We Went on a SharePoint Expedition, and Here’s What We Found
Of the nearly 30,000 public facing SharePoint portals we found, approximately 3,300 are self-hosted meaning they are vulnerable to the critical CVE-2026-50522.
Brian Tant
Brian brings to Raxis a rich and varied background in Information Technology spanning more than 20 years. Sought after by clients for his unique blend of business acumen and technical prowess, Brian has consistently delivered value to hundreds of organizations spanning the globe throughout his career. Brian is Raxis’ CTO and currently leads the Raxis Penetration Testing and Social Engineering team.
The Exploit Articles Written by Brian Tant
What We Brought Home from DEF CON 34
Raxis pentesters attended DEF CON 34 last weekend. The theme resonated as we see more automated pentest offerings that don’t live up to human expert testers.
AI-Augmented Series: Why We Take AI Security Training Seriously at Raxis
Raxis CTO Brian Tant discusses the AI portion of our annual security awareness training and how we take AI security seriously.
The Game is Starting: Release the Fraudsters
Large tournaments bring out fraudsters just as your employees’ guard is down. Raxis CTO Brian Tant discusses recent threats and how to protect your company.
No Malware Required
The March 2026 attack on Stryker Corporation was not Malware and did not make Ransomware demands. Instead it used compromised credentials to disrupt business.
BYOVD Attacks and EDR Evasion: Why Your Endpoint Security May Not Be Enough
With Reynolds Ransomware in the wild, Brian Tant dives into BYOVD attacks, how they evade enterprise defense like EDRs, and what your organization can do.
The Growing Threat: Attackers Using GitHub Repositories as Malware Staging Mechanisms
Recent attacks, including GitVenom and Lumma Stealer, underscore the threat of Attackers using GitHub repositories as malware staging mechanisms.
Wireless Encryption: WPA3 and the Gotchas Every Company Should Know About
Brian Tant takes a look at WPA3. While offering much deeper security than WPA2, it is still vulnerable to transition Mode and side-channel attacks.
The @ctrl/tinycolor NPM Attack: The Brutal Anatomy of a Cascading Supply Chain Breach
Over 40 major packages were exploited in this malware campaign. Learn what happened and what your organization should do if you have been affected.
Lessons from the DaVita Healthcare Ransomware Attack
The DaVita ransomware attack is one of the most impactful recent healthcare breaches. Learn what happened and what could have been done to limit the impact.
Raspberry Pi Planted in Failed ATM Heist
Raxis CTO Brian Tant discusses the Raspberry Pi used in a recent ATM heist and how Raxis uses the same type of device in our pentesting.
Raxis at DefCon 2025
DefCon 33 has come and gone, and the Raxis team was there keeping up with cutting edge exploits for penetration tests, phishing, and PSE.
32 posts by Brian Tant.