Piss poor security. I just want to rant.

A client has requested we undertake a security review (not a specific vuln test or pen test) but just a review of things which may be problematic which we can look to address. We're allowed to run scans, try simple exploits, but not interfere with operations, not break things.

As part of testing, discovered that a product which collects PII has no firewalls or AV. Product can be breached remotely with ease, or just by being in front of it. …

address client cybersecurity exploits may operations pen pen test poor rant review run scans security simple test things vuln