INSIGHTS AND BLOGS

Insurance & Banking API Pen Test: IDOR & BOLA Payloads

HIPAA Penetration Testing Requirements 2026: Avoid OCR Fines

Learn the HIPAA penetration testing requirements for 2026: what §164.308(a)(8) demands, what OCR expects in your pentest report, and how to avoid fines.

NAIC and NYDFS 500 Penetration Testing: What US Insurance Companies Must Test

See what NYDFS Part 500 and NAIC Model Law require for insurance penetration testing, with real commands, scope, and cadence to pass your next cyber audit.

Ransomware Simulation for Hospitals

How Redfox Cybersecurity emulates real ransomware attacks on hospitals, from phishing to PACS, Domain Admin, and backups, without encryption or downtime.

Telemedicine Penetration Testing Checklist

Telemedicine penetration testing checklist: 15 telehealth security flaws we find, from WebRTC leaks to IDOR and S3 exposure, plus how to fix them for HIPAA.

Get Certified in Ethical Hacking

Earn CJEH, CWAPT, CAIPT, CWRT, CAPT and RCPT with Redfox Cybersecurity Academy. Hands-on ethical hacking certifications with real labs and tools.

Medical Device Penetration Testing

What FDA Section 524B requires, how Redfox Cybersecurity tests infusion pumps, the HL7 flaws we find, and a checklist for your premarket submission.

Ransomware Penetration Testing for Cyber Insurance

Ransomware penetration testing proves your controls work before an insurer pays out. See how Redfox Cybersecurity validates defenses and cuts premiums.

Healthcare Cloud Security

How an S3 misconfiguration exposed PHI and an IAM privilege escalation reached RDS patient data, plus how Redfox Cybersecurity tests HIPAA workloads in AWS.