blog

Our Latest Blogs

Explore our latest blog posts and stay secure in a digital world.

Blacklock Security Achieves CREST Accreditation
May 17, 2025
Blacklock

We are proud to announce that Blacklock Security has achieved CREST accreditation for our penetration testing services.

.NET Inherent Protection against CSRF
April 17, 2025
Blacklock

Cross Site Request Forgery is one of the most happening attacks over the internet today. The attackers find it easy to exploit as it does not require any authentication information, session cookies but only require the user to be authenticated to the application. And this works on every platform.

Pentesting Thick Client Apps
April 17, 2025
Blacklock

Pentesting thick client applications is not a new concept instead the techniques adopted are new and interesting. I’m a bit lazy on explaining what thick client apps are, please refer here for more info. GTalk, Pidgin, Skype, MSN are few examples of thick client applications.

Guide to SBOM: What It Is and Why It Matters?
April 8, 2025
Blacklock

In today’s world, software is a part of everyday life, and spans almost all domains, with majorly built on third-party code and open-source software. Anyone who is concerned about better supporting their software products internally

Common Vulnerabilities Identified by DAST - Application Vulnerability Scanning
April 8, 2025
Blacklock

Wondering what DAST is and how it can help in identifying vulnerabilities? Well, you have landed on the right page.

Blacklock Joins NVIDIA Inception Program
February 20, 2025
Blacklock

We are excited to announce that Blacklock has joined NVIDIA Inception, a program designed to empower and...

Blacklock Security Joins NZ Government Marketplace: Uplifting Cyber Resilience
February 11, 2025
Blacklock

We are thrilled to announce that Blacklock Security has been officially approved as a supplier in the...

A Roadmap for Business Leaders: Enhancing Cybersecurity Maturity with PTaaS
January 23, 2025
Blacklock

In a modern digital landscape, it is not the number of cyber threats that are on the rise; it is their sophistication.

GraphQL Penetration Testing
November 7, 2024
Blacklock

We have had a couple of penetration test engagements that involved GraphQL endpoints. At first, it looked complex and we sketched out the methodology and approach to perform the penetration test. Here’s how it went,

Subscribe to our newsletter

Join our newsletter today and enhance your knowledge with valuable insights. It's quick, easy, and free!

Be a Team Player
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.