5 Things We Are Going to Continue to Ignore in 2025
ID: 026645ac-87fa-51ed-a3b2-4022e11c03e8
STIX ID: report--026645ac-87fa-51ed-a3b2-4022e11c03e8
Feed Name: Black Hills Infosec Blog
In this webcast transcript John Strand reviews shortcomings in common penetration testing practices and organizational security — emphasizing legacy applications, management exceptions, incomplete remediation, compensating controls, cloud logging delays, MFA bypass risks, and offensive tooling (e.g., Graph Runner and DLL hijacking techniques). He offers practical guidance for prioritizing fixes, working with developers, enhancing detections, and improving vendor accountability while warning that many known techniques remain widely ignored.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.