Adversis

Subscribe

Security Research Staff

A BigCommerce Security Primer

A BigCommerce Security Primer

BigCommerce is an eCommerce platform that quite a few large brands use. Let's take a look at how to make sure our BigCommerce store is configured securely. Enable Multi-Factor Authentication MFA is easily the most important thing you can do today to secure your accounts. BigCommerce makes it incredibly easy.

Your Documents, ShareFile'd

Your Documents, ShareFile'd

Adversis did some brief public research on Citrix ShareFile websites and found over 9,000 customer subdomains, over half of which have links accessible to anyone who can identify them. It’s possible your company is among them.

Your SSN Isn't a Secret

Your SSN Isn't a Secret

Your Social Security Number is not supposed to be sensitive. It's an ID, nothing more. Unfortunately, more and more platforms and online systems use it to verify your identity.

A Safe and Sound Shopify Shop

A Safe and Sound Shopify Shop

So you've opened a Shopify store. That's great news! Chances are, you're making something really special and we're excited to help make you and your customers experience secure.

Your Reconciliation Nightmare - How Attackers Target Payment Flows

Your Reconciliation Nightmare - How Attackers Target Payment Flows

Payment Flows. Thanks to platforms like Stripe, they are incredibly simple to implement and manage.

Adversis - The Beginning of Something..

Adversis - The Beginning of Something..

It was cold in Washington DC that January. Noah and I were taking a SANS training (SANS is the leader in cyber security training). The course we were taking is one of the most advanced Penetration Testing courses SANS offers, the topics cover cutting-edge hacking techniques that many enterprise cyber

ForeScout Secure Connector Local Privilege Escalation

A local privilege escalation in a security tool, who would have imagined..

Pandora's Box: Another New Way to Leak All Your Sensitive Data

Pandora's Box: Another New Way to Leak All Your Sensitive Data

Yes, the cloud is still leaking data. This time, we can't blame the SRE team though, everyone has been sharing files publicly, yes, even you probably.