The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
Attack Surface Change Detection: How Vexta Tracks What's New Since Last Scan
Vexta diffs assets and endpoints across scans and fingerprints JS files by hash, so a hunter can see exactly what changed on a target since the last pass.
GitHub Dorking for Bug Bounty: How Vexta Hunts Leaked Secrets and Endpoints
Vexta runs configurable GitHub and GitLab code search dorks for leaked secrets, exposed configs, and internal endpoints as part of its passive recon pipeline.
Subdomain Takeover Detection: How Vexta Finds the CNAMEs Nobody Is Watching
Vexta enumerates subdomains through a seven-stage pipeline and fingerprints CNAMEs against 30+ cloud and SaaS providers to catch subdomain takeover before an attacker does.
Passive Recon for Bug Bounty: How Vexta Pulls From 40+ Sources Before Sending a Packet
Vexta's reconnaissance engine builds a target's attack surface from more than 40 passive OSINT sources before any active probing starts, so scope mapping starts quiet.
The Vexta Confidence Score: A Vulnerability Prioritization Score That Uses Six Signals
Vexta's Confidence Score combines severity, detector confidence, proof status, reachability, EPSS, and CISA KEV into one 0-100 number, so a hunter knows which finding to open first.
How Vexta Verifies Every Vulnerability It Finds
Vexta's Proof-of-Exploitation engine re-tests every finding with a safe, non-destructive probe and returns proven, refuted, or unproven, so a hunter never has to guess which alerts are real.
AI's Hidden Threat: Attackers Don't Quit, They Retry - What Your SOC Needs to Do
Attackers are now using AI to make failed attempts cheaper and faster to retry. This shifts the defense burden, requiring SOCs to move beyond isolated alerts and adopt a context-driven, adaptive security posture.
Placeholder Domains: The Hidden Supply Chain Risk You're Not Auditing
A seemingly harmless placeholder domain, 'third-party.com,' is now actively serving malware, turning development documentation into a direct attack vector. We must critically re-evaluate our dev practices and harden against this subtle but potent threat.
cPanel Root Flaw: What It Means for Server Security and Your Practice
A recent critical vulnerability in cPanel's CalDAV/CardDAV service allowed root access, highlighting serious privilege escalation risks in shared hosting. This incident underscores the importance of stringent patching, robust isolation, and proactive vulnerability management for any hosting environment.