penetration testing

Automated network pentesting uncovers what traditional tests missed

automation, cybersecurity, Don't miss, Hot stuff, network, News, patching, penetration testing, Vonahi Security /

Automated network pentesting uncovers what traditional tests missed 2025-09-10 at 11:45 By Zeljka Zorz Most organizations run an annual network penetration test, remediate the issues it uncovers, and move on. But attackers are probing networks every day, using publicly available tools to exploit common misconfigurations and overlooked vulnerabilities. A new report, based on over 50,000 […]

Automated network pentesting uncovers what traditional tests missed Read More »

FireCompass Raises $20 Million for Offensive Security Platform

Cybersecurity Funding, FireCompass, funding, Offensive Security, penetration testing, Risk Management /

FireCompass Raises $20 Million for Offensive Security Platform 2025-09-05 at 15:31 By Ionut Arghire The AI-powered automated penetration testing firm will invest the new funds in R&D, team expansion, and global scale. The post FireCompass Raises $20 Million for Offensive Security Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

FireCompass Raises $20 Million for Offensive Security Platform Read More »

What happens when penetration testing goes virtual and gets an AI coach

Artificial Intelligence, Don't miss, Features, framework, Hot stuff, News, penetration testing, research, Sectigo, skill development, training /

What happens when penetration testing goes virtual and gets an AI coach 2025-08-19 at 09:32 By Mirko Zorz Cybersecurity training often struggles to match the complexity of threats. A new approach combining digital twins and LLMs aims to close that gap. Researchers from the University of Bari Aldo Moro propose using Cyber Digital Twins (CDTs) […]

What happens when penetration testing goes virtual and gets an AI coach Read More »

Pentesting is now central to CISO strategy

Artificial Intelligence, CISO, cybersecurity, Data Protection, generative AI, News, penetration testing, report, supply chain /

Pentesting is now central to CISO strategy 2025-08-11 at 07:36 By Anamarija Pogorelec Security leaders are rethinking their approach to cybersecurity as digital supply chains expand and generative AI becomes embedded in critical systems. A recent survey of 225 security leaders conducted by Emerald Research found that 68% are concerned about the risks posed by […]

Pentesting is now central to CISO strategy Read More »

Open-source password recovery utility Hashcat 7.0.0 released

Don't miss, GitHub, News, open source, passwords, penetration testing, red team, software /

Open-source password recovery utility Hashcat 7.0.0 released 2025-08-04 at 08:10 By Anamarija Pogorelec Hashcat is an open-source password recovery tool that supports five attack modes and more than 300 highly optimized hashing algorithms. It runs on CPUs, GPUs, and other hardware accelerators across Linux, Windows, and macOS, and includes features for distributed password cracking at […]

Open-source password recovery utility Hashcat 7.0.0 released Read More »

Artemis: Open-source modular vulnerability scanner

Don't miss, GitHub, Hot stuff, News, open source, penetration testing, scanner, scanning, software, vulnerability assessment /

Artemis: Open-source modular vulnerability scanner 2025-07-30 at 09:00 By Mirko Zorz Artemis is an open-source modular vulnerability scanner that checks different aspects of a website’s security and translates the results into easy-to-understand messages that can be shared with the organizations being scanned. “The most important feature of the tool is report generation. Besides scanning, it […]

Artemis: Open-source modular vulnerability scanner Read More »

Cervantes: Open-source, collaborative platform for pentesters and red teams

cybersecurity, Don't miss, GitHub, News, open source, OWASP, penetration testing, red team, software /

Cervantes: Open-source, collaborative platform for pentesters and red teams 2025-07-23 at 08:31 By Mirko Zorz Cervantes is an open-source collaborative platform built for pentesters and red teams. It offers a centralized workspace to manage projects, clients, vulnerabilities, and reports, all in one place. By streamlining data organization and team coordination, it helps reduce the time […]

Cervantes: Open-source, collaborative platform for pentesters and red teams Read More »

Exposure management is the answer to: “Am I working on the right things?”

cybersecurity, Don't miss, Features, Hot stuff, Incident Response, News, penetration testing, PlexTrac, strategy, vulnerability management /

Exposure management is the answer to: “Am I working on the right things?” 2025-07-08 at 09:07 By Mirko Zorz In this Help Net Security interview, Dan DeCloss, Founder and CTO at PlexTrac, discusses the role of exposure management in cybersecurity and how it helps organizations gain visibility into their attack surface to improve risk assessment […]

Exposure management is the answer to: “Am I working on the right things?” Read More »

Are we securing AI like the rest of the cloud?

Artificial Intelligence, Backblaze, cloud security, cybersecurity, Don't miss, Features, Hot stuff, News, penetration testing /

Are we securing AI like the rest of the cloud? 2025-06-30 at 09:01 By Mirko Zorz In this Help Net Security interview, Chris McGranahan, Director of Security Architecture & Engineering at Backblaze, discusses how AI is shaping both offensive and defensive cybersecurity tactics. He talks about how AI is changing the threat landscape, the complications […]

Are we securing AI like the rest of the cloud? Read More »

We know GenAI is risky, so why aren’t we fixing its flaws?

Cobalt, cybersecurity, generative AI, LLMs, News, penetration testing, report, security assessment /

We know GenAI is risky, so why aren’t we fixing its flaws? 2025-06-27 at 07:33 By Help Net Security Even though GenAI threats are a top concern for both security teams and leadership, the current level of testing and remediation for LLM and AI-powered applications isn’t keeping up with the risks, according to Cobalt. GenAl […]

We know GenAI is risky, so why aren’t we fixing its flaws? Read More »

XBOW’s AI reached the top ranks on HackerOne, and now it has $75M to scale up

Artificial Intelligence, Don't miss, HackerOne, News, penetration testing, XBOW /

XBOW’s AI reached the top ranks on HackerOne, and now it has $75M to scale up 2025-06-25 at 12:48 By Sinisa Markovic XBOW has raised $75 million in Series B funding to grow its AI-driven offensive security platform. The round was led by Altimeter’s Apoorv Agrawal, with participation from existing investors Sequoia Capital and Nat […]

XBOW’s AI reached the top ranks on HackerOne, and now it has $75M to scale up Read More »

Unleash the Tiger: Fast, Smart, and Targeted Cybersecurity Testing from Trustwave SpiderLabs

News, penetration testing, Tips & Tricks /

Unleash the Tiger: Fast, Smart, and Targeted Cybersecurity Testing from Trustwave SpiderLabs 2025-06-19 at 21:54 By Learn all about Trustwave SpiderLabs’ new Tiger Team Testing. Get rapid, targeted, and cost-effective security assessments. Discover how Tiger Teams differ from traditional red and purple teams. Learn about their focused approach for faster, more efficient vulnerability detection. Identify […]

Unleash the Tiger: Fast, Smart, and Targeted Cybersecurity Testing from Trustwave SpiderLabs Read More »

Review: Learning Kali Linux, 2nd Edition

books, Don't miss, Kali Linux, Linux, News, OffSec, penetration testing, Review, Reviews, skill development /

Review: Learning Kali Linux, 2nd Edition 2025-06-16 at 07:32 By Mirko Zorz Kali Linux has long been the go-to operating system for penetration testers and security professionals, and Learning Kali Linux, 2nd Edition by Ric Messier aims to guide readers through its core tools and use cases. This updated edition introduces new material on digital […]

Review: Learning Kali Linux, 2nd Edition Read More »

Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new tools

Don't miss, Hot stuff, Kali Linux, News, OffSec, open source, penetration testing, software /

Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new tools 2025-06-14 at 12:17 By Zeljka Zorz OffSec has released Kali Linux 2025.2, the most up-to-date version of the widely used penetration testing and digital forensics platform. KDE Plasma 6.3 in Kali Linux 2025.2 (Source: OffSec) New in Kali Linux 2025.2 As per usual, the newest […]

Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new tools Read More »

Build a mobile hacking rig with a Pixel and Kali NetHunter

cybersecurity, Don't miss, hardware, Hot stuff, Kali Linux, mobile devices, News, OffSec, penetration testing /

Build a mobile hacking rig with a Pixel and Kali NetHunter 2025-06-12 at 08:32 By Mirko Zorz A cybersecurity hobbyist has built a compact, foldable mobile hacking rig that runs Kali NetHunter on a Google Pixel 3 XL. It’s called the NetHunter C-deck, and it packs serious functionality into a small, 3D-printed shell. NetHunter C-deck […]

Build a mobile hacking rig with a Pixel and Kali NetHunter Read More »

Red Teaming Around the World (UK and Europe vs. US)

penetration testing, Perspectives /

Red Teaming Around the World (UK and Europe vs. US) 2025-06-02 at 20:36 By Philip Pieterse Regional Nuances: Explore the key differences in Red Teaming approaches across the UK, Europe, and the US, including regulatory frameworks and threat modeling. Red Team vs. Penetration Testing: Understand the distinct objectives, scopes, and durations of Red Team engagements compared to pen […]

Red Teaming Around the World (UK and Europe vs. US) Read More »

Product showcase: Smarter pentest reporting and exposure management with PlexTrac

Don't miss, Hot stuff, News, penetration testing, PlexTrac, Product showcase /

Product showcase: Smarter pentest reporting and exposure management with PlexTrac 2025-06-02 at 09:03 By Help Net Security The threat landscape is evolving faster than ever. Staying ahead means going beyond automated scans and check-the-box assessments. It demands continuous, hands-on testing through a security approach that proactively identifies, prioritizes, and mitigates threats in real time. To […]

Product showcase: Smarter pentest reporting and exposure management with PlexTrac Read More »

From Simulation to Strategy: Evolving Your Red and Purple Teaming Approach

penetration testing, Tips & Tricks /

From Simulation to Strategy: Evolving Your Red and Purple Teaming Approach 2025-05-13 at 16:01 By Red and Purple Teaming: Strategic Evolution – Discover how modern security assurance programs are shifting from one-off simulations to strategic, continuous improvement. Real-World Insights from Security Leaders – Learn from Trustwave experts on leveraging red and purple team testing to uncover security […]

From Simulation to Strategy: Evolving Your Red and Purple Teaming Approach Read More »

Autorize: Burp Suite extension for automatic authorization enforcement detection

Don't miss, GitHub, News, open source, penetration testing, software /

Autorize: Burp Suite extension for automatic authorization enforcement detection 2025-05-07 at 08:02 By Help Net Security Autorize is an open-source Burp Suite extension that checks if users can access things they shouldn’t. It runs automatic tests to help security testers find authorization problems. Autorize installation To use Autorize, you’ll need Burp Suite and Jython. Here’s […]

Autorize: Burp Suite extension for automatic authorization enforcement detection Read More »

Scroll to Top