??️ 'Tis the Season of Bogus Discounts and Gift Card Scams. Learn how threat actors exploit holiday cheer and why you should pay your cybersecurity staff more this Christmas. #CyberSecurity #HolidayScams #InfoSec ..read more

? New Case Study by Andrew and Jeremy! “Imposter Repos: Phishing Software Engineers on GitHub” ? Learn how we crafted a deceptive GitHub Organization to compromise Software Developers. #CyberSecurity #GitHub #Phishing #SoftwareEngineering Read more ..read more

Is your digital armor as flimsy as testing a bulletproof vest with a squirt gun? ?? Our latest blog post reveals why top-notch penetration testing is your secret weapon against threat actors. ? #CyberSecurity #InfoSec #PenetrationTesting ..read more

?️‍♂️?Discover how we emulated a ransomware attack, impersonating #GoToMeeting, to test our client’s defenses in our latest case study! ? #RedTeam #InfoSec #Ransomware #CybersecurityAwarenessMonth ..read more

We leave digital footprints everywhere we go online. Whether we’re leaving a review on Yelp, commenting on a YouTube video, or posting to our social media accounts, our online activities paint a remarkably comprehensive picture of our personal lives. While these digital footprints may seem innocuous—after all, who isn’t online these days—in aggregate they can ..read more

Since you’re reading this article today, you may not necessarily be the most outdoorsy type. So, rather than being bit by mosquitos and getting a sunburn – let’s celebrate today in the cyber wilderness, where “hunting” takes on a new meaning. In this virtual landscape, threat hunters are the ones tagging game. Armed with cutting-edge ..read more

Saving CSRF – Client-Side Path Traversal to the Rescue For quite some time now, we’ve seen a clear trend towards using a lot of client-side code with frameworks like React, Angular, Vue.js, NextJS, Vue, and others. Instead of relying heavily on the server, much of the logic and code now runs directly in the browser ..read more

Hollywood has always had their creative takes on hacking in movies and TV shows, ranging from random concepts pulled out of thin air to almost fully realistic hacking scenes. In this blog, we’re going to evaluate techniques from classic hacking movies and shows that are still relevant today. Sneakers: Physical Red Teaming Sneakers (1992) is ..read more

Boston, MA – 7/17/2024 Netragard, a leader in cybersecurity services specializing in ethical hacking and advanced penetration testing, is proud to announce its sponsorship of Team Ovarian Cancer in the upcoming Pan-Mass Challenge (PMC), the nation’s most successful athletic fundraising event dedicated to conquering cancer. This Massachusetts-based charitable bike-a-thon, scheduled for the first weekend of ..read more

On Monday July 1, 2024, the Qualys Threat Research Unit (TRU) dropped a new Remote Unauthenticated Code Execution (RCE) vulnerability.  This vulnerability, CVE-2024-6387, also known as “regreSSHion,” affects OpenSSH’s server (sshd). This blog post will cover the details of this critical vulnerability and provide actionable steps to mitigate its risks. What is CVE-2024-6387? This CVE ..read more