#OffensiveSecurity
LightNews LightNews
ttakanas.bsky.social
XBOW on Google Cloud: Stop AI Attackers with Autonomous Security

#XBOW #GoogleCloud #AutonomousSecurity #OffensiveSecurity #AppSec #CyberSecurity
XBOW on Google Cloud: Stop AI Attackers with Autonomous Security
google.smh.re
November 10, 2026 at 3:40 AM
XBOW on Google Cloud: Stop AI Attackers with Autonomous Security

#XBOW #GoogleCloud #AutonomousSecurity #OffensiveSecurity #AppSec #CyberSecurity
XBOW on Google Cloud: Stop AI Attackers with Autonomous Security
google.smh.re
November 9, 2026 at 7:16 PM
pentest-tools.com
Need proof of impact, not only exposure? Our Sniper exploit gets a shell on the target and extracts artefacts as evidence (Exploit plan).

#ethicalhacking #offensivesecurity

pentest-tools.com/network-vuln...
Free *sshole scanner (CVE-2026-123158) - OpenSSH on Alpine
Free *sshole scanner for CVE-2026-123158, the OpenSSH password bypass on Alpine and musl Linux. Check your SSH servers and get a PDF report.
pentest-tools.com
November 6, 2026 at 4:51 PM
pentest-tools.com
The first wish stays with you. Specter models how your app behaves, but you know how it's supposed to behave.

#offensivesecurity #penetrationtesting
pentest-tools.com/features/ai-...
AI Pentests - autonomous web application penetration testing
See how AI Pentests autonomously investigate web applications, validate exploitable vulnerabilities, and generate evidence-backed penetration testing reports.
pentest-tools.com
November 3, 2026 at 2:35 PM
pentest-tools.com
With Sniper: Auto-Exploiter, confirm which services are actually exploitable, with proof, then validate the patch.

KEV status means “patch today.” Validation tells you which services to fix first. Part of the Exploit plan.

#offensivesecurity #ethicalhacking
Node2Shell/HTTP2Shell - Brotli Decoder Remote Code Execution (CVE-2026-111497)
An unauthenticated attacker who can send Brotli-compressed request bodies to the application or proxy, or make it fetch Brotli-compressed responses from a server they control, can corrupt process memo...
pentest-tools.com
October 30, 2026 at 2:27 PM
pentest-tools.com
One chain, two ways in: plant an SSH key for root access, or quietly create a new admin account.

Full breakdown and PoC: pentest-tools.com/ptt-2026-006...

#offensivesecurity #vulnerabilityresearch
pentest-tools.com
October 28, 2026 at 1:58 PM
praetorianlabs.bsky.social
an exposed phpinfo page hands attackers your php version, build, memory_limit, and apache mpm. see how the guard catches exposures like that 🎯 www.praetorian.com/praetorian-g... #offensivesecurity #praetorian #praetorianguard
October 27, 2026 at 7:57 PM
praetorianlabs.bsky.social
Upgrade PHP to 8.2.35, 8.3.36, 8.4.27, 8.5.12, or later, then restart Apache and PHP-FPM. Updating your app does not update PHP.

See what the Guard finds on your attack surface: www.praetorian.com/praetorian-g...

#OffensiveSecurity #Praetorian #PraetorianGuard
October 23, 2026 at 2:17 PM
pentest-tools.com
Scan your targets for free: pentest-tools.com/network-vuln...

#offensivesecurity #pentesting #vulnerabilitymanagement
Free PHP2Shell scanner - CVE-2026-109618 & CVE-2026-109619
Free PHP2Shell scanner for CVE-2026-109618 and CVE-2026-109619, the critical RCE flaws in PHP core. Check your targets and get a PDF scan report.
pentest-tools.com
October 21, 2026 at 7:01 PM
pentest-tools.com
3. On PHP 8.1 or older? No fix is coming. Upgrade, or take those systems off the internet
4. Alert on PHP processes spawning shells, interpreters, or download tools

#offensivesecurity #pentesting #vulnerabilitymanagement
October 21, 2026 at 1:24 PM
pentest-tools.com
Three government programs already. Specter brought proof to every one.

The US Department of State just acknowledged a vulnerability our autonomous pentesting engine reported via its HackerOne disclosure program. Call it diplomatic recognition.

#offensivesecurity #penetrationtesting
AI Pentests - autonomous web application penetration testing
See how AI Pentests autonomously investigate web applications, validate exploitable vulnerabilities, and generate evidence-backed penetration testing reports.
pentest-tools.com
October 20, 2026 at 12:02 PM
pentest-tools.com
The bet got him started. The learning is what he’d tell you to chase.

His full story with @sans.org: www.sans.org/customer-rev...

#offensivesecurity #pentesting
Customer Reviews: Razvan-Costin Ionescu
Razvan-Costin Ionescu | Head of Offensive Security Services at Pentest-Tools.com | 11 GIAC Certifications | 1 SANS Course Completed
www.sans.org
October 16, 2026 at 12:24 PM
pentest-tools.com
The numbers behind it:
🔹 7 vendors compared before they chose Pentest-Tools.com
🔹 ~3,000 customers under ongoing assessment
🔹 60–90 days between reruns
🔹 2 plan upgrades in the past year

#cybersecurity #offensivesecurity
pentest-tools.com/case-studies...
Case study: how Elpha Secure uses Pentest-Tools.com
Elpha Secure uses Pentest-Tools.com to speed up testing, scale with clarity, and stay ahead of attackers with actionable, automated insights.
pentest-tools.com
October 15, 2026 at 11:48 AM
pentest-tools.com
Getting IBM to say “critical” and “thank you” in one report? Specter managed both.

The vulnerability came in through IBM’s bug bounty program. Specter is the autonomous engine behind AI Pentests.

pentest-tools.com/features/ai-...

#offensivesecurity #ethicalhacking
October 13, 2026 at 5:52 AM
pentest-tools.com
The rest of the crew will be there too: 0-day hunters, exploit module engineers and, of course, the swag (if you’re fast enough).

📍 Nov 19–20, Palace of the Parliament, Bucharest
pentest-tools.com/events/defca...

#offensivesecurity #ethicalhacking
Meet us at DefCamp 2026: Specter and swag
Meet the team behind AI Pentests and Specter at DefCamp 2026, Nov 19-20 in Bucharest. Live demos, straight answers, and free swag.
pentest-tools.com
October 13, 2026 at 1:05 PM
praetorianlabs.bsky.social
structured block kit alerts, threaded conversations with marcus, and identity links either side can revoke. see it in your own environment 💬

www.praetorian.com/praetorian-g...

#OffensiveSecurity #Praetorian #PraetorianGuard
October 10, 2026 at 12:39 AM
pentest-tools.com
Plus SOC 2 mapping, a new trick for Ping, our AI assistant, and a few more updates.

Everything that shipped: pentest-tools.com/change-log

Stay sharp. Stay human.

#offensivesecurity #penetrationtesting
Change log for Pentest-Tools.com
Consult our changelog to see exactly how our platform is constantly changing, what we're adding to it to make it better and how we're updating vulnerabilities.
pentest-tools.com
October 7, 2026 at 12:00 PM
pentest-tools.com
One defense ministry could be luck. Two looks like method.

After the US DoD, the UK Ministry of Defence publicly credited Specter, our autonomous pentesting engine, for a finding in its HackerOne bug bounty program.

Evidence they could reproduce. No maybes.

#offensivesecurity #penetrationtesting
AI Pentests - autonomous web application penetration testing
See how AI Pentests autonomously investigate web applications, validate exploitable vulnerabilities, and generate evidence-backed penetration testing reports.
pentest-tools.com
October 5, 2026 at 11:38 AM
pentest-tools.com
Our Cosmin Petrescu's advice for defenders: use the same models to "find weaknesses the way such attackers would."

The guardrails got abliterated. The craft didn't.

Full article 👇

#offensivesecurity #cybersecurity
October 1, 2026 at 1:12 PM
aperfectchoice.bsky.social
👉 shorturl.at/dqn42

🛡️ Senior Consultant Penetration Testing & Red Teaming (w/m/x) gesucht!

#CyberSecurity #Pentesting #RedTeaming #OffensiveSecurity #ITSecurity #CyberSecurityJobs #ITJobs #Karriere
Senior Consultant Penetration Testing und Red Teaming (w/m/x)
Senior Consultant Penetration Testing und Red Teaming (w/m/x)
shorturl.at
September 29, 2026 at 1:45 PM
artestomellivoura.bsky.social
🛡️ TOOLS FOR OFFENSIVE SECURITY — ESSENTIAL CYBERSECURITY TOOLS EXPLAINED

#OffensiveSecurity #Cybersecurity #EthicalHacking #PenetrationTesting #CyberSecurityTools #Nmap #BurpSuite #Wireshark #Metasploit #KaliLinux #NetworkSecurity #InfoSec #CyberSecurityEducation #TechEducation #ArtestoMellivoura
September 29, 2026 at 2:36 PM
pentest-tools.com
30 minutes live. 15 minutes of open Q&A.

Register here 👉 zoom.us/webinar/regi...
#penetrationtesting #offensivesecurity #cybersecurity

Wednesday, September 30 | 8:00 AM Los Angeles | 11:00 AM New York | 4:00 PM London | 6:00 PM Bucharest
Pentest-Tools.com Office Hours - 5 offensive security topics that actually matter, Wednesday, September 30
September 24, 2026 at 12:09 PM
chaosfoundry.bsky.social
"If you're a #vtuber, you should watch Darling and me and @J4ck3LSyN right now. >;3" It...oh, he did have a PoC already, didn't he? "Mhm, we found some security holes in Vtuber motion cap. <3" ....It's still research...
www.twitch.tv/chaosfoundry #cfsd #offensivesecurity
ChaosFoundry - Twitch
An intergalactic mob boss, transported by a Yandere ghost from Japan to reform my lewdness and become a Virtual Streamer. Now trapped, let's get along and chill out together. — ChaosFoundry streams li...
www.twitch.tv
September 23, 2026 at 9:52 PM
pentest-tools.com
Robert Tanase and Jan Pedersen unpack what we learned at DEF CON and Black Hat (and what's next for AI Pentests) on our latest Office Hours.

Full recap + early access:
pentest-tools.com/blog/ai-pent...

#offensivesecurity #penetrationtesting
What DEF CON 34 and Black Hat told us about AI pentesting
87.8% of practitioners say AI findings still need manual validation. Here's what happened when we brought AI Pentests to DEF CON, and what Black Hat US added.
pentest-tools.com
September 15, 2026 at 2:12 PM