During a routine penetration test last year, we uncovered an OS command injection vulnerability on the login page of a SaaS platform widely used in the Australian education sector. This discovery prompts the question posed in our blog title.

After our recent hiring drive, we got a lot of questions from people wanting to know how they can improve their chances of breaking into cyber as a penetration tester. To help out, we've put together this blog post to explain what we're looking for in our candidates.

In the cybersecurity industry, there's a constant stream of conversation about ethics. So, imagine my surprise when I discovered that certain Australian cyber consultancies seem to be involved in Black Hat SEO tactics, breaching Google's webmaster guidelines.

Think your password is strong? Ever trusted a password strength tool online (or maybe you don't trust anything)? You might be surprised to see how far off the mark some of the most popular password strength tools are.

You're out for a stroll and spot a house with its front door wide open. Out of concern, you try to inform the owner about the door. Unexpectedly, the owner snaps back, insisting the door is shut. This is a story about the worst vulnerability disclosure process I've ever experienced.

eSports were included this year for the Olympics, which got me thinking: can you hack your way into the Olympics? This blog shares a short story of discovering and disclosing a vulnerability to Tic Tac Bow developer, Project 99.

A month ago, I signed up for a scam. Little did I know, this rabbit hole would ultimately lead to uncovering a large scale operation, a report filed with the ACSC and a subsequent an investigation by the NSW police.