How Cybersecurity Training Has Changed The cybersecurity training market looks very different in 2026 than it did a few years ago. The explosion of online platforms, hands-on lab environments, and […]
Offensive Security
A Commitment to Getting It Right: Palo Alto Networks’ Expedition Migration Tool
Background: From MigrationTool to Expedition During a penetration test engagement in 2018, CyberOne’s offensive security team encountered Palo Alto Networks’ firewall policy migration tool — at the time called MigrationTool. […]
Finding Enterprise Credentials in Data Breaches: How to Detect Exposure
Why Credential Exposure Is Your Most Common Initial Access Risk When organizations assess their breach risk, they typically focus on external vulnerabilities: unpatched systems, exposed services, phishing susceptibility. Credential exposure […]
Securing Your Cookies: HTTPOnly Flag for Cookie Theft Defense
What the HTTPOnly Flag Does The HTTPOnly flag is a cookie attribute that instructs the browser to prevent JavaScript from accessing the cookie value through the document.cookie DOM API. A […]
Is Your jQuery Application at Risk? Exploiting the CVE-2022-31160 Vulnerability
As a web application penetration tester, I commonly come across applications using outdated software components, sometimes just a few versions behind, other times several years out of date. This issue […]
Cybersecurity 4.0: The Need for Continuous Learning in the Age of AI
Organizations are continuing to grapple with a cybersecurity talent shortage during a time of rapid growth of AI-driven threats. The rise in AI usage applies not only to security teams […]
Obtaining Domain Admin Privileges on a Segmented Network, From NFS to DA Using DFIR Tools
On a recent internal penetration test, I was able to obtain Domain Admin privileges in a segmented network by calling on my ancient digital forensics skill set. I got my […]
Exploiting Kaseya Unitrends Backup Appliance – Part 2
This is the second installment of the Exploiting Unitrends series and will focus on several critical unauthenticated SQL Injection vulnerabilities leading to remote code execution.
Exploiting Kaseya Unitrends Backup Appliance – Part 1
Multiple vulnerabilities were discovered in the Unitrends Backup appliance and client software. An attacker with network access to the management interface or backup ports on the client or server could be exploited to compromise the machine. Both suffer from critical remote code execution vulnerabilities.
How To Reverse Engineer the SolarWinds Hack
When it comes to security incidents involving malware, most of us rely on the information provided by the investigating firm to understand what the malware does, why it does it, […]