penetration testing

OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes

agentic AI, AI, cybersecurity, News, OpenAI, penetration testing, vulnerability management /

OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes 2026-11-13 at 11:31 By Anamarija Pogorelec OpenAI is bringing AI agents into more of the software security process with Daybreak, pairing web application penetration testing with tools that investigate vulnerabilities and develop fixes. The two offerings, Red Team and Defense Factory, connect the work […]

OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes Read More »

ARTEX goes from pentesting tool to attacker staple in three months

agentic AI, attack tools, automation, CERT-EU, CrowdStrike, Don't miss, framework, GitGuardian, Google, Hot stuff, Microsoft, News, penetration testing, tips, Wiz /

ARTEX goes from pentesting tool to attacker staple in three months 2026-11-09 at 16:57 By Zeljka Zorz A security researcher’s AI agent breached an internal sales application used by WorkOS’s go-to-market teams, the developer platform provider confirmed on Friday. “The researcher was conducting cybersecurity benchmark evaluations using ARTEX when their agent escaped its isolated testing […]

ARTEX goes from pentesting tool to attacker staple in three months Read More »

Novee puts forgotten internet-facing assets through penetration testing

AI, asset discovery, Don't miss, Hot stuff, News, Novee, penetration testing, security testing, vulnerability management /

Novee puts forgotten internet-facing assets through penetration testing 2026-11-03 at 16:00 By Help Net Security Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) […]

Novee puts forgotten internet-facing assets through penetration testing Read More »

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3

cybersecurity, Kali Linux, Linux, News, OffSec, open source, operating system, penetration testing /

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 2026-10-26 at 19:34 By Anamarija Pogorelec The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so […]

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 Read More »

Bearer CLI: Free, source-available code security scanning tool (SAST)

Application Security, Bearer, DevSecOps, Don't miss, GitHub, News, penetration testing, scanner, software /

Bearer CLI: Free, source-available code security scanning tool (SAST) 2026-10-19 at 08:30 By Anamarija Pogorelec Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely, […]

Bearer CLI: Free, source-available code security scanning tool (SAST) Read More »

Hottest cybersecurity open-source tools of the month: September 2026

AI, cybersecurity, GitHub, News, open source, password manager, penetration testing, Tencent /

Hottest cybersecurity open-source tools of the month: September 2026 2026-09-29 at 07:30 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Sift is […]

Hottest cybersecurity open-source tools of the month: September 2026 Read More »

Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira

Don't miss, GitHub, News, open source, penetration testing, software /

Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira 2026-09-02 at 08:00 By Mirko Zorz Sift is a free, open-source command line tool that searches for passwords, API keys, and other sensitive data across the places a company keeps its work: local disks, Windows file shares, an entire Active Directory domain, […]

Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Read More »

Hottest cybersecurity open-source tools of the month: August 2026

AI, cybersecurity, News, NVIDIA, open source, penetration testing, software /

Hottest cybersecurity open-source tools of the month: August 2026 2026-08-26 at 07:30 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. SkillSpector: NVIDIA’s open-source security scanner for AI agent skills SkillSpector is an open-source scanner from […]

Hottest cybersecurity open-source tools of the month: August 2026 Read More »

Hazmat: Open-source containment for AI agents

agentic AI, cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, penetration testing, software /

Hazmat: Open-source containment for AI agents 2026-08-17 at 08:00 By Anamarija Pogorelec Hazmat is an open-source tool that runs AI coding agents inside a separate account on your own machine. It wraps the harnesses people use: Claude Code, Codex, OpenCode, Cursor Agent, and several more, plus any script you write yourself. An agent launched the […]

Hazmat: Open-source containment for AI agents Read More »

PentestGPT: Open-source automated penetration testing agentic framework

agentic AI, Claude Code, cybersecurity, Don't miss, GitHub, LLMs, News, open source, penetration testing /

PentestGPT: Open-source automated penetration testing agentic framework 2026-08-12 at 08:30 By Anamarija Pogorelec PentestGPT is an open-source penetration testing agent that points a large language model at a target and lets it work. In its default mode it runs recon, then exploit, then walkthrough, each stage feeding the next. Switch it to pentest mode and […]

PentestGPT: Open-source automated penetration testing agentic framework Read More »

Security teams keep finding critical flaws after scheduled testing ends

AI, cybersecurity, News, penetration testing, report, security ROI, security testing, Synack /

Security teams keep finding critical flaws after scheduled testing ends 2026-07-22 at 08:00 By Anamarija Pogorelec Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilities outside planned testing windows […]

Security teams keep finding critical flaws after scheduled testing ends Read More »

20 open-source cybersecurity tools to keep your team ready for anything

agentic AI, AI, Application Security, containers, cybersecurity, Don't miss, Endpoint Security, Exabeam, firewall, GitHub, Hot stuff, LLMs, Microsoft, News, open source, OWASP, penetration testing, scanner, security telemetry, software, vulnerability assessment, Windows /

20 open-source cybersecurity tools to keep your team ready for anything 2026-07-08 at 08:30 By Anamarija Pogorelec AI is changing how security teams find vulnerabilities, analyze code, test applications, and protect infrastructure. Developers are building tools to secure AI systems themselves, from coding agents and memory protection to model exposure discovery. This roundup covers recent […]

20 open-source cybersecurity tools to keep your team ready for anything Read More »

Kali Linux 2026.2 trims VM boot times, refreshes its desktops

Kali Linux, Linux, News, open source, penetration testing /

Kali Linux 2026.2 trims VM boot times, refreshes its desktops 2026-06-30 at 11:16 By Sinisa Markovic Penetration testers who run Kali Linux inside virtual machines boot their systems faster after the 2026.2 release. The change comes from a decision about graphics firmware, the code that drives NVIDIA, AMD, and Intel GPUs. That firmware has grown […]

Kali Linux 2026.2 trims VM boot times, refreshes its desktops Read More »

DarkMoon: Open-source AI pentesting platform

agentic AI, AI, automation, cybersecurity, Don't miss, GitHub, Hot stuff, LLMs, News, open source, penetration testing, software /

DarkMoon: Open-source AI pentesting platform 2026-06-29 at 08:30 By Mirko Zorz Penetration testing has long run on expert time, with specialists spending days probing a network or web application by hand. Manual engagements stretch across weeks, expert consultants run into thousands of dollars a day, and results vary with the tester. Automation promises to narrow […]

DarkMoon: Open-source AI pentesting platform Read More »

Companies keep bolting AI onto their products, and the security bill is coming due

AI, Cobalt, cybersecurity, Don't miss, LLMs, News, penetration testing, report, survey /

Companies keep bolting AI onto their products, and the security bill is coming due 2026-06-29 at 07:30 By Mirko Zorz Companies keep bolting AI and LLM features onto their products, and the security results are starting to show a pattern. The vulnerabilities those features create get rated high risk far more often than anything else, […]

Companies keep bolting AI onto their products, and the security bill is coming due Read More »

Day in the Life of a Red Teamer: Thinking Like the Adversary

penetration testing, Perspectives /

Day in the Life of a Red Teamer: Thinking Like the Adversary 2026-06-04 at 17:38 By John Jackson There’s a persistent myth about red team operators: that the job is all zero-days, glowing terminals, and cinematic “I’m in” moments. The reality is more interesting and far more human. This article is an excerpt from LevelBlue […]

Day in the Life of a Red Teamer: Thinking Like the Adversary Read More »

Two Approaches for Offensive Testing of AI Systems: Architecture-led AI Application Penetration Test and Threat-led AI Red Team Assessment

Artificial Intelligence, penetration testing, Tips & Tricks /

Two Approaches for Offensive Testing of AI Systems: Architecture-led AI Application Penetration Test and Threat-led AI Red Team Assessment 2026-05-27 at 16:59 By Sarath Nair Artificial intelligence (AI) is changing the shape of the application attack surface. A traditional application assessment usually starts with familiar questions, such as: This article is an excerpt from LevelBlue […]

Two Approaches for Offensive Testing of AI Systems: Architecture-led AI Application Penetration Test and Threat-led AI Red Team Assessment Read More »

Lyrie: Open-source autonomous pentesting agent

agentic AI, AI, Don't miss, GitHub, News, open source, penetration testing, software /

Lyrie: Open-source autonomous pentesting agent 2026-05-18 at 09:42 By Sinisa Markovic Penetration testing has usually required weeks of manual work, specialized tooling, and teams with narrow skill sets. Lyrie, an open-source autonomous security agent built by OTT Cybersecurity, compresses that process into a command line tool and publishes the entire codebase. The project reached version […]

Lyrie: Open-source autonomous pentesting agent Read More »

Threat Analysis: Backdoored Electron Apps Evading Defenses

Emerging Threats, penetration testing, Threat Intelligence /

Threat Analysis: Backdoored Electron Apps Evading Defenses 2026-05-08 at 18:03 By Michael Morose This Threat Analysis report is part of the “Purple Team Series” in which the LevelBlue Global Security Operations Center (GSOC) provides a technical overview of some of the methods that threat actors are using to compromise their victims. This article is an […]

Threat Analysis: Backdoored Electron Apps Evading Defenses Read More »

Hacking Hotels via Smart Stationary Bikes: How Unsecured Gym Equipment Can Lead to RCE

penetration testing, Vulnerabilities /

Hacking Hotels via Smart Stationary Bikes: How Unsecured Gym Equipment Can Lead to RCE 2026-04-29 at 17:00 By John Lopez Internet of Things (IoT) systems in hospitality environments are often overlooked as harmless amenities, but in reality, they can operate within highly interconnected networks, turning them into surprisingly effective gateways for broader system compromise. This […]

Hacking Hotels via Smart Stationary Bikes: How Unsecured Gym Equipment Can Lead to RCE Read More »

Scroll to Top