Velstadt Blog

Cybersecurity Insights

Research, threat trends, and practical guidance from our cybersecurity team.

Minimal dark-blue illustration of remote code execution, showing a remote attacker using a laptop to interact with a distant server infrastructure through data streams.
July 10, 2026 • 13 min read

From Exposed elFinder to Remote Code Execution: How an Unauthenticated File Manager Led to Server Compromise

Attack Surface Offensive Security Red Teaming
Cover image for Velstadt's article on a critical MS SQL injection finding that escalated to remote code execution in a production CRM
May 20, 2026 • 21 min read

Anatomy of a Critical Pentest Finding: From MS SQL Injection to Remote Code Execution in a Production CRM

Attack Surface Cyber Risk Malware & Ransomware Offensive Security
May 5, 2026 • 28 min read

How to Choose the Right Penetration Testing Provider in 2026: A Decision Framework for Security Leaders

Cyber Risk Offensive Security Threat Landscape
Business Email Compromise (BEC) - How Email Attacks Disrupt Business: A Practical Guide to Email Security
April 16, 2026 • 20 min read

How Email Attacks Disrupt Business: A Practical Guide to Email Security

Cyber Risk Malware & Ransomware Threat Actors
Four Clutch 2025 award badges earned by Velstadt across Dark Web Monitoring, Managed SIEM, and Penetration Testing categories
December 1, 2025 • 5 min read

Velstadt Earns Four Clutch 2025 Awards, Led by #2 Dark Web Monitoring Rank in New York

Threat Intelligence Velstadt News