1.Offensive Security Testing in Production: What to Agree Firstblog | 2026-09-25 16:52 | borghq.io | Original ↗ | .md | #continuous-testing | #offensive-security | #risk-management
2.Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scaleblog | 2026-09-24 12:00 | xbow.com | Original ↗ | .md | #ai-security | #attack-surface | #exposure-management
3.From Pentests to Continuous Security with Pixelsblog | 2026-09-25 12:33 | borghq.io | Original ↗ | .md | #web3 | #open-source | #pentest
4.Red Team vs. Pentest vs. Bug Bounty: Building a Complete Web3 Security Programblog | 2026-09-14 11:00 | certik.com | Original ↗ | .md | #bug-bounty | #web3 | #red-team
5.The OffSec challenge that hobbles security teamsblog | 2026-08-11 07:45 | yeswehack.com | Original ↗ | .md | #bug-bounty | #vulnerability-management | #offsec
6.Using MCP Agents for Penetration Testingblog | 2026-07-20 00:00 | bishopfox.com | Original ↗ | .md | #ai-security | #cloud | #pentesting
7.Markus Alliance achieves 5x penetration testing efficiency with Tenzaiblog | 2026-07-19 00:00 | tenzai.com | Original ↗ | .md | #ai-security | #pentesting | #continuous-testing
8.Agentic Pentesting with MCPblog | 2026-07-14 00:00 | caido.io | Original ↗ | .md | #ai-security | #pentesting | #agentic-ai
9.AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendorsblog | 2026-07-09 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #pentesting | #appsec
10.When EPA isn't EPA'ing: What Tools Like Certify, Certipy and checkMSSQLStatus.py missblog | 2026-06-24 00:00 | abdulmhsblog.com | Original ↗ | .md | #ai-security | #active-directory | #penetration-testing
11.YesWeHack is now available in AWS Marketplaceblog | 2026-06-12 07:13 | yeswehack.com | Original ↗ | .md | #bug-bounty | #cloud | #pentest
12.The prioritisation problem: dealing with a growing vulnerability backlogblog | 2026-06-09 06:59 | yeswehack.com | Original ↗ | .md | #bug-bounty | #vulnerability-management | #remediation
13.From prompt to pwned: chaining LLM and web bugs to Adminresearch | 2026-06-04 22:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #web-security | #red-team
14.‘You have to be curious to do this job’: SpawnZii on balancing Bug Bounty with pentestingblog | 2026-05-22 13:51 | yeswehack.com | Original ↗ | .md | #bug-bounty | #interview | #career
15.In WAF we (should not) trustresearch | 2026-03-25 23:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #web-security | #command-obfuscation
16.Top 10 Hacking Devices for Ethical Hackers in 2026blog | 2026-02-06 00:00 | netlas.io | Original ↗ | .md | #iot | #hardware | #tools
17.How I sped up exploit validation in Repeater using Burp AIblog | 2026-01-22 15:18 | portswigger.net | Original ↗ | .md | #ai-security | #idor | #workflow
18.Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the testblog | 2026-01-16 00:00 | portswigger.net | Original ↗ | .md | #ai-security | #sql-injection | #poc
19.Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.blog | 2025-11-14 15:09 | portswigger.net | Original ↗ | .md | #ai-security | #cloud | #sql-injection
20.Burp AI takes on a vulnerable web app: watch Tib3rius put Burp’s new agentic capabilities to the testblog | 2025-10-22 12:59 | portswigger.net | Original ↗ | .md | #ai-security | #agentic-ai | #portswigger
21.Metanarrative Prompt Injectionblog | 2025-10-20 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #cloud | #prompt-injection
22.Welcome to AI pentesting - add on-demand AI assistance directly to your workflow with new, agentic Burp AI capabilitiesblog | 2025-09-24 14:17 | portswigger.net | Original ↗ | .md | #ai-security | #agentic-ai | #product-launch
23.Bug Bounty 101: Top 10 Reconnaissance Toolsblog | 2025-09-12 00:00 | netlas.io | Original ↗ | .md | #ai-security | #bug-bounty | #automation
24.Bug Bounty 101: The Best Courses to Get Started in 2025blog | 2025-08-13 00:00 | netlas.io | Original ↗ | .md | #bug-bounty | #training | #pentest
25.HTTP/1.1 Must Die: What This Means for In-House Pentestersblog | 2025-08-06 22:23 | portswigger.net | Original ↗ | .md | #burp-suite | #http-desync | #request-smuggling
26.HTTP/1.1 Must Die: What This Means for Contract Pentesters and MSSPsblog | 2025-08-06 22:23 | portswigger.net | Original ↗ | .md | #cloud | #burp-suite | #http-desync
27.ControlPlane Local Privilege Escalation Vulnerability on macOSvulnerability | 2025-07-14 22:00 | blog.quarkslab.com | Original ↗ | .md | #privilege-escalation | #macos | #vulnerability
28.AI-Driven Attack Surface Discoveryblog | 2025-06-20 00:00 | netlas.io | Original ↗ | .md | #ai-security | #attack-surface | #llm
29.Using AI to find web app vulnerabilities: hacking expert John Hammond takes Burp AI for a spinresearch | 2025-04-30 13:23 | portswigger.net | Original ↗ | .md | #ai-security | #false-positives | #portswigger
30.Auditing Moodle's core hunting for logical bugsresearch | 2025-04-21 22:00 | blog.quarkslab.com | Original ↗ | .md | #php | #vulnerability | #pentest