See how SafeBreach Labs researchers uncovered a way to hijack Google Gemini via WhatsApp and Slack using a novel indirect prompt injection technique.

See how SafeBreach researchers developed a zero-click PoC exploit for LDAPNightmare (CVE-2024-49113) that crashes unpatched Windows Servers.

SafeBreach is the pioneer in breach-and-attack simulation (BAS) and is the most widely used platform for continuous security validation.

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49112 - SafeBreach-Labs/CVE-2024-49112

SafeBreach found four Windows DoS flaws via RPC and LDAP, enabling stealth DDoS botnets. Microsoft patched in 2025.

SafeBreach is hiring a Frontend Developer | Find your next frontend developer job at Frontend Jobs.

SafeBreach is the pioneer in breach-and-attack simulation (BAS) and is the most widely used platform for continuous security validation.

SafeBreach found four Windows DoS flaws via RPC and LDAP, enabling stealth DDoS botnets. Microsoft patched in 2025.

Learn more about SafeBreach Labs discovery of CVE-2025-29969, a critical RCE vulnerability in the MS-EVEN RPC protocol in Microsoft Windows.

SafeBreach is the pioneer in breach-and-attack simulation (BAS) and is the most widely used platform for continuous security validation.

Get SafeBreach Labs’s latest update on the Price of Persia APT, including new activity that indicates a definitive connection to the Iranian government.

Here’s a look at the most interesting products from the past week, featuring releases from Dynatrace, Nymi, Qualys, SafeBreach, and Satori. Qualys TotalAppSec enables organizations to address risks across web applications and APIs Qualys TotalAppSec unifies API security, web application scanning, and web malware detection across on-premises to hybrid and multi-cloud environments, providing companies with a comprehensive view of their application security risk and posture. SafeBreach exposure validation platform identifies security gaps SafeBreach launched SafeBreach …

SafeBreach is the pioneer in breach-and-attack simulation (BAS) and is the most widely used platform for continuous security validation.

SafeBreach tricked Gemini into obeying attackers via WhatsApp notifications, using hidden foreign-language text to bypass Google's defenses.

SafeBreach has released its 2026 State of the Breach Report, analyzing results from millions of real-world attack simulations conducted by large, global enterprises over a 12-month period using the SafeBreach Exposure Validation Platform. The report provides never-before-seen insights about how enterprises fared against 2025's high-profile threats by examining how security controls actually performed under real attack conditions, moving beyond traditional metrics such as alerts generated, patches applied, or tools deployed.

See how SafeBreach Labs researchers uncovered a way to hijack Google Gemini via WhatsApp and Slack using a novel indirect prompt injection technique.

SafeBreach today announced the launch of its AI-powered Continuous Threat Exposure Management (CTEM) solution. This solution is designed to help organizations move beyond siloed security activities toward a complete, closed-loop CTEM program that continuously identifies, prioritizes, and remediates cyber risk at scale. As enterprises struggle with challenges like AI-generated threats, tool fatigue, and alert overload, traditional reactive security measures are no longer sufficient.