Mayhem Blog

I was recently challenged to come up with the best methods you can use in 2023 to make the systems you are developing more secure. I realized it boils down to one thing: automating offense as part of your defensive security program.

What will cyber offense start doing this year, and how can you prepare? I’m David Brumley, CEO of ForAllSecure, and here are my top three predictions for offense in 2023.

This is a Q&A series dedicated to our growing company. For this month’s profile, we talked with Shawn Santos, Director of Sales.

Web application security. OSCP exam. Life as a pen tester.

As we move into 2023, we are taking some time to look back at our accomplishments and milestones over the previous year.

In this blog post, we’ll take a deeper look at the NIST guidance for software development. In particular, we’ll look at PW 8.2 in NIST 800-218.

In this blog, we’ll take a look at Part One of the Securing The Software Supply Chain series released by the NSA, the CISA, and the ODNI.

Learn how to fuzz an API without a specification by recording transactions with the API as an HTTP Archive (.har file).

Air travel tips from The Art of Invisibility: The World's Most Famous Hacker Teaches You How to Be Safe in the Age of Big Brother and Big Data by Kevin Mitnick and Robert Vamosi.