https://xanysec.com/blog/ Penetration testing, managed SOC, DDoS resilience, and Anycast network — for casinos, exchanges, and banks. en Sat, 18 Jul 2026 00:00:00 GMT https://xanysec.com/blog/credential-stuffing-casino-cashier/ https://xanysec.com/blog/credential-stuffing-casino-cashier/ Credential stuffing rarely loses money at login — the loss lands at the cashier. Here is the full attack chain against casino withdrawal flows, and how to break it. email@xanysec.com (AnySec Engineering) casinosaccount-takeoverfraudauthentication Sat, 18 Jul 2026 00:00:00 GMT https://xanysec.com/blog/splunk-rce-cve-2026-20253-soc-tooling/ https://xanysec.com/blog/splunk-rce-cve-2026-20253-soc-tooling/ CVE-2026-20253 is an unauthenticated RCE in Splunk Enterprise, now on CISA's KEV list. When the platform your SOC runs on is internet-reachable, it is attack surface too. What to check today. email@xanysec.com (AnySec Engineering) cvesocrceexposure-management Sat, 18 Jul 2026 00:00:00 GMT https://xanysec.com/blog/casino-cybersecurity-threat-landscape-2026/ https://xanysec.com/blog/casino-cybersecurity-threat-landscape-2026/ What we've seen actually hitting licensed online casinos this year — bonus abuse, withdrawal fraud, and the slow rise of AI-assisted social engineering. email@xanysec.com (AnySec Engineering) casinosfraudthreat-intel Wed, 20 May 2026 00:00:00 GMT https://xanysec.com/blog/crypto-exchange-soc-runbook/ https://xanysec.com/blog/crypto-exchange-soc-runbook/ Concrete detection rules, alert thresholds, and on-call playbooks for the threats unique to a regulated exchange — wallet drainers, custody compromise, address-poisoning, and more. email@xanysec.com (AnySec Engineering) cryptoexchangesocincident-response Thu, 14 May 2026 00:00:00 GMT https://xanysec.com/blog/eu-cybersecurity-compliance-nis2-dora/ https://xanysec.com/blog/eu-cybersecurity-compliance-nis2-dora/ What EU operators actually need to do to be ready for NIS2 and DORA — control by control, with the time and effort to expect. email@xanysec.com (AnySec Engineering) nis2doracomplianceeu Thu, 07 May 2026 00:00:00 GMT https://xanysec.com/blog/anatomy-of-a-modern-l7-ddos/ https://xanysec.com/blog/anatomy-of-a-modern-l7-ddos/ What we see hitting casino and exchange edges in 2026 — and why provider defaults don't catch it. email@xanysec.com (AnySec Engineering) ddosl7defense Fri, 01 May 2026 00:00:00 GMT https://xanysec.com/blog/why-pure-manual-pentest/ https://xanysec.com/blog/why-pure-manual-pentest/ Automated scanners have improved. Pentest-as-a-service platforms are everywhere. Here's why our senior engineers still test by hand — and what they catch that scanners don't. email@xanysec.com (AnySec Engineering) pentestmethodologymanual Tue, 28 Apr 2026 00:00:00 GMT https://xanysec.com/blog/what-a-real-pentest-report-looks-like/ https://xanysec.com/blog/what-a-real-pentest-report-looks-like/ If your last pentest report was a Nessus PDF export, you got scammed. Here's exactly what to demand. email@xanysec.com (AnySec Engineering) pentestreportsbuying-guide Sun, 12 Apr 2026 00:00:00 GMT https://xanysec.com/blog/building-private-anycast/ https://xanysec.com/blog/building-private-anycast/ Why some of our clients run their own ASN, IP blocks, and edge — the trade-offs vs Cloudflare, and how the math actually works. email@xanysec.com (AnySec Engineering) anycastbgpinfrastructuresovereignty Fri, 20 Mar 2026 00:00:00 GMT