FIELD NOTES
Technical essays, guides, and commentary on penetration testing, attack surface monitoring, and digital risk management.
A global surge in automated PHP2Shell exploitation campaigns is targeting exposed web servers, turning overlooked PHP scripts and upload handlers into persistent remote shells. Here is how Dex Security’s web enumeration service detects the exposure and neutralises the threat before compromise.
Every internet-facing asset your organisation operates is part of your external attack surface. Understanding what that includes — and how it changes — is the first step toward meaningful security.
WordPress powers a significant portion of the web, and outdated plugins remain one of the most common attack vectors. Here is what business owners need to understand.
Both are important, but they serve different purposes. Understanding the distinction helps you invest in the right approach for your organisation.
Healthcare businesses are increasingly targeted by cyberattacks. Here are the fundamental security practices every healthcare organisation should have in place.
