genuine penetration testing methodology

Executive Summary Somewhere in the Caribbean this week, an executive will approve a payment for a “penetration test,” receive a hundred-page PDF full of colour-coded severity scores, file it with satisfaction — and remain exactly as exposed as before. What was purchased was almost certainly a vulnerability scan: a legitimate, useful, automated exercise that is...