Barry Brailey

Head of Offensive Security Services

Barry started his career with the British Army and moved into Intelligence and security roles in 2001.

Talk to an expert

Highlights

Career highlights

‍

Co-founder and Board Member of Information Security Awards New Zealand (iSANZ). Barry has worked in the private and public sectors in New Zealand, including helping to establish the National Cyber Security Centre (NCSC), and went on to be the deputy commissioner for the .nz domain name commission with a focus on ensuring the security and stability of .nz. Barry has worked with a vast range of Australasian customers. He is passionate about helping customers solve their security challenges and understand the cyber threat landscape.

‍

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

PHP-FPM (PHP Source) - Stored Cross-Site Scripting (XSS) (CVE-2026-6735)

During a security engagement, Conrad Draper discovered a stored XSS vulnerability in the PHP-FPM status endpoint which was due to a lack of input sanitisation of the request URI. This affects the request URI when displaying stored content within the

Union-Based SQL Injection in ERPNext / Frappe Framework (CVE-2026-29081)

During some research, Cale discovered an authenticated SQL injection vulnerability in Frappe Framework, affecting the latest version of ERPNext, including cloud-hosted instances.

TimePictra (Microchip) – Stored Cross-Site Scripting (XSS) (CVE-2026-3010)

During a security engagement, Steve Nyan Lin discovered a stored XSS vulnerability in the TimePictra web application which was due to a lack of input filtering. This affects the neName parameter when creating new network elements.

Discover our services

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert

Employee Cyber Training & Awareness

Your people are your first line of defence. Our cyber training builds awareness and sharpens their instincts.

When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making.

Are you experiencing a security breach?

Incident Response