Blog - Warpnet

Waarom Continuous Security Monitoring onmisbaar is voor structurele beveiliging

Why Continuous Security Monitoring is Indispensable for Structural Security

Cyber threats are constantly evolving, which means traditional security measures quickly become inadequate. This is where Continuous Security Monitoring (CSM) comes into play.

Our top 5 cyber incidents of 2025

2025 is almost upon us! This year showed once again that no one is immune from cyber threats. In this blog post, we look back at five cyber incidents from 2025 that have stuck with our colleagues the most. We reflect on what went wrong, how the attacks were able to take place and the impact on the organizations involved.

Deleting the BCD through COM as low privileged user

During his research into Component Object Model (COM) and DCOM (Distrubuted COM), our colleague Remco stumbled upon an interesting vulnerability in the Windows SearchIndexer process. This vulnerability allowed a low privileged user (user without administrative privileges or any additional tokens), to let the SearchIndexer process delete all registry keys under the HKLM\BCD registry key, essentially making the system unbootable.

Waarom een Security Operations Center meer veiligheid biedt dan alleen een virusscanner

Why a Security Operations Center provides more security than just a virus scanner

Do you still rely solely on virus scanners, like Microsoft Defender and Bitdefender, for your organization's security? Then it's time to look further. A Security Operations Center (SOC) offers more security than just a virus scanner.

Operational Technology: Infrastructural Awareness

Operational Technology. It is everywhere. Did you know that OT powers our most critical infrastructures? Infrastructures like electricity grids, water purification plants, airports, transportation, and food and healthcare industries are all dependent on this domain. The talk about the IT & OT convergence is booming, and with that, the need for improved cybersecurity measures grows alongside it.

CVE-2025-26651: Pressing the LSM kill switch

Revealing a vulnerability in Windows Local Session Manager (LSM) that causes it to crash

PwnDoc: Hacking a Reporting Tool

Finding 5 CVEs in the PwnDoc pentest reporting tool, angular-expressions and docx-templater. This includes multiple 1-click Remote Code Execution vulnerabilities by escaping the JavaScript sandbox in the templating engine.

Configureer DANE en DNSSEC voor Exchange Online

Configure DANE and DNSSEC for Exchange Online.

Looking for ways to improve the security of your e-mail traffic? Microsoft announced in October full support for the email security standard DANE on Exchange Online.

Warpnet CTF 2024 - Final Challenge

At the end of September, we hosted an online week-long Capture The Flag event on our Hacklabs platform. Participants had...

De menselijke factor in cybersecurity – Social Engineering

The human factor in cybersecurity - Social Engineering

Cybercriminals exploit employee gullibility through social engineering. In this article, we will tell you more about social engineering pen testing techniques and show you what our pen testers can find during a test.

1 2 Next »