Thumb Drives.. Can you tell the difference?

During a physical penetration test, it is not uncommon for the tester to drop usb thumb drives out in the parking lot or someplace within the building.

Password Sharing Across Accounts

Over the past few years we have seen a large number of databases get compromised leading to the disclosure of user passwords.

Why Do Phishing As Part of Security Testing

I was recently watching a web cast on incident response and found myself thinking about the cause of the example incident.

The Watering Hole: Is it Safe to Drink?

How many times have you been told you have a vulnerability that you just don’t understand its relevancy? 

Hi, I’m with IT and I’m Here to Steal From You

Beware of the Unknown IT Grunt I decided to continue on with the same theme as Kevin’s post about the delivery guy.

Spear Phishing: “You guys are Shady!”

This post is part of our Professionally Evil series of posts that discuss some of the experiences we have had as Security Consultants.

Don’t Trust the Replacement Delivery Guy

Here at Secure Ideas we have had a ton of fun experiences during our work.

Gone Phishing

Many organizations do not include phishing in their annual penetration tests, as they believe that most phishing emails will be stopped by their email…