"It's a Dangerous Business, Going Out Your Door" - Why the Cybersecurity Community Needs a Fellowship
On June 11th, I delivered the keynote at WISCON 2026, the inaugural Wisconsin Information Security Conference in Madison. It's a brand-new conference, and that matters. New conferences don't come with an established crowd or twenty years of institutional memory. They come with a room full of people ...
Continue Reading
Houston, We Have a Problem
Satellite Security Testing: A Holistic Approach Last month, I had the opportunity to present at ...
Continue Reading
The Fellowship of the Phish: PayPal's Perilous Request Feature
In cybersecurity, we often find ourselves fixated on the latest sophisticated malware or zero-day ...
Continue Reading
.png)
Understanding Server-Side Template Injection (SSTI)
Testing |
Training |
QA |
web penetration testing |
penetration testing |
application security |
OWASP |
web application security |
methodology |
OWASP Top 10
Web applications play a vital role in delivering dynamic content to users. To achieve this, ...
Continue Reading
Introducing SamuraiWTF 5.3: A Powerhouse for Web App Pen Testing
Testing |
Training |
samuraiWTF |
web penetration testing |
application security |
professionally evil |
Secure Ideas |
hacking |
OWASP |
Project
We are thrilled to announce the release of SamuraiWTF (Web Training Framework) version 5.3! This ...
Continue Reading
Einstein Told Us: Why User Awareness is NOT the right focus
"The definition of insanity is doing the same thing over and over again and expecting different ...
Continue Reading
How I Became a Security Consultant: AbsoluteAppsec Interview
Every so often, podcasts and such will invite me to speak on a variety of topics. And this week, I ...
Continue Reading
Building Blocks: Professionally Evil Fundamentals Series
We at Secure Ideas love security education. What we enjoy even more is affordable security ...
Continue Reading
We take security seriously and other trite statements
Earlier this week, Secure Ideas sent an initial notification regarding an incident targeting us ...
Continue Reading
#AffordableTraining requires change
In 2019 Secure Ideas is dedicated to offering affordable security training to everyone. This ...
Continue Reading
Professionally Evil CISSP Certification: Breaking the Bootcamp Model
ISC2 describes the CISSP as a way to prove "you have what it takes to effectively design, implement ...
Continue Reading