Field Notes
Straight answers on testing, insurance, and staying out of trouble.
No fear-mongering and no jargon. Just the questions Arizona business owners actually ask us, answered plainly.
-
Windows Zero-Day CVE-2026-85880: What to Do Now
An exploited Windows ALPC flaw lets code escape a sandbox to SYSTEM. It hits Windows 10 and older servers. Patch, reboot, and check end-of-life machines.
-
Windows Zero-Day CVE-2026-81963: What to Do Now
Microsoft patched an exploited Windows Update Stack zero-day on Sept 8, 2026. Confirm the update installed, and that every machine has actually rebooted.
-
Proxmox Vulnerability: What to Do About CVE-2023-54391
A Proxmox VE authentication bypass is being exploited now. Confirm your version, upgrade off end-of-life 7.x, and check whether your admin port faces the internet.
-
Common Penetration Test Findings in Small Businesses
The most common penetration test findings in small businesses: reused passwords, missing MFA, stale accounts, flat networks, and how each one gets fixed.
-
How to Choose a Penetration Testing Company
How to choose a penetration testing company: the questions to ask, the red flags to walk away from, and why the sample report tells you more than the pitch.
-
PaperCut Vulnerability: What to Do About CVE-2026-82078
A PaperCut vulnerability is being exploited now. Confirm your version, apply Emergency Patch Release 2, and check whether the print server is on the internet.
-
How to Prepare for a Penetration Test
How to prepare for a penetration test: scope in writing, a named contact, current backups, and why you should not clean up your network before we look.
-
Penetration Testing for Small Business: What to Buy
Penetration testing for small business, in plain English: what a right-sized test costs, why your insurer is asking for one, and what you should not buy.
-
What to Do After a Penetration Test
What to do after a penetration test: work the fix list in the right order, get the fixes retested, and turn the results into proof your insurer accepts.
-
Continuous Code Scanning vs an Annual Code Review
Continuous code scanning vs an annual code review: what each one catches, what each one misses, how each is priced, and why most software teams need both.
-
How Much Does an Internal Penetration Test Cost?
How much does an internal penetration test cost? Real numbers, what moves the price, and why internal testing is usually bundled with external. No quote wall.
-
What Does a Penetration Test Report Look Like?
A penetration test report has an executive summary, findings ranked by real risk with proof, and a fix list. Here is every section, explained plainly.
-
Does PCI Require a Penetration Test?
Does PCI require a penetration test? Only for some merchants. A plain-English guide to which PCI SAQ needs one, how often, and who can perform it.
-
How Often Should You Scan Dependencies for Vulnerabilities?
How often should you scan dependencies for vulnerabilities? Continuously: on every build, weekly, and on new CVEs. Why, and how it differs from a pentest.
-
Penetration Testing vs Secure Code Review
Penetration testing vs secure code review, in plain English: what each finds, what each misses, what they cost, and which one your business actually needs.
-
What Is a Secure Code Review?
A secure code review is a security-focused read of your application's source code. What it covers, what it costs, and when your business actually needs one.
-
How Long Does a Penetration Test Take?
How long does a penetration test take? For most Arizona SMBs, hands-on testing runs a few days and the full engagement about one to two weeks. What drives it.
-
How Much Does a Penetration Test Cost?
How much does a penetration test cost? A plain guide to real pentest pricing, what actually moves the number, and why the cheapest quotes are usually just a scan.
-
Does HIPAA Require a Penetration Test?
HIPAA never says 'penetration test' by name. Here is what the rule actually requires, why most Arizona practices still get one, and what it costs.
-
Does Your Cyber Insurance Require a Penetration Test?
Wondering if your cyber insurance requires a penetration test? Here is the straight answer for Arizona businesses, what carriers want, and what it costs.
-
Penetration Test vs Vulnerability Scan: The Difference
Penetration test vs vulnerability scan, explained in plain English: what each one is, when you need which, and why insurers usually want the real test.
-
What Is a Penetration Test? A Plain-English Guide
What is a penetration test? A clear, jargon-free guide to how pen testing works, the types, what you get, and what it costs for a small business.