Latest Blogs, News And Industry Tips

Security should be important to everyone. Our blog features articles regarding your business’ security and different aspects to consider.

Building Cybersecurity Policies as a Small Business: A Practical Guide
June 25, 2025
How Can Enterprise Businesses Tackle Remote Working Security Risks?
June 19, 2025
Much Better Adventures Strengthens Cyber Resilience with Seamless, Real-Time Pentesting from OnSecurity
June 19, 2025
What is MFA Fatigue, and How Can Businesses Prevent It?
June 18, 2025
Five Ways to Protect your Business from Deepfake Scams
June 11, 2025
The Top 5 Penetration Testing Providers in the UK
June 10, 2025
Menna Builds a Stronger Security Foundation with OnSecurity’s CREST-approved, AI-Augmented Pentesting Platform
May 29, 2025
How Our Collaborative Pentesting Approach Catches What Single Testers Miss
May 29, 2025
We Asked a Pentester 5 Critical Questions about Cybersecurity
May 16, 2025
Why are Traditional Penetration Testing Methods Outdated?
May 2, 2025
How to Save Time and Money on Pentesting Without Compromising Quality
April 29, 2025
What is a Brute Force Attack in Cyber Security?
April 10, 2025
End-to-End Pentest Orchestration: What Security Leaders Need to Know
April 7, 2025
What is Hashing in Cyber Security?
March 31, 2025
Collaborative, not Competitive: Is AI-augmented pentesting the solution to a future-proof cyber strategy?
March 28, 2025
What is Ransomware? Causes and Prevention Strategies
March 27, 2025
Employee Spotlight: The Changing World of Cyber Sales
March 18, 2025
5 Tips on How To Avoid Phishing
March 18, 2025
What is Quishing in Cybersecurity?
March 18, 2025
Top 5 SaaS Cybersecurity Threats for 2025
March 18, 2025
ISO27001 vs SOC-2, Type 2: An Evaluation
March 5, 2025
What is API penetration testing?
February 26, 2025
Penetration Testing vs. Vulnerability Scanning
February 26, 2025
What is Social Engineering in Cyber Security?
February 26, 2025
What's the difference between ISO27001 and Soc 2, Type 2?
February 25, 2025
A Guide to iOS Penetration Testing
February 21, 2025
Four Founders, One Purpose: in Discussion with OnSecurity’s CCO
February 19, 2025
What is Spoofing in Cyber Security?
February 18, 2025
How Much Does Pentesting Cost?
January 30, 2025
What is Network Penetration Testing?
January 28, 2025
A Guide to Android Penetration Testing
January 28, 2025
What is Smishing in Cybersecurity?
January 28, 2025
Penetration Testing for Small Businesses
January 24, 2025
What is the Difference between Internal vs External Penetration Testing?
January 14, 2025
How can Internal Penetration Testing Strengthen your Security Posture?
January 13, 2025
External Penetration Testing Methodology
January 10, 2025
Firewall Penetration Testing: Processes and Benefits
January 6, 2025
A Year in Review with OnSecurity’s CEO
December 19, 2024
What is Dora Regulation? A Guide to Achieving Digital Operational Resilience
December 10, 2024
From Paediatric Oncologist to Pentester: A Remarkable Career Journey
December 9, 2024
Ethical hacking vs penetration testing: what is the difference?
November 27, 2024
What is a manual penetration test?
November 26, 2024
How to safely use Public WiFi: Risks and Recommendations
November 8, 2024
Employee Spotlight: Navigating the Cybersecurity Industry as a Woman
November 8, 2024
OnSecurity Exceeds Expectations Again: Strengthening Sitehop’s Security Posture with Real-Time Reporting
November 8, 2024
4 Founders, 1 Purpose: An Exclusive Founders Spotlight
October 11, 2024
Understanding the Mind of a Cybercriminal
October 9, 2024
Learning to Self Code, Navigating Change, and Coding in the age of AI: Staff Spotlight
September 16, 2024
Your business needs regular penetration testing. Here’s why.
September 9, 2024
How to become a software engineer
August 29, 2024
OnSecurity supplies trusted CREST-accredited testing for its customers
July 8, 2024
OnSecurity receives strategic growth investment of £5.5m
June 10, 2024
OnSecurity’s vulnerability scanning tool helps businesses to stay on top of their security
May 17, 2024
Cloud Security Challenges in Business Environments
April 26, 2024
SaaS-based application uses OnSecurity for it’s penetration testing
April 15, 2024
Code Audits in Business Security - why is it important?
April 10, 2024
OnSecurity supports ParentPay with its manual pentesting service and comprehensive portal
April 4, 2024
Securing Subdomains: Mitigating Financial Risks Effectively
March 7, 2024
A Deep Dive into SSDLC: From Planning to Deployment
February 5, 2024
Leading Care Management provider uses OnSecurity for pentesting
January 26, 2024
Yonder chooses OnSecurity as its Cybersecurity partner
November 12, 2023
Understanding the NIST Framework to protect your business
October 18, 2023
ISO 27001 Certification - Everything you need to know
October 18, 2023
What is PCI DSS, why do you need it and how do you secure it?
October 18, 2023
Learning about SOC 2 (Systems and Organisation Controls 2)?
October 18, 2023
RPMG Select OnSecurity as their offensive security partner
August 24, 2023
Typosquatting: The impact it can have on your businesses
August 15, 2023
Understanding Cloud Native Security Systems - What is it?
August 8, 2023
Understanding Hybrid Cloud Security - What is it and why?
August 1, 2023
Radar - The Threat Intelligence Tool Created by OnSecurity
July 25, 2023
Pentesting with OnSecurity - A Lucra-tive Experience!
May 15, 2023
MeVitae chooses top talent again: A Pentest Partnership
April 4, 2023
Pentest Files: SQL Union Injection with OnSecurity
March 20, 2023
Default Tomcat Host Manager Credentials Lead to RCE
February 28, 2023
YuLife Chooses OnSecurity as Their Trusted Pentest Partner
February 9, 2023
OnSecurity's Essential Cybersecurity Checklist for 2023
February 9, 2023
In the know: Top SaaS Cybersecurity Threats in 2023
January 23, 2023
PFiles: More EC2 Credential Retrieval through Server-Side Request Forgery
November 25, 2022
Understanding The Modern Cyber Criminal and How They Work
November 19, 2022
Radar: How And Why You Can Stamp Out Fashion Fraud
November 18, 2022
PFindings: Bypassing Freemium with client-side security controls
October 13, 2022
What is a Penetration test and why is it important for you?
September 1, 2022
Smashing the password reset function for fun and profit
August 19, 2022
You just completed your pentest. Now what do you do?
August 16, 2022
PFiles: Stealing Amazon EC2 Creds via Server Side Request Forgery
July 21, 2022
Pentest Files: Docker Breakout - taking precautions?
June 23, 2022
Pentest Files: Admin Account Takeover via Password Reset
May 18, 2022
Pentest Files: Error Messages And Cloud Access Keys
April 8, 2022
The Secret to Google's Security, you can find out here
April 7, 2022
When Sony BMG Exposed Millions To Malware Attacks and Why
February 22, 2022
Deep dive: The Enquiry Ordered Into GCHQ’s Deal With Amazon
February 15, 2022
Understanding Microsofts latest changes - passwords?
January 15, 2022
Info - CVE-2021-44228: Apache log4j Remote Code Execution
December 10, 2021
Phishing - ‘Is It Still One of The Biggest Cyber Threat?’
November 28, 2021
External Vulnerability Scanning - The Best Practices
November 9, 2021
Over 50% of UK Organisations Plan to Hire a CISO
November 3, 2021
The UK's Government: Plans to Defend Against Cyber Crime
October 27, 2021
Record-breaking data breaches as we close for the year
October 11, 2021
Home working rules change cloud security landscape forever
October 1, 2021
Government Servers Vulnerable To New Microsoft hack
September 22, 2021
Latest Microsoft Zero-Day Being Actively Exploited
September 7, 2021
Offshore Drilling Rigs Vulnerable To Cyber Attacks
August 25, 2021
What Is Triple Extortion Ransomware and what to look for
August 10, 2021
Breaking news: Government Launches A £700,000 Security Fund
July 19, 2021
Cybercriminals Demand $70m Ransom In ‘Colossal’ Attack
July 7, 2021
Cloud Hesitancy in Cyber - Why do people question it?
July 5, 2021
3 Simple Steps to Zero-Day Threat Protection
June 28, 2021
How A Love Letter Changed Computer Security Forever
June 10, 2021
File upload tricks and checklist
May 25, 2021
The UK Government Announces New Cyber Security Laws
May 21, 2021
Method Confusion In Go SSTIs Lead To File Read And RCE
May 20, 2021
What Was The First Ransomware Virus And Its Importants?
May 17, 2021
What Is The Most Damaging Virus Attack Is and Why?
May 4, 2021
Investigation: Why was LinkedIn targetted by phishing scams?
April 26, 2021
Is it true, do Macs get infected with malware more easily?
April 6, 2021
Understanding Pentest Vs Vulnerability Scanning: A Guide
March 25, 2021
Who Does Social Engineering Target And Why Does It?
March 19, 2021
Understaning Zero-Day Exploit And What Can I Do About It?
March 19, 2021
How The First Personal Computer Virus Was A Prank Gone Wrong
March 9, 2021
TryHackMe X HackerOne CTF WriteUp (Hacker Of The Hill)
March 3, 2021
Computer Hacker Gains Access to Florida City's Water Supply
February 18, 2021
A guide to implementing gRPC services worldwide
January 28, 2021
A Ransomware investigation: A Short History of Ryuk?
November 16, 2020
Understanding What Is The True Cost Of A Data Breach
November 13, 2020
Ransomware - How Do Hackers Choose their immediate Targets?
November 13, 2020
2014's Sony: Becoming victim of a cyber security threat
October 30, 2020
Pulse Connect Secure File Read Exploitation Research
October 20, 2020
Cyber Nightmare: Data spill - What went wrong with Wishbone?
October 13, 2020
What to do when you've been phished and how to deal with it
October 13, 2020
Improve your cyber security strategy with 7 quick wins
October 13, 2020
What went wrong with TravelEx and why did it happen?
October 13, 2020
Cyber Security For Recruitment Companies And Their Employees
October 13, 2020
Remote Working And Cyber Security: Analysis from OnSecurity
October 13, 2020
High networth individuals are spear phishing targets
October 13, 2020
Threat modelling: The Tool That You've Nerver Heard Of
October 5, 2020
Penetration Testing vs Vulnerability Scanning. Your guide.
September 29, 2020
The Tools That We Love And You Might Aswell: Clubhouse
September 22, 2020
CVE hunting in an open-source application with OnSecurity
June 10, 2020
Spot a Phishing Email: Protecting Your Inbox from Threats
May 21, 2020
Investigation: Pentesting PostgreSQL with SQL Injections
May 20, 2020
Discover Buffer Overflow - Easy Chat Server ready for OSCP
May 5, 2020
Server Side Template Injection with Jinja2 for you now
April 29, 2020
Rapid7's Project Sonar uncovered by Security Engineer
April 21, 2020
Who would you like, Bob or Alice for your next penest?
March 10, 2020
Careless With Curl? Don't Be. Curl Your Scripts First.
February 14, 2020
Abusing Kerberos From Linux - An Overview of Available Tools
January 28, 2020
OnSecurity highlights newest approach to Pentest Estimates
October 17, 2019
Spear Phishing And How Does It Differ from Regular Spam?
August 22, 2019
Persistent Access to Burp Suite Sessions A Simple Guide
August 22, 2019
What is Social Engineering? Definition Examples Tips
August 6, 2019
Addressing worrying aspects many security teams overlook
August 6, 2019
Email Phishing Explained - A ‘Foot In The Door’ For Hackers
August 1, 2019
We solved Our Problem With Audit Postgres and Elasticsearch
November 13, 2018
The Future of Penetration Test Reporting is here now
August 30, 2018
7 tips to secure your start-up's IT for the future
August 9, 2018
We Are Always Hiring For Exciting New Talent For Our Team
June 11, 2018
7 Steps To Make Your Business & Yourself More Secure
April 12, 2018
What is a Penetration test and it's importance for you?
April 1, 2018
Book a pentest in less than 5 minutes with new service
March 15, 2018
Brand New OnSecurity Portal Integration: Slack feature
March 15, 2018
Taking the pain out of pentesting with OnSecurity
February 27, 2018
Learn All About Cybersecurity with OnSecurity's resources
February 21, 2018
Protect
Scan
Radar
Pricing
Penetration Test
Overview
External Infrastructure Testing
Physical Penetration Testing
Web Application
Internal Infrastructure Testing
Mobile Application
Phishing Simulation
Cloud Security Testing
Social Engineering
Resources
About
Blog
Contact
Careers

© 2025 ONSECURITY TECHNOLOGY LIMITED (company registered in England and Wales. Registered number: 14184026 Registered office: 1 Victoria Street, Bristol, England, BS1 6AA). All rights reserved.

Terms and Conditions
Privacy