All insights grouped by year
2023
-
Green Team Tree Planting at Ōwhiro Bay
ZX Green Team gets muddy planting native trees. -
ZX Hosts 10 Brandon Street Green Team meeting
Last month ZX hosted the 10 Brandon Street Green Team meeting bringing together Green Teams from other companies in our building to share sustainability ideas. -
Setting off on our carbon neutral journey
We are thrilled to announce that we have officially set off on our carbon neutral journey with Toitū Envirocare!
2022
-
Running a runZero (rumble.run) Rumbler for Zero Dollars
How to take advantage of the normal way users deploy runZero asset discovery to capture credentialsView insight: Running a runZero (rumble.run) Rumbler for Zero Dollars
-
Green Team May Beach Clean Up
This past May the ZX Green Team went out on a mission to tidy up local shores. -
Customising Blacklist3r for OWIN OAuth Access Tokens
Using a modified version of Blacklist3r, we managed to bypass authentication in OWINView insight: Customising Blacklist3r for OWIN OAuth Access Tokens
2021
-
Hacking for Heroes will return…
We’re excited to announce that Hacking for Heroes will return in 2022 -
Reverse engineering BMC PATROL Agent for static keys and IVs
A dive into BMC PATROL Agent and the security issues within.View insight: Reverse engineering BMC PATROL Agent for static keys and IVs
-
All my Intune users could become Local Administrators and it's a Feature?
An investigation into how Intune allows users to escalate their privilege to become a local administrator.View insight: All my Intune users could become Local Administrators and it's a Feature?
-
Microsoft GovTech presentation - Azure Security Faux Pas
Blaise St-Laurent presented to the Microsoft GovTech forum on the 18th of March 2021 on the various mistakes, misconfigurations and missteps that ZX Security has seen in the last 2 years’ Azure security reviews.View insight: Microsoft GovTech presentation - Azure Security Faux Pas
2020
-
AWSUG Presentation - AWS Security Faux Pas
Blaise St-Laurent presented to the Aotearoa AWS Users Group on Tuesday the 10th of November 2020 on the various mistakes, misconfigurations and missteps that ZX Security has seen in the last 2 years’ AWS security reviews.
2019
-
Service Workers
Claudio Contin was interviewed by the Daily Swig regarding his research into registering malicious service workers.