into the vast ocean of Artificial Intelligence (AI) - employing it to automate tasks, solve complex problems, and make predictions...
What is Required for a PCI Penetration Test?

What is Required for a PCI Penetration Test?

What's required for a penetration test that complies with PCI DSS 4.0? Learn the details necessary to meet compliance with the new standard....
Finding Your Spidey Sense

Finding Your Spidey Sense

As you begin your web app pentesting adventure, it's essential to understand the treacherous landscape you're about to explore....
Beyond Hacking: Expanding Your Security Arsenal

Beyond Hacking: Expanding Your Security Arsenal

Maybe you are coming from an organization that recently fell under broadened regulations (like higher education institutions and GLBA)....
Quick Bites

Quick Bites Episode 8 – (Back From the) Dead Space

In this ep of Quick Bites, we're discussing the critical risk vulnerability in MOVEit Transfer, and how you can protect yourself from it...and Necromorphs....
What is Professionally Evil Testing as a Service (PETaaS®)?

What is Professionally Evil Testing as a Service (PETaaS®)?

Discover PETaaS, a flexible & proactive cybersecurity approach offering continuous access to expert penetration testing. Boost your security now!...
Understanding Server Side Template Injection (SSTI)

Understanding Server-Side Template Injection (SSTI)

Discover the risks of Server-Side Template Injection (SSTI) vulnerabilities, learn how to detect and prevent them, and safeguard your web applications....

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy