CSO: Designing A Pragmatic Pen Testing Program
Every expert pen tester lives by their own set of rules, however, the best and the brightest adhere to some common best practices; in a recent piece in CSO, Core's own in-house guru Alberto Solino...
View ArticleAchieving Digital Provenance in the Financial Sector
The continued advancement of the efinancial landscape only continues to heighten the opportunity for cybercrime, fraud and other forms of IT-driven risk.
View ArticleBuilding a Wordlist for Dictionary Attacks
If you can't launch a brute force campaign, dictionary attacking is the way to go. Core Technical Specialist Dan Crowley offers some tips on throwing the book at something efficiently.
View ArticlePerforming Client Side Attacks via Pivoting
In this blog post, Core technical guru and co-founder Alberto Solino outlines some of the powerful capabilities available to users of CORE IMPACT Pro when performing client side attacks that seek to...
View ArticleEmerging Pen Testing Cert is CREST of Honor
The National Board of Information Security Examiners's (NBISE) backing of the CREST pen testing certification guidelines represents a vital shift in the security training environment.
View ArticleFederal Roadmap: Expressway to SCAP
SCAP is on the rise in the federal sector, with the potential to expand its reach well beyond the governments space.
View ArticleSetting a Bad Example: How Not To Validate User Input
Bypassing filters can provide a very useful lesson in how not to validate user input securely.
View ArticleKickoff Time: INSIGHT Enterprise Beta Takes the Field
As our teams in the NFL took to the field again this week, Core was preparing to send the final beta version of CORE INSIGHT Enterprise to its customers.
View ArticleCalifornia Dreaming: New Bill Lends Clarity to Breaches
California legislators continue to lead the way in the domain of data breach law, with a new bill up for approval that would require organizations to details what types of information they've lost, and...
View ArticleResearch at the Core of Intel’s McAfee Buyout
Intel's buyout of McAfee may have come as a surprise to many, but the idea of marrying chips with security is far from a new idea, in general or for the microprocessor market leader.
View ArticleVerizon Report Shows Progress, Yet Targeted Breaches Intensify
The Verizon Data Breach Report unearths some positive stats in stopping cyber-attacks, but if you read between the lines there's still a lot of work to be done.
View ArticleBlack Hat/DEFCON: The Usual Suspects
Black Hat and DEFCON are upon us again, and Core will have a significant presence. Who will make the biggest news? we should know in just a few days.
View ArticleRapid Response: Testing for the Microsoft LNK Zero Day
The Windows LNK zero day flaw is wreaking havoc around the globe, but after unleashing our Vulnerability Outbreak Alert program, CORE IMPACT Pro users are already able to test themselves for it.
View ArticleOf Serious Tests… and Public Launches
The notion of testing means many different things to many different people; today, Core Security introduces INSIGHT Enterprise, an entirely new method for performaing testing of IT security across the...
View ArticleMiami Pwnd Machine
The recent HackMiami contest produced some interesting results regarding "point-and-shoot" pen testing, but we feel like IMPACT Pro still stands up to any product in a true penetration comparison.
View ArticleGetting Schooled in Security Testing
Proactive security testing is becoming a strategic advantage for educational institutions.
View ArticleIncreasing Cyber-Situational Awareness via Enterprise Metrics
A new memo issued to federal agencies by the White House OMB pushes them to embrace more practices that will empower them with enterprise security metrics, a paradigm that Core Security is also putting...
View ArticleI Can Hear You Now: IMPACT Pro v10.5 – The People’s Version
With IMPACT Pro v10.5 we've made a bigger effort than ever before to respond to the feature requests of our customers.
View ArticleEscape From Hogwarts: Getting Away From Wizards
It's amazing how many cool things you can do (or test) when availing yourself of the manual capabilities of CORE IMPACT Pro.
View ArticleEmpowering International Cybercrime Cooperation
Two extremely important pieces of pending cybersecurity legislation took significant steps forward in Washington last week.
View Article
