Secuna

Secuna is the leading offensive security company in the Philippines.

Secuna is the leading offensive security company in the Philippines, empowering organizations of all sizes to proactively identify and remediate vulnerabilities before they can be exploited by malicious threat actors and become an even more expensive problem.

01/11/2026

🕯️ All Saints’ Day and All Souls’ Day remind us to pause and pay tribute to those who have shaped our lives, even if they are no longer with us.

Today, we remember their stories, the moments we shared, and the memories that remain.

May their lives and the impact they left behind never be forgotten. 🤍

29/10/2026

🔎 𝐘𝐨𝐮𝐫 𝐝𝐢𝐠𝐢𝐭𝐚𝐥 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐝𝐞𝐬𝐞𝐫𝐯𝐞𝐬 𝐚 𝐫𝐞𝐠𝐮𝐥𝐚𝐫 𝐜𝐡𝐞𝐜𝐤𝐮𝐩.

Unused accounts, forgotten app permissions, and unfamiliar login sessions can leave your information exposed if they go unchecked.

The good news? You don't need hours to start improving your security. A quick review of your accounts, connected apps, and publicly available information can help you identify potential risks and take action. 🛡️

Take five minutes today to review your digital footprint and make security part of your routine.

📩 For organizations looking to strengthen their application security, explore Secuna's services at secuna.io or contact [email protected].

29/10/2026

🚨 𝐀 𝐂𝐕𝐒𝐒 𝟏𝟎.𝟎 𝐯𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐜𝐨𝐮𝐥𝐝 𝐩𝐮𝐭 𝐲𝐨𝐮𝐫 𝐬𝐨𝐮𝐫𝐜𝐞 𝐜𝐨𝐝𝐞, 𝐜𝐫𝐞𝐝𝐞𝐧𝐭𝐢𝐚𝐥𝐬, 𝐚𝐧𝐝 𝐂𝐈/𝐂𝐃 𝐩𝐢𝐩𝐞𝐥𝐢𝐧𝐞𝐬 𝐚𝐭 𝐫𝐢𝐬𝐤.

GitLab’s latest critical flaw highlights a serious security concern: attackers may be able to execute code on vulnerable self-managed servers without authentication.

And patching is only part of the solution.

Organizations need to identify every exposed instance, apply the correct security updates, review potential compromise, and assess what an attacker could reach if a system is breached.

🛡️ Read our latest blog to learn more about GitLab’s critical vulnerability and why timely patching and security testing matter: https://blog.secuna.io/inside-gitlabs-critical-code-execution-flaw-risks-to-source-code-secrets-and-ci-cd-pipelines/

📩 Assess your security exposure with Secuna. Contact [email protected] or visit secuna.io to learn more about our pe*******on testing services.

28/10/2026

⚠️ Not every security risk starts with an attacker breaking in.

Sometimes, risks come from deliberate actions, everyday mistakes, or accounts that have fallen into the wrong hands.

Malicious insiders may intentionally misuse their access. Negligent insiders may expose sensitive information through human error. Compromised insiders may unknowingly become a way for attackers to enter an organization's systems.

Each situation calls for a different response, from access controls and security monitoring to employee awareness and incident response.

This Cybersecurity Awareness Month, take time to understand these risks and help your team recognize the warning signs before they lead to bigger problems.

🛡️ A security-aware workforce is an important part of protecting your organization.
🌐 Learn more at secuna.io or reach out to our team at [email protected].

26/10/2026

📤 File uploads make it easy for users to share documents, images, and other content. But without proper security checks, they can also give attackers a way to target your application.

Malicious files may disguise themselves as legitimate uploads or exploit weaknesses in how a system processes them. Simply checking a file's name or extension isn't enough to determine whether it's safe.

To reduce the risk, validate file types and contents, enforce upload size limits, and store uploaded files securely. These safeguards help prevent unsafe files from compromising your application. 🛡️

🔎 Secure every upload before it becomes a security risk.

📩 Explore how Secuna can help strengthen your application security. Reach out to [email protected] or visit secuna.io to learn more.

22/10/2026

𝐀 𝐛𝐫𝐞𝐚𝐜𝐡 𝐜𝐚𝐧 𝐮𝐧𝐟𝐨𝐥𝐝 𝐥𝐨𝐧𝐠 𝐛𝐞𝐟𝐨𝐫𝐞 𝐚𝐧𝐲𝐨𝐧𝐞 𝐫𝐞𝐚𝐥𝐢𝐳𝐞𝐬 𝐬𝐨𝐦𝐞𝐭𝐡𝐢𝐧𝐠 𝐢𝐬 𝐰𝐫𝐨𝐧𝐠. 🔓

Once an attacker gains an initial foothold, they can spend hours exploring the environment, looking for additional access, identifying valuable information, and finding ways to move further into the organization.

What looks like one security incident from the outside can actually be a series of small steps happening behind the scenes.

That’s why finding weaknesses early matters. Secuna Pentest helps organizations uncover vulnerabilities and potential attack paths before real attackers have the opportunity to exploit them. 🔎

Put your security to the test and find the gaps before they become part of a larger incident.

🔗 Explore Secuna Pentest: secuna.io
📩 Talk to our team: [email protected]

22/10/2026

⚠️ 𝐀 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐟𝐥𝐚𝐰 𝐢𝐬 𝐨𝐧𝐥𝐲 𝐚𝐬 𝐬𝐚𝐟𝐞 𝐚𝐬 𝐭𝐡𝐞 𝐭𝐢𝐦𝐞 𝐢𝐭 𝐭𝐚𝐤𝐞𝐬 𝐭𝐨 𝐟𝐢𝐱 𝐢𝐭. ⚠️

A patch was available for a critical ownCloud vulnerability more than two years before researchers reported finding exposed files linked to a Philippine government agency.

This case highlights a costly reality: knowing about a vulnerability doesn't make your systems secure. Outdated software, forgotten assets, and delayed updates can leave sensitive records and credentials exposed long after a fix becomes available.

For organizations, effective patch management means more than installing updates. It requires knowing what's exposed, prioritizing actively exploited vulnerabilities, setting remediation deadlines, and verifying that security gaps are actually closed.

📖 Read our latest blog to learn what this reported breach reveals about patch management and how organizations can strengthen their defenses: https://blog.secuna.io/what-a-philippine-government-data-breach-teaches-us-about-patch-management/

🔎 Find exploitable weaknesses before attackers do. Learn more about Secuna Pentest at secuna.io or contact [email protected].

20/10/2026

🌐 𝐎𝐍𝐄 𝐖𝐄𝐀𝐊 𝐀𝐏𝐈 𝐂𝐀𝐍 𝐏𝐔𝐓 𝐒𝐄𝐍𝐒𝐈𝐓𝐈𝐕𝐄 𝐃𝐀𝐓𝐀 𝐀𝐓 𝐑𝐈𝐒𝐊.

APIs allow applications and systems to communicate, but weak access controls can expose sensitive information to unauthorized users.

For example, a user might access another person's account details or retrieve records they aren't authorized to see, putting customer data and business information at risk. ⚠️

Securing an API means ensuring every request is properly authorized and users can only access the information and functions they're permitted to use.

Every request needs the right level of access. Make API security part of your application security strategy.

📩 Have concerns about your application's security? Reach out to our team at [email protected] or visit secuna.io to explore how Secuna can help.

15/10/2026

💥 𝐑𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞 𝐜𝐚𝐧 𝐝𝐨 𝐦𝐨𝐫𝐞 𝐭𝐡𝐚𝐧 𝐥𝐨𝐜𝐤 𝐲𝐨𝐮𝐫 𝐟𝐢𝐥𝐞𝐬. 𝐈𝐭 𝐜𝐚𝐧 𝐭𝐚𝐤𝐞 𝐚𝐰𝐚𝐲 𝐲𝐨𝐮𝐫 𝐰𝐚𝐲 𝐛𝐚𝐜𝐤. 💥

Backups are essential, but they don't guarantee that your business can recover. Attackers may target backup servers, steal privileged credentials, or exploit vulnerabilities to disrupt recovery.

The real question isn't whether your organization has backups. It's whether those backups can bring your business back when it matters most. Without tested recovery procedures, even a successful backup can leave your organization facing prolonged downtime and costly disruptions. Waiting until an attack happens to find out whether your recovery plan works could be a costly mistake.

📚 Explore our latest blog to learn how to assess your ransomware recovery readiness: https://blog.secuna.io/your-backup-is-not-a-recovery-plan-how-to-test-your-ransomware-readiness/

🧰 Identify vulnerabilities before they become costly disruptions. Learn more about Secuna Pentest at secuna.io or email [email protected].

14/10/2026

🔐 𝐘𝐎𝐔𝐑 𝟐𝟎% 𝐃𝐈𝐒𝐂𝐎𝐔𝐍𝐓 𝐈𝐒 𝐒𝐓𝐈𝐋𝐋 𝐔𝐏 𝐅𝐎𝐑 𝐆𝐑𝐀𝐁𝐒!

Cybersecurity Awareness Month is the perfect opportunity to take a closer look at your organization's security.

Make the most of our limited-time offer and get 20% OFF Secuna VAPT Services when you avail of at least one Web or Mobile Pentest.

Whether you're a new or returning client, this is your chance to assess your applications and identify security weaknesses with professional pe*******on testing.

📩 Email [email protected] to claim your discount before the offer ends!
📅 Valid until October 31, 2026
✅ Available for new and returning clients
T&C apply. Graybox Testing only.

Don't miss the opportunity to put your security to the test.

Address

Taguig

Website

https://secuna.io/

Alerts

Be the first to know and let us send you an email when Secuna posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.