Optiv Blog

General thought: A breach of trust is different than a breach of security. Trust and security, while related, are very different from each other. In....

Serverless architecture enables applications to be developed and deployed without management of the underlying host or operating system. Instead of a....

Forty years ago Burger King launched a revolution in customization, declaring that they could provide you the power of creating your perfect burger....

Most web applications provide a 'forgot my password' feature where a recovery or reset token is delivered to the associated account email address....

There are a variety of scanning tools in the market today, from commercial to open source. Some are intended only for identifying a particular....

An application security (AppSec) program can be defined as the set of risk mitigating controls and business functions that support the discovery....

Attackers and security assessors alike are utilizing a technique called domain fronting, which masks malicious command and control (C2) traffic. This....

When you spend a lot of time doing security testing on mobile apps like I do, you begin to worry that a large part of your life will be spent....

Sensitive and relevant data, such as personally identifiable information (PII) or intellectual property, may be running rampant in your organization....

At approximately 9:30am EDT on 20 March 2018, hacktivist collective, MinionGhost, announced planned cyber attacks against unspecified Asian entities....

Pass-the-hash (PtH) is an all too common form of credentials attack, especially since the advent of a tool called Mimikatz. Using PtH to extract from....

Smoke testing in the traditional definition is most often used to assess the functionality of key software features to determine if they work or....