Curated security research, vulnerabilities, advisories and tools for practitioners.

#pentesting

Security coverage tagged pentesting. (Page 5)

121.

Introducing the XBOW Public API

blog | 2026-03-30 12:00 | xbow.com | Original ↗ | .md | #ai-security | #pentesting | #devsecops

122.

ImageMagick: From Arbitrary File Read to File Write In Every Policy

blog | 2026-03-30 07:06 | pwn.ai | Original ↗ | .md | #ai-security | #rce | #zero-day

123.

Turning Email Template Injection into Remote Code Execution

vulnerability | 2026-03-23 14:10 | labs.cognisys.group | Original ↗ | .md | #rce | #pentesting | #web-security

124.

ESC8s and Where to Find Them

blog | 2026-03-27 00:00 | abdulmhsblog.com | Original ↗ | .md | #pentesting | #vulnerability-research | #active-directory

125.

Continuous Pentesting with zero false positives: a fully managed, platform-driven approach

blog | 2026-03-24 07:39 | yeswehack.com | Original ↗ | .md | #pentesting | #vulnerability-management | #continuous-testing

126.

Making Continuous Offensive Security Operational with Microsoft

blog | 2026-03-23 12:00 | xbow.com | Original ↗ | .md | #ai-security | #pentesting | #continuous-testing

127.

Kali Linux 2026.1 Release (2026 Theme & BackTrack Mode)

blog | 2026-03-24 00:00 | kali.org | Original ↗ | .md | #pentesting | #open-source | #red-team

128.

Australia Wide Internal & Wireless Network Penetration Testing

research | 2026-03-19 07:09 | projectblack.io | Original ↗ | .md | #pentesting | #penetration-testing | #wireless

129.

Taking the Top Hacker in the US to New Heights: XBOW Raises $75M Series B

blog | 2026-03-20 19:19 | xbow.com | Original ↗ | .md | #ai-security | #bug-bounty | #pentesting

130.

Security testing is validating software that no longer exists

blog | 2026-03-19 00:00 | aikido.dev | Original ↗ | .md | #pentesting | #appsec | #devsecops

131.

Meet NetSPI’s Modern Pentesting Experience: Use Case-Driven, AI-Accelerated

blog | 2026-03-18 00:00 | netspi.com | Original ↗ | .md | #ai-security | #pentesting | #attack-surface-management

132.

The Golden Role How a Simple API Logic Flaw Unlocked an Entire SaaS Platform

blog | 2026-03-17 09:10 | labs.cognisys.group | Original ↗ | .md | #pentesting | #access-control | #privilege-escalation

133.

Automation without alignment: The hidden cost of modern DAST

blog | 2026-03-12 12:02 | portswigger.net | Original ↗ | .md | #pentesting | #appsec | #burp-suite

134.

Introducing Assessment Guidance: Map Your Brain Onto XBOW's

blog | 2026-03-12 12:00 | xbow.com | Original ↗ | .md | #ai-security | #pentesting | #automation

135.

Introducing Autonomous Pentest: identify actively exploited vulnerabilities across your attack surface

blog | 2026-03-12 08:11 | yeswehack.com | Original ↗ | .md | #pentesting | #agentic-ai | #vulnerability-management

136.

Forrester Recognizes NetSPI in Proactive Security Landscape Report

blog | 2026-03-12 00:00 | netspi.com | Original ↗ | .md | #pentesting | #asm | #proactive-security

137.

When JavaScript Chunks Become Keyholes to the Cloud

blog | 2026-03-11 09:10 | labs.cognisys.group | Original ↗ | .md | #cloud | #cloud-security | #pentesting

138.

‘We must learn how to use AI’: Wlayzz on future-proofing Bug Bounty and how a duplicate became his favourite discovery

blog | 2026-03-09 09:14 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #pentesting

139.

Apache Proxy Paradox CVE-2021-40438

vulnerability | 2026-03-06 09:10 | CVE-2021-40438 | labs.cognisys.group | Original ↗ | .md | #cloud | #pentesting | #apache

140.

What continuous pentesting actually requires

blog | 2026-03-06 00:00 | aikido.dev | Original ↗ | .md | #pentesting | #appsec | #continuous-testing

141.

20+ vulnerabilities found in satellite receiver used by US DoD, EU's Space Agency and others

blog | 2026-03-05 00:00 | CVE-2026-28769 | abdulmhsblog.com | Original ↗ | .md | #rce | #pentesting | #vulnerability-research

142.

What is Penetration Testing as a Service?

blog | 2026-03-01 21:18 | bugcrowd.com | Original ↗ | .md | #cloud | #pentesting | #appsec

143.

Tips to automate your hacking using N8N

blog | 2026-02-25 13:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #bug-bounty | #pentesting

144.

Practical Side-Channel Attacks in Web Applications

blog | 2026-02-24 13:34 | blog.sentry.security | Original ↗ | .md | #pentesting | #web-security | #side-channel

145.

Stay Ahead of Cloud Threats: Introducing Azure and AWS Security Reviews

blog | 2026-02-23 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #aws

146.

XBOW AI-Driven Pentesting vs. DAST

blog | 2026-02-12 13:00 | xbow.com | Original ↗ | .md | #ai-security | #pentesting | #appsec

147.

LDAP, LDAPS, and Active Directory

blog | 2026-02-13 17:55 | semperis.com | Original ↗ | .md | #pentesting | #active-directory | #windows-security

148.

AI-Powered Hacking in 2026: What's Real, What's Hype

blog | 2026-02-11 00:00 | ethiack.com | Original ↗ | .md | #ai-security | #pentesting | #automation

149.

XBOW Is Now Available on AWS Marketplace

blog | 2026-02-05 13:00 | xbow.com | Original ↗ | .md | #cloud | #cloud-security | #aws

150.

Supabase Leaks, What We Found

blog | 2026-02-02 09:10 | labs.cognisys.group | Original ↗ | .md | #cloud-security | #pentesting | #account-takeover

← Previous More →