Operations | Monitoring | ITSM | DevOps | Cloud

Cybercriminals continue to become sophisticated and greedy as they always seem to find new ways to steal sensitive data for personal and financial gain. According to data compiled by the Anti-Phishing Working Group, it was found that there were 1,003,924 phishing attacks in the first quarter of 2025, which makes phishing one of the biggest security threats to individuals and organisations. What's more, financial and online payment sectors have become the most frequent target of hackers, making up 30 percent of all attacks worldwide.

In today's threat landscape, organizations face a constant barrage of cyberattacks targeting web applications, cloud environments, and internal networks. Security tools, monitoring systems, and compliance audits provide a first line of defense, but they often fail to capture the perspective of a determined attacker. That's where penetration testing comes in. By simulating real-world adversarial techniques, pentesting uncovers weaknesses that traditional security reviews may overlook.

In early August, in a sublet apartment on the eighth floor of a high-rise in central Tel Aviv, Aviv Yahav, a vulnerability researcher, opened a debugger and watched a memory address filled with zeros where it should have held a cryptographic secret. The affected system was a Fortinet FortiWeb appliance, a web application firewall deployed by thousands of organizations across the public and private sectors. The missing bytes were the secret used to derive session keys for authenticated user sessions.