Lessons from building SCARAB (web app) and IPA (infrastructure): where LLM agents genuinely help a pentest, where they confidently make things up, and the architecture choices that keep them honest.
Read more →The official Greenbone Community Edition compose stack works, but the first hour is confusing. Here's how to tell a slow feed sync from a stuck one, why gvmd crashes during CPE matching, and the small fixes that save you an afternoon.
Read more →Your custom ESXi ISO found the Realtek NIC during install, then the NIC vanished after reboot. Here's why, and the five-minute fix that needs no USB, no network, and no PowerCLI.
Read more →Why the real AI moat in cybersecurity isn't the model — it's how you use it. There's a conversation happening in cybersecurity boardrooms that needs a hard reset. Too many mid-market and startup security companies are still talking about AI like it's
Read more →Apple makes it easy to use a custom domain with iCloud Mail. The setup wizard walks you through adding MX records, an SPF record, a DKIM CNAME, and a DMARC policy to your DNS. The defaults are designed to be safe and non-disruptive during initial setup — but if you
Read more →Introduction Metasploitable3 is an intentionally vulnerable virtual machine designed for security training and penetration testing practice. While the official build process uses Vagrant and VirtualBox, many security professionals prefer running their lab environments on Proxmox for better resource management and isolation. This guide shows you how to get Metasploitable3 running
Read more →An innovation lab focused on building practical security and productivity tools. Home to projects like PEMLY and Chaos Hub, exploring the intersection of security, automation, and user experience.
A Django-based web application for managing your own Certificate Authority. PEMLY wraps CloudFlare's CFSSL toolkit, providing a clean, modern interface for PKI operations without requiring deep cryptographic expertise.
An iOS app that subscribes to external ICS calendars and syncs them into local calendars using EventKit. Features SwiftData storage, CloudKit sync diagnostics, and seamless calendar aggregation for managing multiple calendar subscriptions.
An AI-powered platform that automatically identifies and catalogs book references from podcast episodes, building a searchable database for listeners. Currently indexing The MeatEater Podcast and The Rest Is History.
Cody Chamberlain, NetSPI Head of Product, discusses the three key elements to implementing a successful data breach communication strategy; an incident response plan, open communication, and transparency.
Read more →Data breaches are occurring more frequently than ever before, even when organizations have the best security precautions in place. According to the Identity Theft Resource Center’s 2021 Data Breach Report, data breaches rose 68% from the previous year, reaching the highest number ever reported. That said, while a cyberattack may be out of an organization’s control, one thing it can and should control is how it communicates a breach.
Read more →
Rick Howard speaks with Cody Chamberlain from NetSPI on Breach Communication. Roscosmos publishes locations of Western defense facilities…and subsequently says...
Read more →
A discussion with Mitch Ashley about NetSPI's inaugural Vision Report. We discussed trends, remediaton guidance and the future of the resarch report.
Read more →
The Cody’s as they are “affectionately nicknamed” shed light on how technology alone cannot solve the greatest cyber security challenges. It is achieved when you effectively leverage technology to maximize the value of human creativity, experience and ingenuity."
Read more →