#pentesters
Agentic Pentesting: Design and Deploy AI Pentest Agents: The infrastructure design skills pentesters need to deploy AI agents on real-world engagements by autopen is the featured course 🎓 on Leanpub!

AI pentest agents already find real … leanpub.com/courses/lean...
November 10, 2026 at 10:15 PM
Most people in OffSec know clients who are still shook up from an incident 10 years ago when pentesters knocked over some servers or prod, and they’re still scoping and putting restrictions around testing because of it. Don’t…

— from @HackingLZ (https://x.com/HackingLZ/status/2120544705200967996)
November 11, 2026 at 4:01 PM
Navigating the Safran Cyber Security Recruitment Landscape: Technical Essentials for Pentesters, SMSI Engineers, and SOC Leaders + Video

Introduction: As cyber threats become increasingly sophisticated, organizations like Safran are restructuring their technical defenses by heavily investing in…
Navigating the Safran Cyber Security Recruitment Landscape: Technical Essentials for Pentesters, SMSI Engineers, and SOC Leaders + Video
Introduction: As cyber threats become increasingly sophisticated, organizations like Safran are restructuring their technical defenses by heavily investing in specialized cybersecurity talent across penetration testing, Information Security Management Systems (SMSI), and Vulnerability Operations Centers (VOC). Aligning information security with critical business and aviation objectives requires robust architectural frameworks, automated threat detection pipelines, and stringent compliance tracking. Learning Objectives & Secrets:
undercodetesting.com
November 12, 2026 at 2:10 PM
New blog post: HexStrike-AI Server on Kali — a practical guide to installing and configuring HexStrike’s AI server on Kali Linux. Great for security researchers and pentesters looking to run AI tools locally. Read more: wix.to/lpVMLGk #KaliLinux #CyberSecurity #AI #Pentesting #InformationSecurity
HexStrike-AI Server on Kali
wix.to
November 10, 2026 at 12:45 PM
Based on some unusual visibility, I can see a lot of both pentesters and threat actors scaling using AI frameworks and models and I don’t see the same kind of scaling for defenders yet. I think some CISOs think “AI will fix it” without really understanding what that means.
It feels like we have an inflection point happening in cybersecurity.

But people outside the practitioner level mostly don't understand it, are distracted by everything else in the world, or think it is more FUD.

Defenders are overwhelmed in a lot of places and it's barely discussed.
November 2, 2026 at 1:06 PM
Advanced Red Teaming and Penetration Testing Careers: Mastering Python, Go, and Active Directory Hardening + Video

Introduction: Modern enterprise cybersecurity demands sophisticated offensive and defensive capabilities, particularly within complex hybrid architectures and Active Directory…
Advanced Red Teaming and Penetration Testing Careers: Mastering Python, Go, and Active Directory Hardening + Video
Introduction: Modern enterprise cybersecurity demands sophisticated offensive and defensive capabilities, particularly within complex hybrid architectures and Active Directory domains. Organizations such as Sopra Steria and their enterprise clients are actively recruiting experienced Pentesters proficient in Python, Go, SQL, and advanced Red Team methodologies to secure critical infrastructure. Navigating this technical landscape requires mastering industry-standard penetration testing toolkits, secure coding principles under OWASP frameworks, and robust post-exploitation mitigation strategies.
undercodetesting.com
November 6, 2026 at 5:10 AM
Stop skipping the basics. If you want to master pentesting, you have to understand how subnets and network ranges actually work. New video out now. 💻

#Pentesting #CyberSecurity #Networking

https://www.youtube.com/watch?v=_p7EzM_P7C0
Why Aspiring Pentesters Must Understand Subnets First #shorts
Pentesting starts with the basics: subnet masks, network ranges, and scanning. Layers of abstraction make technology easier to use—but can hide the fundamentals that help security professionals unders
www.youtube.com
November 1, 2026 at 5:09 PM
Decades of security by obscurity is coming due at the "hands" of agents that don't sleep, and are more skilled than a dedicated team of 50 senior pentesters at fucking up your shit. You can and probably should hate AI but you can not deny that basic reality. Proton doesn't get to opt out of that lol
October 30, 2026 at 3:49 PM
Securing Autonomous AI Pentesters: Engineering Inline Harness Guardrails and Deterministic Policy Engines + Video

Introduction: As red teams and security organizations increasingly deploy autonomous AI agents to conduct continuous penetration testing, the core engineering challenge has shifted…
Securing Autonomous AI Pentesters: Engineering Inline Harness Guardrails and Deterministic Policy Engines + Video
Introduction: As red teams and security organizations increasingly deploy autonomous AI agents to conduct continuous penetration testing, the core engineering challenge has shifted from model intelligence to the control harness surrounding the agent. While LLMs process reasoning and generate potential attack vectors, deterministic software controls must sit outside the model to strictly enforce scope boundaries, credential usage, and execution constraints in real time.
undercodetesting.com
October 30, 2026 at 3:25 PM
I appreciate AI and all, but saying that forgoing pentests and just "prompt better" is insane. privacy and security like that, especially for some people, have extremely low fault tolerances and AI alone is not good enough. Even if the pentesters don't read the code, let them bang at it, please
October 29, 2026 at 4:03 PM
Even the paraphrase isn't saying they should be slower, just that they should test before releasing. That's not going away any time soon. Sorry even my weak fleshy pentesters can find bugs in systems built with Astra and Fable. Not all bugs need to prevent release but it's about fault tolerance.
October 29, 2026 at 4:20 PM
I need more ethical pentesters in my life.
haha you fool, good luck penetrating the thick walls built around my heart after a lifetime of pain

(you easily slip past my defenses and do immense emotional damage)

ah well nevertheless
October 26, 2026 at 6:40 AM
We all know what day it is; It's Matrix Monday! Come join us on our Matrix server. Instruction below. We can't wait to see your zero days.
pcarmy.org/forum/d/6-ma...
Matrix Movement - Pensacola Cyber Army Forum
The official forum of the Pensacola Cyber Army, the greatest community of IT professionals, enthusiasts, students, pentesters, and tinkerers in Northwest Florida.
pcarmy.org
October 29, 2026 at 2:20 AM
well tell that to pentesters that are currently being replaced by AI 😑
October 27, 2026 at 9:19 AM
🚨 OWASP Top 10:2025 has changed.

📈 Security Misconfiguration: #5 → #2
🔗 Software Supply Chain Failures: NEW
⚠️ Mishandling of Exceptional Conditions: NEW

Scanners flag risks. Pentesters validate exploitability.
👉 7asecurity.com/blog/2026/10...

#OWASP #AppSec
OWASP Top 10 Testing Guide: How Pentesters Validate Exploitability
OWASP Top 10 testing guidelines have changed. Learn why SSRF was merged into Broken Access Control in 2025 and what else has changed.
7asecurity.com
October 27, 2026 at 12:12 PM
🏆 MERCI À INFISHARK!

Un gros merci, qui offre des prix pour nos CTF cette année! 🙌
👉 Pour en savoir plus : infishark.com

#Hackfest #Hackfest2026 #CTF #infosec #cybersecurity

🏆 THANK YOU, INFISHARK!

A big thank you for sponsoring prizes for our CTF this year! 🙌

👉 Learn more: infishark.com
InfiShark Tech | Home of BLEShark Nano
Meet BLEShark Nano: The Ultimate Wireless Multi-Tool. Designed for pentesters, developers, and beginners, it’s a compact powerhouse for Bluetooth & Wi-Fi testing. Get yours today!
infishark.com
October 27, 2026 at 11:01 AM
I'm always the first at work to identify when they bring in pentesters because nmap is about as subtle as an especially juicy shart during the quiet part of a church service.
October 25, 2026 at 4:56 AM
100%. Give users physical tokens so they can't be phished. Assume endpoint compromise can happen. Give VPN accounts to pentesters to test internal controls
October 23, 2026 at 11:51 PM
the impression that I'm getting in security is that seven years of pentest experience is irrelevant because security teams want to hire people to construct agentic tooling instead of manual pentesters. I don't want to herd bots.

it's dire. I hate it.
October 24, 2026 at 9:07 PM
one could argue this is already true about human pentesters but online systems can coast for a long time without meaningfully getting attacked - say, long enough to turn from a bedroom project into something that generates money
October 23, 2026 at 5:05 PM
another widespread php rce.

this isn't a vulnerability. this is a holiday for pentesters.
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaw
krebsonsecurity.com
October 24, 2026 at 2:30 PM
Japan's trade minister wants a team of "off-white hackers" at IPA by November: AI-driven pentesters who "attack beyond what attackers do".

In our view, "off-white" is the wrong word. Ethical hacking is defined by permission, not by shade. And why IPA, when the NCO is the command center?
October 23, 2026 at 11:53 AM
literally! there were WAF rules ready to go along with mitigations to apply, then patch right. pentesters and api fuzzers for testing the fix. we’ve been doing this for years! this isn’t adding anything new or speedy, it just throws another proprietary black box into the process
October 22, 2026 at 12:44 AM