Our best in class red team can deliver a holistic cyber attack simulation to provide a true evaluation of your organisation’s cyber resilience.
Leverage the team behind the industry-leading Web Application and Mobile Hacker’s Handbook series.
MDSec’s penetration testing team is trusted by companies from the world’s leading technology firms to global financial institutions.
Our certified team work with customers at all stages of the Incident Response lifecycle through our range of proactive and reactive services.
Aug 14th, 2026
Written by: Admin
ActiveBreach
Introduction We closely monitor the detection mechanisms employed by EDR sensors to better understand how they identify suspicious activity. Recently, we observed that one of the major players in the…
Jul 10th, 2026
Written by: Admin
All
Craig S. Blackie (MDSec) and Darren McDonald (AmberWolf) | 10 July 2026 A joint discovery, published in parallel on the AmberWolf and MDSec blogs. Summary Dell stores its BIOS administrator…
May 28th, 2026
Written by: Admin
ActiveBreach
28/05/2026 Introduction A few years ago we looked at how Visual Studio Code extensions could be used for initial access in red team engagements; at the time, the results were…
Oct 1st, 2025
Written by: Admin
All
In recent months, a series of high-profile cyber attacks have hit the UK’s retail and automotive industries, targeting major companies like M&S, the Co-op, Harrods, and Jaguar Land Rover (JLR)….
Oct 29th, 2024
Written by: Admin
All
Following on from our blog post in September, Finding Dora. DORA sets a new standard for how financial institutions and service providers within the EU should handle their digital operations….
Oct 28th, 2024
Written by: Admin
All
Web Application Firewalls (WAFs) help to protect web applications by monitoring, filtering, and blocking HTTP traffic to and from a web service. However, WAFs are too often relied upon as…
Apr 25th, 2024
Written by: Admin
ActiveBreach
VirtualBox is a popular open source, cross-platform, virtualization software developed by Oracle Corporation. Earlier this year we identified an arbitrary file move vulnerability in the VirtualBox system service service that…
Feb 12th, 2024
Written by: Admin
ActiveBreach
The Directory Service is the heart and soul of many organisations, and whether its Active Directory, OpenLDAP or something more exotic, as a source of much knowledge it often acts…
Jan 12th, 2024
Written by: Admin
ActiveBreach
Overview Visual Studio is a complex and powerful IDE developed by Microsoft and comes with a lot of features that can be interesting from a red team perspective. During this…
Sep 27th, 2023
Written by: Admin
ActiveBreach
Overview See no evil, hear no evil, speak no evil. This Japanese maxim epitomises the EDRs coming up against our latest release of Nighthawk. Following copious amounts of research and…