OnSecurity's Latest Articles, News and Industry Tips
Security should be important to everyone. Our blog features articles regarding your business’ security and different aspects to consider.
Cloud-native security systems are transforming the way businesses protect their digital assets. Built for the
Uncover strategies for recognizing impending phishing attacks. This post details our proactive approach in warning
Here Tristan demonstrates how to reset any user’s password by altering the password reset functionality,
Unveiling the risks of exposing cloud acces keys – particularly in reference to AWS (amazon
Explore our technique of using Server Side Request Forgery (SSRF) to successfully retrieve EC2 credentials,
Explore Docker’s security aspects: Understand how taking precautions is crucial to avoid vulnerabilities in this
The best practices with OnSecurity’s cyber security checklist 2023. Identify crucial steps to protect data
A simple bug in the ‘forgotten password’ and password reset mechanism led to a malicious
Penetration testing is a mostly manual process carried out by experienced consultants, using some of
Discover how one of our pentesters found that client-side security controls hadn’t been enabled in
Here we delve into the evolution of ransomware with OnSecurity’s article on Triple Extortion ransomware
Delve into an effective external vulnerability scanning strategy and adopt best practices. This guide offers
Discover why over half of UK businesses are hiring CISOs to combat cyber threats, with
New report reveals increasing cyber threats to drilling rigs, potentially leading to severe safety incidents.
Explore how remote working can define an organisation’s agility and crisis response, all while also
Explore the journeys of women in cybersecurity at OnSecurity, with insights from Product Manager Beth Watts on navigating and thriving in tech.
OnSecurity’s CEO emphasises a merit-based hiring approach, career development, and life/work balance. By nurturing talent, fostering a supportive workplace, and offering flexibility, OnSecurity has boosted productivity and employee satisfaction.
Learn how Mike Oram, VP of engineering at OnSecurity, taught himself coding, and how to navigate coding in the age of AI.
Explore API pen testing, its benefits, common vulnerabilities, and best practices to strengthen your business’s security posture.
The risks of typosquatting and its implications for online security. Explore cybercriminal tactics, real-world cases, and protective measures for your brand.
Radar by OnSecurity: an advanced tool for threat intelligence. Learn its role in enhancing security, achieving ISO certifications, and prioritising threats
Understanding the importance of cybersecurity for SaaS companies. Explore the awareness of threats and proactive measures to safeguard data and systems.
Discover how we exploited a SSRF vulnerability in a web application to acquire API credentials and access AWS S3 buckets, showcasing cybersecurity risks.
Delve into an overview of 2021’s significant data breaches. Explore the most notable incidents and learn from them for better data security practices.
Experience real-time communication with your penetration test testers during the testing process for enhanced collaboration and continuous timely updates.
Discover OnSecurity’s innovative approach to penetration testing. Our client-collaborative efforts have streamlined booking to just 5 minutes for efficiency.
Look into IT Security through the eyes of a pen-tester. We’ll uncover the inner workings and provide in-depth insights for a comprehensive understanding.
Unveiling the origins of the first PC virus prank. Dive into the history of pioneering cyber mischief and understand the Elk Cloner Virus in OnSecurity’s blog.
Unravel the essentials of ISO 27001 certification in this blog. Explore critical insights and guidelines for a robust security management system.
Radar by OnSecurity: an advanced tool for threat intelligence. Learn its role in enhancing security, achieving ISO certifications, and prioritising threats
Discover how we exploited a SSRF vulnerability in a web application to acquire API credentials and access AWS S3 buckets, showcasing cybersecurity risks.
Join our unique and growing pen-testing company and showcase your talent. We’re seeking skilled pen-testers who stand out from the crowd, apply here now!
What is a penetration test and why should I get one? A penetration test (aka pen-test), is an authorised simulated
Discover effective strategies to streamline and simplify penetration testing. Learn how to alleviate the complexities for a more efficient testing process.
Ready to experience the future of pentesting?
Discover how combining expert insight with automation leads to faster, more precise, and high-impact penetration testing.