Black Box vs Grey Box vs White Box Penetration Testing: Which Do You Need?
Black, grey and white box testing compared for Cyprus businesses — what each finds and how to choose the right depth.
// research & write-ups
blog
Penetration Testing vs Vulnerability Scanning: What Cyprus Businesses Need to Know
The real difference between scanning and penetration testing, why it matters for compliance in Cyprus, and which one you need.
How Much Does a Web Application Penetration Test Cost in Cyprus?
What drives web app pentest pricing for Cyprus businesses, why cheap quotes are just scans, and how to budget for a real test.
What Is Web Application Penetration Testing? A Guide for Cyprus Businesses
A plain-English guide for Cyprus businesses: what web application penetration testing is, how it works, and how it supports GDPR and NIS2.
Command Injection in Progress LoadMaster (CVE-2026-8037): When Your Load Balancer Becomes the Front Door
A CVSS 9.6 OS command-injection flaw in Progress LoadMaster lets attackers run commands through the management API of an internet-facing appliance. Why perimeter devices deserve the same scrutiny as your apps — a Cyprus…
N-able N-central Under Active Attack (CVE-2026-18577): A Wake-Up Call for Cyprus MSPs and Their Clients
An authentication-bypass flaw in the N-able N-central RMM platform — an incomplete fix for CVE-2026-18556 — is being exploited to seize admin access and pivot into managed endpoints. What it means for Cyprus businesses…
Critical GitLab Flaw (CVE-2026-19478): A Supply-Chain Risk for Cyprus Dev Teams
A critical GitLab vulnerability, CVE-2026-19478 (CVSS 9.4), lets unauthenticated attackers modify or delete public projects and rewrite their data with no credentials. For the many software and fintech teams building in Cyprus, that is…
Copilot “CoSnitch” Shows Why AI Assistants Are a Live Attack Surface
Researchers at Varonis disclosed CoSnitch, a flaw that made Microsoft Copilot exfiltrate data without tripping obvious alarms — reportedly the third such Copilot flaw this year. Any Cyprus business connecting AI assistants to its…
Grok “Context Injection” Leak: A Warning for Every Cyprus AI Product
Adversa AI showed an attack on xAI’s Grok — “Cryptographic Context Injection” — that leaks a user’s identity, location and conversation to an attacker’s server. The technique generalises to almost any public LLM app.…
MCP Tool Poisoning: The Hidden Risk in AI Agent Tool-Chains
As the Model Context Protocol (MCP) becomes the standard way to connect AI agents to tools, researchers are documenting tool-poisoning attacks — malicious instructions hidden in tool descriptions the model reads but users never…