>_ RC.MY / Blog
Guides on penetration testing, red teaming, threat intelligence and DevOps from a NACSA-licensed team in Malaysia.
Cyber threat intelligence helps you understand who might attack you, how and why. Here is the lifecycle, the four types and a simple way for smaller teams to start.
Penetration testing is an authorised, simulated attack that shows how a real attacker could break into your systems. Here is how it works, what it covers and when your organisation needs one.
A good penetration testing methodology turns a test from guesswork into a repeatable process. Here is how OWASP WSTG, PTES, NIST SP 800-115 and OSSTMM compare.
How much should your penetration tester know before they start? We compare black box testing, grey box and white box approaches and when to use each.
Red teaming tests whether your organisation can detect and stop a determined attacker. Here is how it works, when you need it and how it compares with a penetration test.
Malaysia’s Cyber Security Act 2024 (Act 854) introduced licensing for penetration testing providers. Here is what it means when you hire one.
The OWASP Top 10 is the best-known list of web application security risks. Here is each 2025 category explained with simple examples and fixes.
DevSecOps builds security into every stage of software delivery. Here are the key practices, common tools and a simple roadmap to start.
Kubernetes is powerful but complex, and its defaults are not always secure. Use this practical checklist to harden your cluster.
