Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When the fuzzers come knocking on port 389: Hunting injection canaries in LDAP

It's easy to think of core infrastructure protocols like LDAP, Kerberos, DNS, SMB, and NTP as furniture. They're so old, so ubiquitous, and normally so quietly reliable that we almost stop seeing them. However, history teaches us that Infrastructure protocols can and do have serious vulnerabilities. They say when you kick a rock over, dozens of bugs crawl out from under it. In this vein, this blog delves into how I went looking for one security issue and uncovered 6 other ones.

Why do I need a cloud risk assessment?

Your business almost certainly runs on cloud services. From document storage, email and finance software to your customer data and internal systems, the chances are that most of what keeps your business operational lives, at least in part, in the cloud. And yet, for many businesses, the question of whether that cloud environment is secure rarely gets asked. It tends to be presumed. After all, you’ve got bigger things to worry about. You’re with a reputable provider.

Dark Web Monitoring Vendors Compared

According to the 2026 Context Gap research, 79% of organizations first learn about active threats from outsiders rather than their own tooling. You've watched another headline roll past of a Fortune 500 company exposed on the dark web. Each story ends the same way: with a breach notification and inevitable board questions. You decide your company won't be the next case study. You need a tool that'll find your exposures before an attacker does.

How to Improve AI Search Visibility Without Exposing Sensitive Data

AI search visibility creates a useful tension for security and marketing teams. A company wants its expertise, products, and evidence to be easy for search engines and AI systems to find. At the same time, it cannot afford to expose customer data, internal documents, credentials, or operational details simply to make its content more "machine readable." The right goal is not maximum crawlability. It is controlled public visibility: publish enough reliable information for a search system to understand and cite the company while keeping private information behind real access controls.

LinkedIn to CRM Extensions: A Security Checklist (2026)

Browser extensions that copy LinkedIn profiles and conversations into a CRM are now standard in most sales teams. They are useful, and they are also a data security decision that usually never reaches the security team. Each one runs inside the rep's authenticated browser session, reads personal data from LinkedIn, and moves it into a second system under the rep's own credentials. This article sets out the questions a security or IT function should ask before allowing one, and how the common tools answer them.

Beyond the Login Screen: Why Qualified Electronic Signatures Belong in Identity Security

For years, identity security was mostly discussed as an access problem. Can the right person log in? Is multi-factor authentication enabled? Are privileged accounts protected? Can stolen credentials be used from an unknown device? Those questions still matter. But they describe only the beginning of a digital transaction.

What is a backdoor attack?

A backdoor attack is hard to detect. Since they bypass standard security measures, backdoor attacks can enter your system and go unnoticed for a long time. While some cyberattacks tend to be smash-and-grab, backdoor attacks are stealthier. They allow hackers to enter secretly, gather more secure data than typical attacks, and can cause significant damage. Because they can be so difficult to detect and cause so much damage, you need to know the signs of a backdoor attack and learn how to mitigate it.

Breach fatigue: Why your team has switched off and how to fix it

Cybersecurity continues to face continued challenges in the Australian environment. The Australian Signals Directorate’s (ASD's) Annual Cyber Threat Report 2024–25 revealed that there were more than 84,700 cybercrime incidents and over 42,500 calls to the Australian Cyber Security Hotline, representing a 16% increase in comparison to the previous reporting period. More threats. More notifications. More training events. Yet, surprisingly, employee vigilance is continually decreasing.

Your AD is a stomping ground for lateral movement

Active Directory (AD) is the backbone many enterprises lean on for their IT environments. Yet, most organizations rarely govern the directory with the scrutiny necessary. This was the throughline of a recent webinar with Nitish Deshpande, senior analyst at KuppingerCole, and Robert Kraczek, global strategist at One Identity. The pair made a strong case for mediating admin access to AD, emphasizing just how easily compromised credentials can beget full-blown incidents.

SSH Session Monitoring: How to Monitor, Record & Audit SSH Sessions

Secure Shell (SSH) gives you direct access to critical servers, databases, and cloud infrastructure. Once a privileged user connects through SSH, they hold extensive control over that system. They can alter core configurations, run terminal scripts, move files, or delete production databases in seconds. If you lack visibility into privileged actions, it can be risky. If a credential gets stolen or an insider goes rogue, traditional firewalls won’t be enough.