Resources
How CASM® Works: Part 1 – Asset Discovery with ML
THE FOLLOWING IS A LOW-TO-MODERATE TECHNICAL OVERVIEW OF HOW CASM® (CONTINUOUS ATTACK SURFACE MANAGEMENT) PERFORMS ASSET DISCOVERY USING MACHINE LEARNING. “You can’t manage what you don’t...
IT Infrastructure Modernization: Hidden Costs and Strategic Risks
Legacy IT infrastructure represents one of the most significant yet understated risks to modern business operations. While these aging systems continue functioning day-to-day, they're silently...
Revealing Hidden Password Vulnerabilities with Substring Analysis
In the rapidly changing world of cybersecurity, one truth remains: passwords continue to be a primary target for attackers. Even as new authentication methods emerge, many organizations still rely...
Know Your Adversaries, Improve Your Defense
Why Your Pentest May Not Be Enough In today’s rapid change, cybercriminals continuously refine their tactics, techniques, and procedures (TTPs) to exploit vulnerabilities and evade detection. For...
Dev or Dummy: Developing My First App with ChatGPT
From Zero to “Not Too Bad” in Two Months When I started working on Hash Master 1000, I had a vision of what I needed, but I lacked the capability to develop it myself. I wanted a single tool that...
Hash Master 1000: A Modern Password Analysis Tool
Password cracking has come a long way, but what about password analysis? Back in the day, Pipal was our go-to tool for basic statistics and base-word identification. In 2017, two of SynerComm’s...
Executing Shellcode via Bluetooth Device Authentication
While reading through the MSDN documentation for Bluetooth, I started thinking about what opportunities there were to leverage Bluetooth for offensive purposes. I ended up creating a shellcode...
The Growing Importance of Penetration Testing in 2025 and Beyond
As we welcome 2025, the cybersecurity landscape continues to evolve at an unprecedented pace. With the surge in sophisticated cyber threats and increasingly complex IT environments, the role of...
Why Network Changes Keep Failing (And How to Fix It)
"One typo, one line of code, and it's the CEO calling at midnight asking why the business stopped." This nightmare scenario plays out more often than anyone would like to admit in enterprise...
Proactive and Persistent: How SynerComm’s Pentest Playbooks and the CASM® Platform Enable Continuous Penetration Testing
In today’s cybersecurity landscape, vulnerabilities evolve faster than ever, and attackers exploit them at unprecedented speed. To help organizations stay ahead, SynerComm has developed a...
Continuous Penetration Testing Powered by CASM®
Welcome to the future of cybersecurity, where Continuous Penetration Testing (CPT) meets the cutting-edge technology of Cyber Asset Attack Surface Management (CAASM) – a dynamic duo that's...
Western Bank Alliance Case Study
Western Alliance Bancorporation (NYSE: WAL) is one of the country’s top-performing banking companies. Its primary subsidiary, Western Alliance Bank, Member FDIC, offers a full spectrum of tailored...
Evading Defender by Embedding Lua into Rust
I recently started learning about the world of game modding. I have always played games on a console, so modding was not something I ever pursued. However, after picking up the PC version of my...
The Cybersecurity Framework Gets a Facelift
NIST CSF 2.0 brings new content to broaden its audience and new tools to help ease implementation. By Jeffrey T. Lemmermann, CPA, CISA, CITP, CEH In 2013, the National Institute of Standards...
AI and Machine Learning in Threat Detection: Navigating Advancements and Challenges (Part 2)
In part one of this series, we discussed the evolving landscape of cybersecurity and the roles artificial intelligence (AI) and machine learning (ML) play in the security space today. Here in part...