Latest post
Welcoming Atle Risa – Threat Intelligence Manager
River Security welcomes Atle Risa as Threat Intelligence Manager, bringing intelligence and analysis experience from the Norwegian Armed Forces.…
Read the postOur Blog
Content written by our people for the cyber security community.
Attack Surface Management
Most Valuable Pentesting (MVP): A Composable, Recursive Way to Test Anything
Editors note and the use of AI I used ChatGPT to assist with formatting, spelling, sentence structure, and the creation of visualizations designed to …
Attack Surface Management
Gitjacking: From an Abandoned Repository to Website Compromise
Repository-related risks are not limited to exposed credentials or source code. References to repositories and GitHub identities can also become vulne…
Attack Surface Management
Spot Spoofing Risk Before Attackers Abuse Your Brand
Email remains one of the most abused trust channels on the internet. Attackers do not need to compromise your infrastructure to damage your brand, tri…
River Security
Welcoming Lucas Vanaheim – Senior Penetration Tester
We’re excited to welcome Lucas Vanaheim to River Security, where he joins us as a Senior Penetration Tester in our Offensive Security Operations Cente…
Attack Surface Management
Continuous Penetration Testing: Why Fresh Eyes Find Fresh Bugs
[Editor’s note: I wrote this short blog post to illustrate the advantages of Continuous Penetration Testing. In this case, a tester discovered a vulne…
River Security
Welcoming Tomasz Czyz – Senior Penetration Tester
We are pleased to announce that Tomasz Czyz is joining River Security as a Senior Penetration Tester. Tomasz joins us from Atea, where he has worked a…
Attack Surface Management
SSL/TLS Management: Reducing Risks and Gaining Visibility
Transport Layer Security (TLS) and its predecessor SSL remain cornerstones of modern internet security. They protect confidentiality, integrity, and a…
River Security
Turning Cloudflare Into an SSRF Engine, Reaching What You Were Never Meant to See
[Editor note: Raymond identified a potential SSRF issue within Cloudflare infrastructure. While initially difficult to exploit due to limitations and …
River Security
Welcoming Martin Nyberg – Penetration Tester
We’re excited to welcome Martin Nyberg to River Security, who joins us as a Penetration Tester in our Offensive Security Operations Center (OSOC). Mar…
River Security
Welcoming Valdemar Andersen – Threat Intelligence Manager
We’re excited to welcome Valdemar Andersen to River Security, who joins us today as our new Threat Intelligence Manager. Valdemar comes to us from the…
River Security
Like stealing (Cisco) ISE-cream from a kid – Weaponizing a CVE
[Editors Note: Raymond Strandheim is a principal pentester, and I asked him to share with us how he managed to weaponize a new vulnerability from Cisc…
River Security
From Norway to Sweden – with Europe in sight
With local leadership and senior expertise, we’re ready to meet the Swedish market River Security continues its Nordic growth journey. In September, w…
River Security
Sikkerhetsfestivalen 2025: Reflections and the Road Ahead for Cybersecurity
Introduction What a festival. Sikkerhetsfestivalen 2025 – my first, and definitely not my last. The organizers and the city of Lillehammer brought tog…
River Security
Welcoming Andreas Claesson – Principal Penetration Tester
We’re excited to welcome Andreas Claesson as our new Principal Penetration Tester at River Security. Andreas joined us on October 1st, bringing with h…
River Security
Welcoming Mats Herman Heggelund – Penetration Tester
We’re excited to welcome Mats Herman Heggelund as our new Penetration Tester at River Security. Mats joined us in September and is already proving him…
River Security
Three Years of Building the Unbuildable
It’s been three years since I jumped head-first into building the backend systems behind River Security’s ActiveFocus platform, the engine our penetra…
River Security
Mastering the CWEE: How Three River Security Experts Took on One of the Toughest Web Exploitation Challenges
At River Security, we believe that pushing boundaries is the only way to stay ahead in cybersecurity. Recently, three of our team members, Markus, Sim…
News
Welcoming Raymond Strandheim – Principal Penetration Tester
We’re so excited and extremely happy to welcome Raymond Strandheim as our new Principal Penetration Tester at River Security. With over 18 years of ex…
River Security
Six Months at River Security – Building Something Different, Together
When I joined River Security in January 2025, I knew I was stepping into something unique. The company wasn’t just doing cyber security. It was challe…
River Security
Built from Within: How Simen and Richard Grew into Senior Roles at River Security
From Junior to Senior: Simen Bai and Richard Beunk Take the Next Step At River Security, one of our guiding principles is investing in people, not jus…
River Security
One massive step closer to assembling the core team of River Security
We’re happy to welcome Raza Ansari as our newest Sales Executive at River Security. Raza’s addition marks a significant milestone as he becomes the 20…
River Security
Welcome to the River Security team, Lasse!
We’re excited to welcome Lasse Bogen to River Security as our newest Sales Executive. With over 15 years of experience in IT and telecom sales, produc…
River Security
Cato Stensland is the new OSOC Lead at River Security.
We are proud to announce that Cato Stensland has been promoted to the role of Offensive Security Operation Center (OSOC) Lead at River Security, effec…