Portal trust: how to verify the login destination
A consistent journey helps customers recognize the service. Security assessment must also establish where the browser takes authentication.
Blog
Guides pratiques sur le pentesting, la recherche de vulnérabilités et les outils de sécurité à base d’IA.
Les articles sont publiés en anglais et en portugais.
Articles
150 articles
PHP2Shell: did the patch reach the process serving your site?
Inventory needs to reach the PHP instance processing requests. Connect packages, execution mode and active processes while separately investigating the earlier period.
WhatsApp and NSO: connecting a control's scope to its evidence
A written restriction and an investigation's conclusion each need criteria. Connect the action examined, the available evidence and the questions still open.
GitLab and Onigmo: what proves the update is complete?
Installing the package is one step. Acceptance needs to connect the running GitLab instance, its database and the development workflows your business uses.
HOOKEDGE: who confirms the access tunnel has closed?
A session marked complete in a ticket may remain open in the infrastructure. Check the existing connection, new attempts and internal reach before accepting closure.
AI agents: who receives the data and substantiates the audit?
A provider name in an interface and a security score are insufficient acceptance evidence. Check the data route and how the reported result can be reproduced.
Broadcom WPS: did the fix reach your router firmware?
An answer about a component does not close the review of installed equipment. Connect the research, delivered firmware and the decision about router use.
OpenCode Console: proving provider API key revocation
Removing a credential from a tool and ending its validity at the issuer are different decisions. Structure replacement around accountable owners and evidence.
ConnectWise and Microsoft 365: response continues after disabling the app
Suspending an integration can contain new sign-ins and interrupt recovery at the same time. Response needs to examine remaining access and business continuity.