Research

  • Lares Labs
  • No Comments

Beyond the Scanner: Lares OWASP Top 10 Findings
Beyond the Scanner: Lares OWASP Top 10 Findings 1200 630 Lares Labs
Lares maps real‑world attack paths to the 2025 OWASP Top 10, showing where clean scan dashboards still fail and how AppSec leaders should test beyond the scanner. read more

WEBINAR: Stop Guessing, Start Proving: Why You Should Combine TTX and TTP Replay
WEBINAR: Stop Guessing, Start Proving: Why You Should Combine TTX and TTP Replay 150 150 Andrew Heller
Watch our Lares webinar to learn why combining Tabletop Exercises (TTX) with TTP Replay is the ultimate win-win for evidence-backed security testing. read more

Introducing the Top 5 Insider Threat Findings of 2022 Report
Introducing the Top 5 Insider Threat Findings of 2022 Report 2048 1403 Andrew Hay
Lares analyzed the similarities between hundreds of insider threat engagements in 2022. Here is what we found. read more

Introducing the Top 5 CISO Findings of 2022 Report
Introducing the Top 5 CISO Findings of 2022 Report 1600 1280 Andrew Hay
Lares has analyzed the similarities between hundreds of purple team engagements in 2022. Here is what we found. read more

Introducing the Top 5 Purple Team Findings of 2022 Report
Introducing the Top 5 Purple Team Findings of 2022 Report 800 509 Andrew Hay
Lares has analyzed the similarities between hundreds of purple team engagements in 2022. Here is what we found. read more

Introducing the Top 5 Penetration Test Findings of 2022 Report
Introducing the Top 5 Penetration Test Findings of 2022 Report 1600 1604 Andrew Hay
Lares has analyzed the similarities between hundreds of penetration tests in 2022. Here is what we found. read more

Push Fatigue: We’re tired too
Push Fatigue: We’re tired too 640 450 Alex Kozlov
A technique known as “MFA bombing” allows attackers to bypass Multi-Factor Authentication. This post explains how to detect it. read more

The Lowdown on Lateral Movement
The Lowdown on Lateral Movement 1090 749 Anton Ovrutsky

What Is Lateral Movement ? Lateral movement is a broad MITRE ATT&CK category, consisting of nine distinct techniques and numerous sub techniques. Due to its breadth and linkages between other…

read more

Detection and Mitigation Advice for PrintNightmare
Detection and Mitigation Advice for PrintNightmare 2048 1365 Andy Gill

Introduction PrintNightmare(CVE-2021-34527) was released as a proof of concept this week on Github. This post highlights how the exploit PoCs released on Github work and how the specific vulnerability can…

read more

Introducing Sysmon Config Pusher
Introducing Sysmon Config Pusher 1026 685 Anton Ovrutsky

Introducing Sysmon Config Pusher When providing various services to clients, including Purple, Blue, and Red Team engagements, the Lares team often recomends Sysmon to close detection gaps. Indeed, Sysmon is…

read more

Where There is Unity, There is Victory

[Ubi concordia, ibi victoria]

– Publius Syrus

Contact Lares Consulting logo (image)

Continuous defensive improvement through adversarial simulation and collaboration.

Call Us

(720) 600-0329

Email Us

sales@lares.com

©2025 Lares, a Damovo Company | All rights reserved.
Enter your
text here