Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

Beyond the Browser: The Questions That Expanded the Attack Surface

penetration testing | social engineering | phishing | Cyber Security Awareness

After presenting this research at security conferences this year, I was expecting the usual post-talk questions like "what tools did you use?", "does this also work on mobile?", or a compliance officer asking if PDF forms are covered under their DLP policy. What the audience did instead was take ...

Never miss a Professionally Evil update!

Supply Chain Security: Trust Is the New Attack Surface

Professionally Evil Insights

Beyond the Browser: The Questions That Expanded the Attack Surface

Never miss a Professionally Evil update!

Supply Chain Security: Trust Is the New Attack Surface

SaaS Sprawl, Identity, and the Illusion of Control

Detecting Dangling SaaS Subdomains and Real Subdomain Takeovers

Bypassing Browser PDF Security: Using Embedded JavaScript Forms for Social Engineering

From Nmap to CSV

Best Practices and Risks Considerations in Automation like LCNC and RPA

The CISO's Myopia