-
Cyber decoys for defenders: what CISA's new guidance actually says
In September 2026 CISA published guidance on cyber decoys — lures, tripwires and honeytokens — for detection and response. We walk through the recommendations and show how they translate into practice through deception.
-
OT/SCADA — Global Security Standards and Audit & Testing Requirements
Comparative study of OT/SCADA security standards: audit requirements, penetration testing and vulnerability assessments across Europe, the US, Asia-Pacific and the Middle East.
-
From Serialized Bytes to Shell: Exploiting Java Deserialization in Spring HttpInvoker
Exploiting Java deserialization in Spring HttpInvoker — a penetration testing case study from reconnaissance to remote code execution.