TrustedSec

<p>CMMC requirements don’t exist before a contract does and that distinction matters. In this blog, we clarify what FCI and CUI obligations apply during the pre-contract solicitation phase, and where the line actually is.</p>

<p>Some of the best infrastructure improvements start with one bad afternoon. In the final part of this blog series, we walk through the configuration, release engineering, and pre-commit guardrails that came out of it.</p>

<p>We’re part of OpenAI’s Daybreak Defense Network—what does that mean for our customers? Go deeper, get to the evidence faster, and make real security improvements; in this blog, Founder and CEO David Kennedy explains how.</p>

<p>Logging isn’t a switch to flip; it’s something to tune and maintain. In this blog, we outline a four-step Active Directory logging framework covering log sizing, audit policies, detection goals, and gap analysis.</p>

<p>Meet HashcatRosetta—the Hashcat rule decoder you didn’t know you needed. In Part 2 of this blog series, we go through how it translates, analyzes, and optimizes rule files to maximize cracking efficiency.</p>

<p>You thought you knew hate_crack 👀 Well, version 2.0 changed that. In Part 1 of this latest blog series, we go through 13 new attack methods, menu restructuring, and local LLM integration.</p>

<p>Six stages. Multiple encryption layers. One static analysis. In this blog, we unpack a multi-stage malware loader combining Python obfuscation, Donut shellcode, and laZzzy PE encryption, without executing the payload.</p>

<p>The AWS access keys are in hand… now what? In Part 1 of this blog series, we break down AWS credential types, where to find them, and how to validate and use them during a security engagement.</p>

<p>Most LLM testing tools require setup, paid access, or internet; LLMHaxor requires none of that. In this blog, we walk through the latest update, including a new WebSocket adapter for modern streaming LLM applications.</p>

<p>AWS WAF logs are keeping receipts, including your session tokens. In this blog, we walk through the risk of default WAF logging configurations and the tool built to pull, analyze, and replay what gets left behind.</p>