We are proud to announce that risk3sixty and its elite Armada team has officially achieved CREST Accreditation for Penetration Testing, one of the mos…
Introduction While testing internet-connected devices for vulnerabilities, our team discovered a Denial of Service (DoS) condition in a Netgear router…
Copilot makes identifying mis-configurations in SharePoint much faster and easier to see. It honors existing permissions via Microsoft Graph: if a use…
Security Advisory The Armada team has observed active exploitation of an ongoing security risk in M365. Due to the low effort required to exploit this…
Introduction JSON Web Tokens (JWTs) have become a cornerstone of modern web application authentication. Their stateless nature and flexibility make th…
Late on the evening of February 11th, 2025, a brand‑new Telegram channel named shopotbasta (“Basta Whisper” in Russian) lit up with a link to a 1 GB M…
In this blog post, we will discuss attacking a self-hosted GitLab instance. GitLab is an open-core CI/CD platform that allows for the development and …
In the constantly evolving financial services landscape, where security threats are significant, and regulatory pressures are abundant, staying ahead …
As penetration testers and red team operators, we often find ourselves conducting engagements from Linux-based operating systems. This preference is p…
Threat actors constantly evolve and innovate, leaving organizations vulnerable to attacks from an ever-growing list of tactics and techniques. While r…
The rapidly evolving, complex cybersecurity landscape places Active Directory (AD) at the forefront of many cyber threats. As a crucial component of n…
In our daily lives, we interact with a myriad of devices. Many of which may seem simple on the surface, but in fact, are powered by sophisticated tech…