Don’t Get Tricked: How to Spot Phishing Before You Take the Bait

October means Fall, arguably the best season of the year, because it means cooler weather, scary movies, Halloween, and more than a few tricks and treats. October also happens to be Cybersecurity Awareness Month, so what better time to talk about one of the oldest tricks on the internet? Working in cybersecurity, phishing is something […]
Beyond the Browser: The Questions That Expanded the Attack Surface

Explore how emerging attack vectors like PDF forms in Outlook’s preview pane can exploit trusted environments, challenging traditional security assumptions.
Understanding MFA Fatigue Attacks

Explore the risks of MFA fatigue attacks, how they exploit user psychology, and strategies to enhance security in your organization.
Bypassing Browser PDF Security: Using Embedded JavaScript Forms for Social Engineering

From PDFs to social engineering, I explore how trusted apps and browsers can be exploited in penetration testing to reveal hidden risks.
Why Would I Need a Physical Penetration Test?

Read this article to learn about the benefits of a physical penetration test.
Low Hanging Fruit Ninja: Slashing the Risks of the Human Element

A long time ago in a galaxy far, far away, I was not a Security Consultant. I was a Chef.
Einstein Told Us: Why User Awareness is NOT the right focus

“The definition of insanity is doing the same thing over and over again and expecting different results.” – Einstein (Well, not really!)
Still SMiShing You – SMS Scams.

Have you ever gotten a strange text message on your phone that you don’t recognize? Well, be careful because you don’t have to use a computer to be…
Social Engineering – Why hack it, when people are just giving away their information!

More and more criminals have turned to cyber crime as a means to steal information and intrude on other people’s privacy.
Protecting your Kids from Online Threats

As information security professionals, we’re often asked about how to best protect children online.