Penetration Testing
AI Penetration Test
Web Application Penetration Test
Mobile Application Penetration Test
API Penetration Test
IoT Penetration Test
External Network Penetration Test
Strategic Advisory
Threat Modelling
Bespoke Threat Advisory Service
AI Red Teaming
Adversary Simulation (Red & Purple Teaming)
Knowledge Base
Prices
Company
About Us
Why Us
Partners
Blog
Contact Us

Lean Security

Penetration Testing
AI Penetration Test
Web Application Penetration Test
Mobile Application Penetration Test
API Penetration Test
IoT Penetration Test
External Network Penetration Test
Strategic Advisory
Threat Modelling
Bespoke Threat Advisory Service
AI Red Teaming
Adversary Simulation (Red & Purple Teaming)
Knowledge Base
Prices
Company
About Us
Why Us
Partners
Blog
Contact Us
December 27, 2025
Lean Security Expert
THE CREDENTIAL TIME BOMB: Why Long-Lived Cloud ...

Across AWS, Google Cloud, and Microsoft Azure environments in Australia and globally, 59% of IAM users maintain access keys that have never expired—credentials that have been active for more than one year. These long-lived credentials represent a silent but catastrophic vulnerability in your cloud infrastructure. This blog explores why long-lived credentials have become the primary attack vector for identity-based breaches, how red teams exploit them during penetration tests, and what you must do today to eliminate this ticking time bomb.

THE CREDENTIAL TIME BOMB: Why Long-Lived Cloud Credentials Are Your Biggest Identity Risk in 2025
December 21, 2025
Lean Security Expert
Fortinet "Ghost Logins": How Authentication ...

Critical authentication bypass vulnerabilities in Fortinet FortiGate and related products (CVE-2025-59718 and CVE-2025-59719) are now under active attack, allowing "ghost" SSO logins that completely sidestep normal controls and logs. For Australian organisations, this is more than a VPN or firewall problem – it is a board-level exposure that directly tests whether your external penetration testing, internal penetration testing, and red team assessment services are capable of simulating SSO abuse, identity takeovers, and lateral movement across hybrid networks.

Fortinet "Ghost Logins": How Authentication Bypass Attacks Expose Gaps in Your Penetration Testing Strategy
December 6, 2025
Lean Security Expert
React2Shell: A CISO’s Guide to CVE-2025-55182

A new security flaw called React2Shell (CVE-2025-55182) puts Australian businesses at extreme risk. It has a severity score of CVSS 10.0, which is the highest possible rating. This flaw lets hackers take full control of your servers without needing a password. It affects the popular tools React and Next.js.

React2Shell: A CISO’s Guide to CVE-2025-55182
November 26, 2025
Lean Security Expert
SessionReaper & BFCM: Why Penetration ...

A critical vulnerability in Adobe Commerce and Magento (CVE-2025-54236), dubbed "SessionReaper," is being ruthlessly exploited by threat actors using AI-driven tools to automate attacks at machine speed. With the Australian holiday trading season in full swing, this unauthenticated remote code execution (RCE) flaw poses an immediate existential threat to retail and B2B organizations. This alert outlines the mechanics of the attack, the role of AI in its weaponization, and the urgent defensive actions required to prevent a catastrophic data breach.

SessionReaper & BFCM: Why Penetration Testing Services Are Critical (CVE-2025-54236)
November 12, 2025
Lean Security Expert
CISA Alert: LANDFALL Spyware Hits Australian ...

A zero-click vulnerability, CVE-2025-21042, in millions of Samsung devices is being actively exploited to install "LANDFALL," a commercial-grade spyware. This threat, now on CISA's KEV catalog , transforms an executive's personal device into a silent corporate surveillance tool, completely bypassing your MDM and EDR. For Australian organisations with BYOD policies, this is a critical, reportable data breach scenario under the NDB scheme.

CISA Alert: LANDFALL Spyware Hits Australian BYOD Devices
Lean Security Expert
April 27, 2019

Proactive Risk Management-Making Your Business Resilient

Lean Security Expert
April 27, 2019
Proactive Risk Management-Making Your Business Resilient

Read how adopting a proactive risk management approach allows an organization to avoid and manage risks, making your business resilient to cope with an outside attack.

1 Comment
Lean Security Expert
April 24, 2019

Cybersecurity vs. Data Privacy – What’s The Difference?

Lean Security Expert
April 24, 2019
Cybersecurity vs. Data Privacy – What’s The Difference?

Let’ see what’s the difference between Cybersecurity vs. Data Privacy

Comment
Lean Security Expert
April 20, 2019

Latest Malwares in 2019 That Pose a Threat to Your Data Security

Lean Security Expert
April 20, 2019
Latest Malwares in 2019 That Pose a Threat to Your Data Security

it’s imperative that you familiarise yourself with the latest malwares that pose a threat to your data security. Let’s see what are the latest malwares in 2019 that pose a threat to your data security.

Comment
Lean Security Expert
April 13, 2019

Why Network Security is Important For Your Business

Lean Security Expert
April 13, 2019
Why Network Security is Important For Your Business

Own an online business? Then you should know why network security is important for your business.

Comment
Lean Security Expert
April 9, 2019

Steps Involved In Web Application Vulnerability Assessment

Lean Security Expert
April 9, 2019
Steps Involved In Web Application Vulnerability Assessment

Here are the steps involved in web application vulnerability assessment.

Comment
Lean Security Expert
April 4, 2019

The Benefits Of Source Code Analysis

Lean Security Expert
April 4, 2019
The Benefits Of Source Code Analysis

A source code is a set of instructions, comments, and declarations. Let’s see what are the benefits of source code analysis.

Comment
Lean Security Expert
March 30, 2019

Network Vulnerability Assessment: A Guide

Lean Security Expert
March 30, 2019
Network Vulnerability Assessment: A Guide

Ongoing network vulnerability assessments are used to identify defects in an organization’s network prior to security breaches. Check this useful guide.

Comment
Lean Security Expert
March 26, 2019

5 Common Types Of Malware

Lean Security Expert
March 26, 2019
5 Common Types Of Malware

To protect your business from cyber threats, it’s important that you know what to look out for. Here are some common malware that can cause harm to your system.

Comment
Lean Security Expert
March 8, 2019

Ways To Keep Your Business Information Secure

Lean Security Expert
March 8, 2019
Ways To Keep Your Business Information Secure

From identity theft to loss of official data, cyber threats can wreck a flourishing business. Therefore it’s crucial to secure your business before you smell trouble. Here are a few suggestions on how to do it.

Comment
Lean Security Expert
March 5, 2019

Why Network Security Is Important For Your Business (Infographic)

Lean Security Expert
March 5, 2019
Why Network Security Is Important For Your Business (Infographic)

Network vulnerability assessment should be performed in order to keep online business belong to any niche safe and secure.

Read more about why network security is important for your business.

Comment
Newer Posts
Older Posts
Contact us for a quote
Back to Top
Lean Security, 81-83 Campbell Street, Surry Hills, NSW, 2010, Australia+61 (2) 8078 6952info@leansecurity.com.au

About Lean Security

We are a specialist cybersecurity firm based in Sydney, focusing on penetration testing. We partner with organisations across Australia, providing expert-led testing and clear, actionable reports. Our goal is to give you the clarity and confidence needed to secure your digital assets.

     
Useful Links
Home
Application penetration testing
Security source code assessment
Mobile application penetration testing
Infrastructure penetration testing
API web services penetration testing
Threat Modelling Service

Newsletter

We respect your privacy.

Thank you!

Contact Us

Phone: +61 (2) 8078 6952
Email: info@leansecurity.com.au

Monday - Friday from 9.00 am to 8.00 pm
Saturday from 10.00 am to 6.00 pm