Explorations in manipulation: Scams in security testing
I’d add that it’s impossible to do good security testing at scale without using automated security testing tools and services and understanding the value they can bring.
Still going after all these years.