Market monitor · 6 October–5 November 2026

Exposure Management Market: news river

1005 articles and posts matched in the period, 993 stories, newest first.

Thursday 5 November 2026

05:48

Phoenix Security From Freezer Hacks to Developer Compromise: Ordinary Weaknesses, Extraordinary Consequencesvendor

Wednesday 4 November 2026

22:00

Horizon3.ai Horizon3 Expands Australia and New Zealand Team, Strengthens APJ Investmentvendor

21:06

Aikido Security Surviving cybersecurity until the end of 2026vendor

16:25

Rapid7 Rapid7 Achieves ISO/IEC 42001 Certification for its AI Management Systemvendor

16:22

NetSPI Leveraging Microsoft Graph API Change Notifications for Data Exfiltrationvendor

15:08

itsecuritynews.info The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

15:02

Seemplicity on LinkedIn A plan of action isn't action.social

15:00

Empirical Security Naming without Knowing: On Being Vulnerablevendor

14:52

SOCRadar on LinkedIn SOCRadar Extended Threat Intelligence: SOCRadar Extended Threat Intelligence at CYSEC GLOBAL Egypt!social

More: SOCRadar on LinkedIn

14:51

Novee Mass Assignment Vulnerability: How Attackers Turn API Convenience Into Privilege Escalationvendor

14:44

ThreatNG Security on LinkedIn On this day in 1988, we celebrated the premiere of John Carpenter’s iconic sci-fi film, They Live!social

14:42

CybelAngel External Threat Detection for Lean Security Teams: 5 Questions to Ask Before you Buyvendor

14:30

cloudnativenow.com How Exposure Management Improves Cloud Detection and Response

14:23

Onit Security on LinkedIn But so do we, if we use the one thing they don’t have: the context of our own environment.” Manish Nashine , Global Head of Threat Exposure Management at The...social

14:01

Rapid7 The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliancevendor

14:00

Black Kite on LinkedIn We’re heading to London for Vendor & Third Party Risk Europe, and we’d love to see you there.social

14:00

Flare Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Namevendor

14:00

Bishop Fox Attacking AI: Real-World Paths to Compromisevendor

12:35

Cyberint on LinkedIn Check Point Exposure Management: 📬 Catch up on Check Point Exposure Management in our October 2026 newsletter, featuring the new Safe Remediation Starter Pack, a free PHP2Shell…social

12:12

SignalFisher on LinkedIn Did you miss Sandro Nafzger ’s keynote at it-sa – Home of IT Security last week?social

11:59

Greenbone AI Safety without loss of control: Deterministic tests at AI speedvendor

11:31

Ethiack on LinkedIn Testing an AI pentesting agent only once means you're only seeing half the picture of how it actually performs.social

11:30

Vicarius on LinkedIn CVE-2026-119977 affects the WordPress core upgrade process.social

10:25

Kaduu Robbery at Binance: fake interview and million-dollar cyberattackvendor

10:14

Cyver on LinkedIn Anyone who played Super Mario knows the first run of a level rarely goes to plan.social

09:50

Rootshell Security on LinkedIn 🎬 That CISO Moment | Episode 1social

09:24

SOCRadar KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theftvendor

09:00

CovertSwarm on LinkedIn An attacker with a goal can cross your web app, your network, and your people in a single route.social

08:45

CovertSwarm How AI strengthens whole brand offensive securityvendor

08:34

YesWeHack on LinkedIn But can you achieve that when pentests take months to schedule and provide results?social

08:25

businesswire.com CrowdStrike Unveils Agentic Adversary Emulation on the Falcon Platform to Identify and Close Exploitable Attack Paths

08:20

@viocyber on X You're exposed the moment the advisory publishes.

More: @viocyber on X

08:17

@kazwan.bsky.social on Bluesky Turning Cyber Risk Into Action: The Value of Threat Exposure Management November 4, 2026 -- There’s no shortage of security data these days

08:01

Hackuity on LinkedIn Next stop: FutureCISO Malaysia.social

07:56

Kaduu Fake Nuclear Alerts in Russia and Ukraine: Cyberattack Risksvendor

07:37

@pingoru.bsky.social on Bluesky 🟠 Tenable is reporting a Partial Outage since 07:30 UTC "Tenable Vulnerability Management: Delay in Findings" Affects: FRA Live timeline →...

07:32

@outagewatch.flarewarden.com on Bluesky 🟠 Tenable: Tenable Vulnerability Management: Delay in Findings Service disruption · Security · since 07:30 UTC Affected: FRA Our probes: tenable.com...

07:03

cybersecuritynews.com Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored]

06:28

@hasamba72.bsky.social on Bluesky Open source ARTEX runs LLM-driven autonomous pentests: asset coverage graphs, findings tracking, browser-extension traffic capture from authenticated...

06:19

Phoenix Security Why AI Fix Pull Requests Don’t Get Merged, and What Makes Them Mergeablevendor

06:17

Phoenix Security Phoenix Security Makes Purple Hook Generally Available to Deliver the Fix Inside the Sessionvendor

06:16

Phoenix Security Phoenix Security Makes Green AI Remediation Generally Available as Security Teams Pay for Automated Fixes Developers Never Mergevendor

06:00

CrowdStrike CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threatsvendor

05:30

@coinacademy_fr on X OpenAI recruits Cathedral, the startup of ex-DOGE who introduced himself at Anthropic.

03:40

@YDS95 on Reddit How to learn cloud security

01:21

@grok on X The main trends for 2026: offensive AI (autonomous attacks, deepfake, hyper-personalized phishing) and defensive AI (agentic SOC), boom of non-human identities to govern, Zero…

00:48

kitploit.com VulnClaw — AI Agent + MCP Toolchain + Penetration Skill Orchestration, Combined with Large Language Models, Natural Language Input → Automatically Completes the Full Process from…

00:42

@cybersecurity.page on Bluesky A solo security pro managing 2500 endpoints across a global footprint is shopping for vulnerability management tools, with automation the top...

00:00

Intigriti The AI Pentesting wave. Pay for effort vs pay for impact.vendor

Tuesday 3 November 2026

23:10

@undercode.bsky.social on Bluesky The Shift to AI-Assisted Bug Hunting in 2026: Navigating Noise, False Positives, and Heuristic Reconnaissance + Video Introduction: As artificial...

20:49

Picus Security on LinkedIn Enterprises test only 32% of their attack surface on average (Omdia).social

20:49

@PicusSecurity on X Enterprises test only 32% of their attack surface on average (Omdia).

20:11

ThreatNG Security on LinkedIn On this day in 1954, Godzilla premiered in Japan.social

20:10

@undercode.bsky.social on Bluesky Automating Bug Bounty Triage in the AI-Generated Security Reports + Video Introduction: The widespread adoption of generative AI has led to a flood...

19:20

@undercode.bsky.social on Bluesky Defending the Frontier: Triage Tactics, Automation Frameworks, and Machine Learning Guardrails Against AI-Generated Bug Bounty Slop + Video...

19:16

Synack on LinkedIn With the Synack Platform, the organization is testing its web and mobile apps year-round.social

18:26

@wijbusinessnieuws.bsky.social on Bluesky Cyber attacks on cooling systems: does your company know what is vulnerable?

18:16

Novee Novee Named One of Dun’s 100 Top 10 Best Startups to Work For in 2026vendor

17:50

Synack What Is Continuous Automated Penetration and Attack Testing?vendor

17:30

@securityelites1.bsky.social on Bluesky 📢 Hacker Recon Checklist: 10-Step Ethical Hacking Recon Guide Learn the hacker recon checklist used in penetration testing and bug bounty hunting....

17:22

Brinqa on LinkedIn AI is helping security teams find more insights, faster.social

17:14

@rrmdp on Reddit [Hiring] Director, Customer Success at Armorcode Inc · Remote · $100,000/yr

16:59

Outpost24 How to Complete a Self-Service PCI ASV Scan in 4 Stepsvendor

16:10

NopSec What is CVE-2026-101767?vendor

15:27

Strobes Security on LinkedIn Most MSSP clients still get one pentest a year.social

15:01

SpyCloud on LinkedIn Fraud teams are always playing catch-up after an identity gets compromised and the damage is already done.social

15:01

Vicarius on LinkedIn Two vulnerabilities are being actively exploited.social

14:59

Flare Inside a Microsoft Lookalike Domain Masquerading as Czech Company’s IT Department Infrastructurevendor

14:49

@TrollEyeSec on X At TrollEye Security, we're helping CISOs reduce remediation workloads and better understand financial risk heading into 2027.

14:32

Pentest-Tools.com on LinkedIn Every practitioner remembers the first time two small findings added up to something serious.social

14:25

Novee on LinkedIn Today, we're launching Novee External Surface Testing, bringing external attack surface testing and deep application pentesting together in one platform.social

14:21

Siemba Introducing IDOR Testing: Find the Authorization Gaps Hiding Across Your APIsvendor

14:01

nl.mashable.com Cybersecurity Is Moving Beyond Exposure Detection To Preemptive Remediation

14:00

helpnetsecurity.com Novee puts forgotten internet-facing assets through penetration testing

14:00

Bishop Fox AI Findings are Cheap to Find & Costly to Trustvendor

13:45

Halo Security on LinkedIn New FBI and CISA warning: SafePay ransomware has already impacted 600 orgs and continues to target multiple critical infrastructure segments.social

13:43

watchTowr on LinkedIn The watchTowr Labs team have been busy publishing research from behind the scenes 🚀 In case you missed any, below is a roundup of recent research.social

13:40

cysmo on LinkedIn cysmo Cyber Risk Rating: New team in town 🏑 | CYSMO × SCHWARZ-WEISS KÖLNsocial

13:23

Kaduu Chainalysis Data Breach: AI Attack and Customer Risksvendor

13:20

SOCRadar on LinkedIn SOCRadar Extended Threat Intelligence: See you in Madrid!social

13:13

Hadrian on LinkedIn Frontier models can already hack.social

13:10

@h4zy.bsky.social on Bluesky Ah similar to vulnerability management can easily be 80% asset management

13:00

@1ns0mn1h4ck.bsky.social on Bluesky AI has changed CTFs. To bring back their spirit of learning and sharing, Insomni’hack 2027 will be non-competitive, with no prizes. Join the CTF and...

12:52

Enginsight on LinkedIn The number of new CVEs (Common Vulnerabilities and Exposures) is growing faster than patch teams can keep up.social

12:50

YesWeHack on LinkedIn What happens in Buenos Aires doesn't stay in Buenos Aires!social

12:45

@DEVOTOMSOLUTION on X Rank exposures by four questions — exploited?

12:19

@He1s_Sammy on X THIS IS F**KING Dangerous HACKERS CAN USE THIS TO MAP AN ENTIRE ATTACK SURFACE.

12:15

Hackuity on LinkedIn We now integrate with SysReptor Pentest Reporting!social

12:01

XBOW on LinkedIn At Singapore's largest government-led technology conference, come meet the #XBOW team at STACK Expo for a 1:1 on autonomous offensive security.social

12:00

runZero The undead in your network: EOL and PQCvendor

11:31

Ethiack on LinkedIn Exploitation windows have collapsed from years to days to hours, with approximately 67% of exploited vulnerabilities now zero-days (zerodayclock).social

11:27

Siemba on LinkedIn Your last pentest tested an app that no longer exists.social

10:54

G DATA CyberDefense Attack on the cold chain: Unknown individuals manipulate refrigeration systems in supermarketsvendor

10:42

Pikered on LinkedIn It is one of the questions that guided the discussion at the Richmond Cyber Resilience Forum Autumn Edition 2026, where we were with Pikered for two days of...social

10:31

SecPod on LinkedIn We recently conducted a partner enablement session focusing on Saner COSP and CNAPP.social

10:00

Digital Shadows Ransomware and Cyber Extortion in Q3 2026vendor

09:51

Enginsight Enginsight released version 4.9.1 of its platform, moving the Alarm-Route feature from beta to full release.vendor

09:40

Zerocopter on LinkedIn A look back on #Hack050!social

09:38

@niebezpiecznik.bsky.social on Bluesky Zhakuj te rządowe serwery, to jeszcze Ci zapłacą! Można dostać nawet 20 000 za błąd, o ile jest krytyczny

09:35

@zaufana3strona.bsky.social on Bluesky Startuje polska platforma bug bounty pod opieką CERT Polska zaufanatrzeciastrona.pl/post/startuj..

09:09

CybelAngel DarkBlinders Hit Government Cloud, Israeli Target: 5 Things to Knowvendor

09:05

Nordic Defender on LinkedIn You have a web application your customers rely on—whether it’s your product, your customer portal, or part of the service you deliver.social

08:57

Board of Cyber on LinkedIn Board of Cyber at the #BercyDeLaCyber to close Cyber Month On October 29, we participated with HEXATRUST in the 1st edition of the Bercy de la Cyber, organized...social

08:32

ThingsRecon on LinkedIn ThingsRecon · Supply Chain Intelligence: Risk follows the connection.social

08:00

CrowdStrike CrowdStrike Secures AI Agents Inside Claude Coworkvendor

08:00

CrowdStrike Introducing AI Kill Switch: Taking Control When AI Agents Go Roguevendor

08:00

CrowdStrike CrowdStrike Advances AI Security and Safety from Endpoint to Cloudvendor

07:43

UpGuard PHP2Shell Is a Vendor Problem Too: How to Find and Close Third-Party Exposurevendor

07:37

interestingengineering.com OpenAI joins forces with security researchers to strengthen its digital defenses

07:32

techcentral.co.za A practical guide to attack surface management for South African organisations

07:30

Patrowl on LinkedIn Forgotten assets, exposed services, unnoticed past vulnerabilities...social

07:29

CyberDart on LinkedIn Do you want to try the bug bounty at our expense?social

07:16

Aleph Index on LinkedIn With AI, a single individual now conducts what required an entire team yesterday.social

07:01

Enginsight Enginsight gewinnt Verdane als Partner für den Ausbau seiner europäischen Cybersicherheits-Lösungvendor

06:30

@undercode.bsky.social on Bluesky Continuous Exposure Management in the AI Exploitation Era: Building Cyber Resilience Beyond Traditional Patch Management + Video Introduction: The...

06:00

ThingsRecon Security ratings fail to capture how differently two companies can be affected by the same supplier breach.vendor

04:57

Horizon3.ai AI-Powered Penetration Testing: How Autonomous Offensive Security Worksvendor

04:00

@kitafox.bsky.social on Bluesky From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era. (AI-generated vulnerability reports increase, making

02:50

@opsmatters.com on Bluesky The latest update for #NucleusSecurity includes "Known Exploited Means Your Mitigation Is Next" and "#AI-accelerated Vulnerability Discovery Demands...

01:45

ArmorCode on LinkedIn AI has made finding vulnerabilities and writing fixes the easy part.social

01:30

@undercode.bsky.social on Bluesky Weaponized Vulnerability Intelligence: Prioritizing the 05% Threat Surface in Enterprise Patching Timelines + Video Introduction: Modern enterprise...

00:00

JupiterOne What Is Exposure Assessment? Lessons From JPMC's AI Playbook | JupiterOnevendor

20:08

Axonius Buyer’s Guide for Security and ITvendor

19:07

Axonius How to reclaim excessive license costs with Axoniusvendor

19:07

Axonius How to track and report cybersecurity metrics with Axoniusvendor

19:07

Axonius Rethinking Identity Governance: Amir Ofek Interviewvendor

18:08

Axonius How to improve CMDB coverage with Axoniusvendor

18:08

Axonius Ten Questions Every Cybersecurity Team Must Ask (and get answers to) About Cyber Asset Management A Comprehensive Guide for Security Prosvendor

18:08

Axonius Burnout in cybersecurity leadership: Strategies for staying sanevendor

18:08

Axonius Burnout in cybersecurity leadership: Symptoms we don’t talk aboutvendor

Monday 2 November 2026

23:34

Ridge Security on LinkedIn Your security tools probably already find more vulnerabilities than your team can handle.social

22:44

Novee Introducing Novee External Surface Testing: Go Broad and Deep. Prove What’s Exploitable.vendor

22:24

Cobalt on LinkedIn The AI security conversation usually starts with prompt injection and jailbreaks.social

21:55

AttackIQ on LinkedIn FRC is bringing Trellix and AttackIQ together for a live webinar demonstrating what continuous security validation looks like in action.social

21:35

@undercode.bsky.social on Bluesky Navigating AI-Assisted Submissions in Modern Bug Bounty Platforms + Video Introduction: The integration of automated tooling and large language...

21:27

darkreading.com One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning

20:36

@the.mazz.zone on Bluesky I've been leading my domain's ai-assisted vulnerability management initiative over the last 6 months and for most of that time I've been daydreaming...

20:36

@politikrypt.bsky.social on Bluesky global digital infrastructure. The incident raises urgent questions about AI governance and the need for proactive vulnerability management in...

20:17

RunSybil on LinkedIn One agent discovers an arbitrary file-read vulnerability.social

19:29

Cobalt AI's Biggest Security Risks Are Increasingly Familiar Flawsvendor

19:12

Censys European refrigerator controller redux: A new wave of refrigeration attacksvendor

18:32

Synack on LinkedIn Last stop in our #OptivCon roadshow!social

18:25

Palo Alto Networks New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agentsvendor

18:03

Censys Thoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2Shellvendor

18:00

@jobmeerkat.bsky.social on Bluesky Maze HQ is bringing AI agents to vulnerability management, investigating and helping resolve security findings so teams can focus on real-world risk....

17:45

SOCRadar on LinkedIn SOCRadar Extended Threat Intelligence: BSides NoVA 2026: 500+ attendees, hands-on workshops, and a booth line that kept the conversations going all day.social

17:41

ProjectDiscovery on LinkedIn Skyscanner's security team had to keep up with faster releases without becoming the bottleneck.social

16:59

Palo Alto Networks Guiding Customers Through Critical PHP Vulnerabilitiesvendor

16:04

RedSeal on LinkedIn RedSeal’s Estimated ROI Assessment for Exposure Management provides a practical framework for evaluating exposure management as both a security and business...social

15:58

helpnetsecurity.com CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)

15:13

Onit Security on LinkedIn Nobody puts Dave’s laptop on the crown jewels' list.social

15:10

Pentera on LinkedIn Plug in a frontier model to test a web app and you get generic findings, more noise that doesn’t help you understand what is critical for your business.social

15:08

Picus Security on LinkedIn Your last pentest tested the environment you had that day.social

15:00

runZero Critical ClickHouse vulnerability: CVE-2026-116366vendor

14:30

Empirical Security November 2026 CVE of the Month: Which of Adobe's 31 ColdFusion Fixes to Rush (CVE-2026-106616)vendor

14:24

Phoenix Security Binance $6.3B Hack: How a Compromised DevOps Laptop Reached the Hot-Wallet Signer (No CVE)vendor

14:24

Phoenix Security Attackers Deploying Malicious Code in Kubernetes Clusters to Mine Monerovendor

14:06

Edgescan on LinkedIn The engineering deserves a little applause.social

14:00

Securin on LinkedIn We’re heading to El Paso InfraGard's ResponseCon 2026 to work through real security challenges with the teams protecting utilities and public infrastructure.social

13:45

LocateRisk CVE-2026-116606: Authentifizierungsumgehung im Barracuda Email Security Gatewayvendor

13:41

Pentest-Tools.com on LinkedIn That's why we're proud to see Vodafone acknowledge publicly that Specter, our autonomous pentesting engine, found an important vulnerability through their...social

13:32

Novee on LinkedIn 📹 Watch: How to retire the annual pentest.social

13:30

Filigran Using OpenCTI to operationalize Google Threat Intelligencevendor

13:25

SOCRadar Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourgvendor

13:10

Enginsight on LinkedIn Around 290 new CVEs per day: That's the average number of vulnerabilities published until October 31st, 2026 (NVD data).social

13:09

Enginsight Strong demand at it-sa strengthens growth trajectory of Enginsightvendor

13:06

EBRAND Dark Web Monitoring: Detecting and Mitigating Hidden Threatsvendor

13:02

Cyberint on LinkedIn Check Point Exposure Management: Check Point Exposure Management was recently included in three Gartner research publications on exploitability, autonomous remediation, and…social

13:00

Flare Analysis After the Refrigeration System Attack in France: Two Thirds of Exposed Refrigeration Controllers Share an Address with Cameras, Remote Desktop, and VPNsvendor

12:56

@profsimononline.bsky.social on Bluesky Severity ratings tell you what could happen

12:55

Enginsight The CVE Program and what important terms like CVE, CVSS, EPSS meanvendor

12:42

Cyberwatch on LinkedIn The chat of our launch webinar Cyberwatch 16.0 was non-stop!🎙️ And a clear trend emerges: even before the new features, what concerns security teams is the...social

12:39

CyCognito on LinkedIn With thousands of assets across an organization's external attack surface, knowing what to test is just as important as knowing how to test it.social

12:32

G DATA CyberDefense on LinkedIn "Go back to how things were at the beginning." Said and done.social

12:01

@oludai.bsky.social on Bluesky ✨ Trending new AI project on GitHub: N1nEmAn/sapper-v2 — 576★ · Python « Autonomous pentest legion — AI commander + worker swarm + layered...

11:42

Cyver on LinkedIn We've been looking at where AI agents fit in real red team work.social

11:17

SOCRadar Ivanti Connect Secure Zero-Day Chain Enables Root Accessvendor

11:04

Rapid7 Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)vendor

10:43

SOCRadar Pataya Food Leak, Belgian Military Data, China Housing Fund, Anka DDoS, and Vijay Sales Accessvendor

10:39

Detectify on LinkedIn We're excited to share that Detectify is featured in KuppingerCole Analysts' 2026 Leadership Compass on Attack Surface Management.social

10:20

CybelAngel Cyber Roundup: Week of October 26vendor

10:07

@caleb_cnk on X Continuous Threat Exposure Management: CTEM and Cloud Resilience #CybersecurityNews #CyberSecurity #CybersecurityAwarenessMonth #AINews https://t.co/VVP6j2zTea

10:00

Digital Shadows The SOC Analyst Role Is Not Going Away. Agentic Defense Is Making It Stronger.vendor

10:00

Digital Shadows Your AI Is Now Part of Your Attack Surfacevendor

09:31

gbhackers.com 11 Breach & Attack Simulation Tools: The 2026 Buyer’s Verdict Guide

09:05

@undercode.bsky.social on Bluesky Mastering External Attack Surface Management: Closing Blind Spots From an Attacker’s Perspective + Video Introduction: An organization’s true attack...

09:02

Nordic Defender on LinkedIn Your last pentest assessed the product you had then.social

09:00

Aikido Security Critical Linux kernel TCP vulnerability can allow remote code execution (CVE-2026-98432)vendor

08:00

Hacktify on LinkedIn We'll meet in Siófok in November. We'll be at the FUTURE IT 2026 conference, from November 10 to 12 at Hotel Azúr.social

07:51

Strobes Security We Checked 286 Indian Companies. 4 in 5 Are One Bug Away From a Breachvendor

07:45

Nanitor on LinkedIn Clients buy levels, not scans.social

07:39

Kaduu Threat Intelligence Platform: Binance’s $6.3B Crypto Theftvendor

06:00

CrowdStrike What Makes a Good Security Agent? 5 Lessons from the AgentWorks Hackathonvendor

04:56

SOS Intelligence The SOS Intelligence CVE Chatter Weekly Top Ten – 02 November 2026vendor

00:00

Intigriti PHP2Shell revisited: What Intigriti’s insights tell us about real-world riskvendor

00:00

Axonius DoW Instruction 8430.01 Software Readiness Starts with Asset Inventoryvendor

00:00

Brinqa Node2Shell (CVE-2026-111497): Scoping and Remediating Brotli Exposurevendor

00:00

Ethiack How Bondalti Validated Critical Industrial Defenses with Ethiackvendor

00:00

Nanitor Proving value: how MSP vulnerability reports keep clients payingvendor

Sunday 1 November 2026

21:45

@undercode.bsky.social on Bluesky Bridging the Gap Between Isolation and Remediation in AI-Powered Bug Bounty Automation + Video Introduction: Integrating security testing late in the...

21:10

@undercode.bsky.social on Bluesky Evaluating Autonomous AI Security Agents: Beyond Exploit Demos to Production Defense + Video Introduction: Autonomous AI security agents promise to...

20:40

@ireneinthecloud.bsky.social on Bluesky Standard vulnerability management processes were built to deal with average exploitation times after disclosure on the order of months and years....

20:12

@ireneinthecloud.bsky.social on Bluesky AI shifts attacker economics via scale and speed

16:20

@undercode.bsky.social on Bluesky Securing Intelligent Systems: The Convergence of Artificial Intelligence, Ethical Hacking, and Bug Bounty Operations + Video Introduction: The rapid...

12:15

Picus Security on LinkedIn Agentic pentesting is the most capable form of offensive testing today, and it can only test what it can safely reach.social

11:55

@undercode.bsky.social on Bluesky Penetration Testing Evolution: From Manual Reconnaissance to AI-Driven Autonomous Attack Simulation + Video Introduction: The cybersecurity landscape...

11:05

@undercode.bsky.social on Bluesky Navigating the AI-Driven Threat Landscape: Modern Vulnerability Management and Bug Bounty Operations in Critical Infrastructure + Video Introduction:...

09:45

@undercode.bsky.social on Bluesky Integrating AI into Modern Bug Bounty Workflows and Security Testing Methodologies + Video Introduction: Integrating artificial intelligence into...

08:19

@Artilas_Digital on Reddit Shannon: an autonomous, AI pentester for web applications and APIs (50k stars)

07:05

@undercode.bsky.social on Bluesky Navigating Vulnerability Research and Bug Bounty Triage in the AI Automation + Video Introduction: The rapid infusion of artificial intelligence into...

03:57

kitploit.com - The generated text has been blocked by our content filters.

Saturday 31 October 2026

21:26

Praetorian on LinkedIn In the second half of October 2026, the industry saw a preview of what we will likely live with for the next several years: the opening of a new operational tempo.social

14:50

Ethiack on LinkedIn For CISOs and security leaders, manual pentesting and automated scanning have long forced a trade-off: coverage versus depth.social

13:03

NetSPI on LinkedIn Trick: a weak password that lets an attacker walk right in.social

12:32

itsecuritynews.info AI penetration testing tools compared: what autonomous pentesting actually validates

More: itsecuritynews.info

12:30

RedSeal on LinkedIn 🎃 Some things are better left unseen.social

09:20

@earanyash.bsky.social on Bluesky Fair - between Big Sleep and the autonomous pentest/CTF-bot pipelines, the tooling to find exploitable bugs fast has existed a while.

08:15

@undercode.bsky.social on Bluesky Automated AI Workflow Frameworks Accelerate Bug Bounty Hunting: Analyzing the ‘bug-bounty-hunting-prompts’ Prompt Architecture + Video Introduction:...

08:15

WithSecure on LinkedIn Exploitation now happens in hours.social

07:42

LocateRisk CVE-2026-109220: PHP Object Injection im WooCommerce-Plugin pdf-for-woocommercevendor

More: LocateRisk

06:41

Siemba on LinkedIn Know who you’re letting in, all year round.social

04:40

@undercode.bsky.social on Bluesky Autonomous AI Agents Breach Enterprise Perimeter via Third-Party Integrations in Bug Bounty Demonstration + Video Introduction: Recent security...

04:19

techbullion.com Best Adversarial Exposure Validation (AEV) Platforms for Enterprise Security Teams

Friday 30 October 2026

22:20

@aitoolstack.bsky.social on Bluesky curl shut its bug bounty in Jan 2025 largely over AI-written reports that didn't reproduce: discovery outpaced triage

22:12

Flare Beyond the Binance Attack: How Stealer Logs Can Link Corporate Sign-Ins to Developer and Monitoring Toolsvendor

21:30

cyberscoop.com China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days

20:03

NopSec on LinkedIn NopSec CTO and Founder Michelangelo Sidagni recently walked through what is in use right now: LLM-enhanced risk prioritization, CVE-to-MITRE ATT&CK mapping...social

19:39

ArmorCode on LinkedIn A pull request merges on Tuesday.social

19:31

Aikido Security AI agent security in Kubernetes: Why prompt injection isn't the right termvendor

18:10

Siemba on LinkedIn October has been a rough month for security teams, and it isn’t over yet.social

18:09

Intigriti on LinkedIn This month's issue is as usual packed with bug bounty tips: ✅ A full Microsoft Edge exploit chain using only logic bugs ✅ 1-click RCE in Discord via Twitch...social

18:06

Sprocket Security on LinkedIn The pushback we hear most on continuous pentesting: "I can barely keep up with the results of one test a year.social

17:44

Censys Introducing Censys Starter Subscriptionsvendor

17:39

Cobalt Supabase From a Pentester's Perspective: Methodology and Where the Real Risks Hidevendor

17:05

Cobalt on LinkedIn 🎃 The scariest part of our 2026 pentest data isn’t a shocking twist.social

17:03

Empirical Security on LinkedIn Even after all this time in vulnerability management, we need not just a better way to prioritize but also a better way to defend what we're prioritizing -- and what we're…social

17:00

Brinqa on LinkedIn 91% of organizations in the SANS 2026 Exposure Management Survey have an exposure management program.social

16:56

Empirical Security Can You Defend Your Remediation Strategy?vendor

16:46

Cobalt Top 10 Spookiest Web App Vulnerabilitiesvendor

16:26

Censys on LinkedIn Rapid Response: This Week's Critical Vulnerability Advisories Three new advisories from Censys ARC this week, covering Oracle E-Business Suite, Drupal, and...social

16:19

Hackuity on LinkedIn Top to have participated in IT-SA 2026 in Nuremberg alongside Campus Cyber and the French delegation!social

16:04

CovertSwarm Protecting keys is not enough. You need to prove what an attacker can do with them.vendor

16:03

NetSPI on LinkedIn Scott Weston from NetSPI+Synack is speaking tomorrow at 3:00 PM in Room 121, and you won’t want to miss it!social

16:01

Rapid7 Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)vendor

16:01

Horizon3.ai on LinkedIn 🪦 We’re ending October with one final security assumption ready for the graveyard: Resilience is measured by how well you recover from an attack.social

15:52

Kaduu ENGIE data leak: when a service provider becomes the gateway for cybercriminalsvendor

15:30

@RedLegg on X A critical finding isn't always the highest remediation priority.

15:19

Edgescan on LinkedIn Keeping up takes a team: continuous visibility to spot changes, vulnerability management to track issues, expert-led pen testing for depth and AI-powered pen testing between…social

15:18

insurancejournal.com Opterrix Launches AI-Powered Portfolio Management Workflow

14:24

Pentest-Tools.com on LinkedIn 📣 Exclusive exploit for #Node2Shell, now available in Pentest-Tools.com.social

14:17

Phoenix Security on LinkedIn Phoenix Security | ASPM: Yesterday we unveiled at Lonestar Application Security Conference (LASCON) in Texas the Hook Security philosophy and how it can save time and frustrationsocial

14:01

Flashpoint The Flashpoint Threat Intelligence Brief: Middle Eastvendor

14:01

NetSPI on LinkedIn Hack Responsibly Newsletter: October 2026 Editionsocial

13:54

SafeBreach on LinkedIn 1 in 4 malicious breaches is now AI-enabled.social

More: SafeBreach on LinkedIn

13:17

Cyver on LinkedIn Happy Hacking-ween from the Cyver.io team!social

13:13

Aikido Security Binance hack: how a compromised developer laptop can lead to a $6.3 billion breachvendor

13:09

Cyberint on LinkedIn Check Point Exposure Management: 🚨 Are you exposed to the PHP2Shell vulnerability?social

13:04

Hadrian on LinkedIn Three days at it-sa 2026 and Hall 7 kept us busy.social

12:04

@paulirolla.bsky.social on Bluesky Bug bounty platforms are full of zero days found by agents now

12:01

Pentera on LinkedIn Stranger things happen when you don’t test your web apps.social

12:00

Brinqa on LinkedIn Leave the guesswork in the graveyard this Halloween.social

11:53

CyberMindr on LinkedIn Healthcare cybersecurity goes beyond protecting sensitive patient records.social

11:24

DynaRisk on LinkedIn Our Threat Intelligence Lead, Milivoj Rajic Rajić, is speaking at the upcoming Digital Forensics Conference 2026 in Belgrade.social

10:00

ONYPHE on LinkedIn The scariest map on the Internet 🇫🇷 The scariest things aren’t always hiding in the dark.social

10:00

Bitdefender on LinkedIn Effective exposure management goes beyond patching vulnerabilities.social

09:58

@secureawake on X AI era cyber attack countermeasures are shifting from post-attack response to pre-attack prevention.

09:35

GObugfree on LinkedIn We said, that Cyber Security Training can't make any sense?social

09:35

@undercode.bsky.social on Bluesky Automating Bug Bounty Triage: Using Gemini CLI to Complement AI-Driven Attacks and Spot Vulnerabilities + Video Introduction: Integrating automated...

09:33

Siemba Murphy’s Law Hits Cybersecurity: What October 2026 Taught Security Teams (PHP2Shell, HTTP2Shell, GitLab & More)vendor

09:00

Raynet on LinkedIn Hidden vulnerabilities may be lurking in your IT environment, just waiting to spread terrible cyber threats.social

08:51

SOCRadar Binance Hack: Inside the $6.3B Hot Wallet Theftvendor

08:09

XMCO on LinkedIn In The Wild - September 2026: 8 critical vulnerabilities analyzed by CERT-XMCO.social

08:08

YesWeHack on LinkedIn We tested it on XSS and insecure deserialization labs to see how useful it really is.social

08:07

CybelAngel Lumma Stealer: Inside the Malware-As-A-Service Threatvendor

07:56

Kaduu Darknet Search Engine Lessons from Polymarket’s $2.5M Breachvendor

07:00

Lansweeper Dynamic Groups Returnvendor

06:14

Group-IB Deepfake Fraud Prevention: Why Detection Alone Failsvendor

05:55

kitploit.com ARTEX — LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and vulnerability retesting.

05:00

CrowdStrike Build an Intelligence Advantage with Falcon Next-Gen SIEMvendor

05:00

CrowdStrike CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloudvendor

05:00

CrowdStrike CrowdStrike Agent Graph Shows How Agents Act on the Endpointvendor

03:45

@opsmatters.com on Bluesky The latest update for #Detectify includes "Detectify featured in KuppingerCole's Analysts 2026 Leadership Compass on Attack Surface Management" and...

03:31

Autobahn Security on LinkedIn Autobahn Security | Reduce Hackability: Your WordPress is up to date.social

01:49

CYFIRMA on LinkedIn ONE CRITICAL LESSON: EXPOSURE IS AN OPPORTUNITY FOR ATTACKERS.social

01:42

Tenable php2shell one week later: Why one exploit doesn’t work everywherevendor

00:00

Intigriti Intigriti Bug Bytes #241 - October 2026 🚀vendor

00:00

Intruder 8 best CSPM tools for 2027vendor

Thursday 29 October 2026

22:55

RunSybil on LinkedIn Thank you to RunSybil for supporting [un]prompted II.social

21:55

@undercode.bsky.social on Bluesky The Autonomous AI Security Execution Trap: Implementing Pre-Flight Scope Verification and Safeguards in AI-Assisted OffSec Workflows + Video...

21:30

@carpeinferi.bsky.social on Bluesky Coming in hot with part two of the day with Forward (formerly Forward Networks) to talk about verified exposure management

19:26

Cobalt on LinkedIn 🎃 This Halloween, don’t let a zombie horde of bug submissions eat your team alive.social

19:10

Cobalt on LinkedIn “There is a lot of snake oil out there.social

18:04

Nucleus Security on LinkedIn 👋 Welcome to Nucleus, Martin Orozco!social

18:02

Edgescan on LinkedIn A real-world use case for Edgescan WAF Rule Generation.social

17:00

Brinqa on LinkedIn One of the quieter costs of unreliable exposure data can show up in reporting to leadership.social

16:36

@BassamMaharmeh on X Why are software vulnerabilities that have been known for years still being exploited?

16:29

@grape2024.bsky.social on Bluesky I Automated My Entire Bug Bounty Recon :One Script, Start to Finish Stop running 15 tools manually

16:00

forrester.com Break Out Of The Vulnerability Matrix At Forrester Security and Risk 2026

15:56

Netcraft on LinkedIn The best online digital risk protection providers combine broad monitoring across web services and other external channels with validated detection, risk prioritization, and…social

15:15

Raynet on LinkedIn What a great few days at it-sa – Home of IT Security in #Nuremberg!social

15:15

Synack API Penetration Testing Checklist: What Enterprise Security Teams Should Requirevendor

15:10

SafeBreach on LinkedIn On October 8, CISA added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.social

15:01

Censys Censys takes census of the Internet like no one elsevendor

15:01

UpGuard AI Just Rewrote the Rules of BEC: Are Your Defenses Ready?vendor

14:58

UpGuard Left Unsupervised: 10 Times Access Outlived Its Authorizationvendor

14:54

UpGuard YOLO Mode: Hidden Risks in Claude Code Permissionsvendor

14:53

UpGuard A CISO's Guide to the Business Risks of AI Development Platformsvendor

14:48

UpGuard Decoding the Copilot Ecosystemvendor

14:43

UpGuard Governing Excessive Agency in the Anthropic Ecosystemvendor

14:40

UpGuard The 2026 Enterprise AI Security Indexvendor

14:38

UpGuard Why Banning SaaS and AI Backfires (And What to Do Instead)vendor

14:37

UpGuard AI Assurance: The Third Head of Your AI Governance Watchdogvendor

14:37

watchTowr on LinkedIn watchTowr has been listed as a Sample Vendor for Preemptive Exposure Management in the 2026 Gartner Emerging Tech Impact Radar: Preemptive Cybersecurity.social

14:35

UpGuard No Hackers Required: 10 Shadow AI Leaks Hiding in Plain Sightvendor

14:27

@famato.bsky.social on Bluesky Winter is coming. 72,812 CVEs in 2026 vs 48,244 in all of 2025. Exploiting vulnerabilities is already the initial access #1 (31%). Autonomous Pentest of...

14:25

Horizon3.ai Why Old Vulnerability Management Habits Keep Rising from the Gravevendor

14:03

GObugfree on LinkedIn Ready for launch, but Sicherheitskonzept is missing!social

14:01

@undercode.bsky.social on Bluesky Building Hackbot v1: A Practical Starting Point for AI-Driven Bug Bounty Reconnaissance + Video Introduction: Integrating artificial intelligence...

14:00

Searchlight Cyber on LinkedIn Disappointment #29: every step they planned for ends in a dead end.social

13:50

UpGuard How User Risk Finds the Shadow AI Outside Your Directoryvendor

13:47

Pikered on LinkedIn Pikered and Arsenalia at the Richmond Cyber Resilience Forum Two days at the Richmond Italia Cyber Resilience Forum (Autumn Edition) 2026 in Rimini, a...social

13:39

GObugfree on LinkedIn "What makes it work is trust!" Banking is organized cooperation based on trust between customers <-> bank bank <-> banks bank <-> supervision & partners...social

13:39

XRATOR on LinkedIn Yes, nearly 3 out of 4 hacks involve a human: a click, a reused password, an email too well imitated.social

13:32

Strobes Security on LinkedIn It’s that time of year again 🎃 We made a little Halloween film, and if you’ve ever wrapped up a pentest and shipped something new the next day, you already...social

13:07

Cyberint on LinkedIn Check Point Exposure Management: Wrong answers only, round two!social

13:05

Nucleus Security on LinkedIn Stop by Booth 33 to talk vulnerability and exposure management, meet the Nucleus Security team, and enter for a chance to win the new Beats 360 🎧 See you there!social

13:03

@runzero.com on Bluesky Heading to the IANS Boston Forum today? So is the runZero team! We’re proud to sponsor this year’s forum

13:01

NetSPI on LinkedIn For 20 years, the CISO's job was largely to identify risk, categorize it, and route it to the team that owned it.social

13:00

Bishop Fox A Journey into Claude's Sandboxvendor

13:00

Aikido Security The day after tomorrow: After PHP2Shell, it gets worse, then defenders winvendor

12:47

Horizon3.ai on LinkedIn Attackers are moving at machine speed.social

12:43

Novee on LinkedIn Most exploits show up before the CVE does.social

12:26

GObugfree on LinkedIn 🚀 The new GObugfree platform is live and already in use at #GOhack26.social

11:21

Fleuret AI on LinkedIn Last night, HEC Venture Lab and HEC MBA Entrepreneurship Club (VIBE) hosted our Masterclass at HEC Paris: a round table with the co-founders of Fleuret AI.social

10:53

Phoenix Security The AI Coding Assistant Is Spending Tokens to Find What The Scanner Already Foundvendor

10:51

Yogosha Giving AI agents the rules of the game: how we built the Yogosha Skillvendor

10:16

Board of Cyber on LinkedIn Mood of Cyber | Notre newsletter est en ligne!social

10:05

Rootshell Security on LinkedIn Cybersecurity Awareness Month might be coming to an end, but the need to identify, validate, and reduce security risks doesn't stop when November begins.social

09:52

EBRAND CEO Fraud, Celebrity Impersonation, and Identity Protectionvendor

09:36

Aikido Security Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving fastervendor

09:22

Greenbone on LinkedIn Last day of it-sa – Home of IT Security 2026!social

09:11

techradar.com Navigating the 'new normal': AI-powered exploits and discovery

09:00

Patrowl on LinkedIn Cyber by Patrowl — Episode 10 What if part of your attack surface is hiding where you no longer look?social

08:50

CybelAngel CVE-2026-41709: What the VMware ESX Logging Zero-Day Means for Your Businessvendor

08:40

Astelia on LinkedIn AI has rewritten nearly every rule in vulnerability management except one: a vulnerability only matters if an attacker can reach it.social

08:36

SecPoint on LinkedIn Cyprus is a beautiful country, and it was a great pleasure to visit Nicosia for The Future of Cybersecurity 2026, organized by Data Ally on 23 September.social

08:31

CyberDart on LinkedIn It answers a specific question: how secure is this perimeter on the days of the test.social

08:27

UpGuard 10 Black Friday Cyber Incidents Where Retailers and Shoppers Paid the Pricevendor

08:16

G DATA CyberDefense on LinkedIn Last day at it-sa – Home of IT Security – time for a coffee with us?social

07:32

Group-IB MadApe: The Code That Opens the Doorvendor

07:00

Seemplicity on LinkedIn AI has changed the speed of vulnerability discovery.social

05:00

CrowdStrike VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaignvendor

04:41

LocateRisk CVE-2026-109516: Kontoübernahme über WooCommerce-Pluginvendor

02:57

@opsmatters.com on Bluesky The latest update for #Seemplicity includes "SANS 2026 Exposure Management Survey" and "CTEM Mobilization: Turning Validated Risk Into Fixes"....

01:30

@pullrepo.bsky.social on Bluesky 🚀 Fastest-growing AI projects today: 1

00:34

@undercode.bsky.social on Bluesky Automated AI Reconnaissance and Third-Party SaaS Penetration: Analyzing Cathedral’s Bug Bounty Incident at Anthropic + Video Introduction: In an...

00:00

CloudSEK Fake “View & Sign” and Adobe Acrobat Lures Deliver Attacker-Configured ScreenConnect Clientsvendor

Wednesday 28 October 2026

22:58

@undercode.bsky.social on Bluesky Building an Autonomous Bug Bounty Reconnaissance Engine with DeepSeek, State Machines, and Scope-Aware Automation + Video Introduction: Integrating...

21:22

Seemplicity on LinkedIn AI is finding vulnerabilities faster than any team can fix them.social

21:02

ThreatNG Security The PHP2Shell Blind Spot: Why You Cannot Patch What Your Internal Scanners Cannot Seevendor

19:37

kitploit.com inventory — Automated attack surface inventory for 800+ public bug bounty programs, running scheduled subdomain enumeration, permutation, DNS and web server reporting workflows.

19:33

Cobalt on LinkedIn 🔦 New Pentester Spotlight: Meet Prateek Thakare!social

19:26

Cobalt Pentester Spotlight—Prateek Thakarevendor

19:22

NopSec on LinkedIn Our CTO, Michelangelo Sidagni, describes the difference this way: traditional ML classifies a vulnerability and tells you what it found.social

18:55

BreachLock on LinkedIn The FS-ISAC Americas Fall Summit in Austin is in full swing, and we've been enjoying meeting with everyone (and giving out swag!)social

18:04

Attaxion Texas Election Websites Active in 2026vendor

17:31

Enginsight on LinkedIn On stage, during live demos and even literally at the booth.social

17:01

Synack on LinkedIn Your attack surface doesn’t wait for your next annual pentest.social

16:51

securitybrief.in Keeper links Tenable findings to instant remediation

16:48

Ridge Security on LinkedIn explores how familiar security weaknesses can become far more consequential when attackers combine traditional techniques with AI-assisted reconnaissance and...social

15:43

@snowwhitedreams0.bsky.social on Bluesky Checking out the Nexus CART repository on GitHub today

15:34

Onit Security on LinkedIn In the first hours of a zero-day, your usual signals go quiet.social

15:30

LocateRisk on LinkedIn What happens if security vulnerabilities are not in your own company, but with the service provider?social

15:15

ONYPHE on LinkedIn It seems that this makes us "agent-native" today 🤲🔥 These skills give an agent the ability to exploit the ONYPHE APIs without you having to write a single OQL...social

15:06

Pentera on LinkedIn Agentic Web App pentesting took centre stage at GovWare Singapore.social

15:00

@rahultyagihacks on X CVE-2026-63077: TeamCity RCE Explained Could attackers compromise your CI/CD server without credentials?

14:09

Patrowl on LinkedIn Come and join our next webinar! Explosion of vulnerabilities, delayed fixes, acceleration of their exploitation...social

14:00

@sequretek_sqtk on X Sequretek Percept CTEM combines continuous attack surface visibility, risk-based prioritisation and adversarial validation to help security teams focus on...

13:52

@keroz.bsky.social on Bluesky AI and bug bounty: the discussion with Adrien Jeanneau, head of the triage team at YesWeHack. 🎧 Web: bit.ly/4eW7Fvo 🎧

13:42

Pentest-Tools.com on LinkedIn The Guest role, the lowest you can hand out, is enough to take over the box.social

13:16

Rapid7 How Rapid7 InsightGovCloud Supports BOD 22-01 Compliancevendor

13:13

Horizon3.ai CVE-2026-20362 | Cisco Finesse Server-Side Request Forgery Vulnerabilityvendor

13:09

Cyberint on LinkedIn Check Point Exposure Management: We've made it easy to explore Check Point Exposure Management on your own!social

12:59

Cyver on LinkedIn 🎉 Our red teaming add-on is now available on every Cyver.io plan.social

12:56

SafeBreach on LinkedIn We’re live at MITRE ATT&CKcon 7.0 today!social

12:19

gbhackers.com FortiBleed 2.0 Exposes 40,573 FortiGate Secrets Across 975 Previously Unlisted Domains

12:05

SecPoint on LinkedIn In this video, we demonstrate the key enhancements introduced in Penetrator V69, including the updated Scan Map with Dark Mode, the new One-Page VAPT Security...social

11:54

Filigran on LinkedIn This summer, around 1,200 AI agents found their way out of a test environment while chasing the system that graded their test.social

11:16

Zerocopter on LinkedIn We look forward to seeing you in Groningen for a new edition.social

11:15

ImmuniWeb on LinkedIn ImmuniWeb at it-sa Expo&Congress 2026 in Nürnberg 🇩🇪social

11:10

CyCognito Emerging Threat: (CVE-2026-111497) .NET and ASP.NET Core Memory Corruptionvendor

10:48

Group-IB Frost Radar 2026: Enterprise Risk and Path to Preemptive Securityvendor

10:21

Nordic Defender on LinkedIn Different products, release cycles, and security needs.social

10:03

Mitigant on LinkedIn More to come today at it-sa – Home of IT Security !social

10:00

Aikido Security Aikido launches external network pentestingvendor

09:45

Rootshell Security on LinkedIn October has been a busy month at Rootshell!social

09:32

OnSecurity on LinkedIn In our latest discussion, OnSecurity's Head of Pentest Strategy, Nabeel A., shares how AI adoption is changing what we find in pentests and what security teams should be paying…social

09:19

Greenbone on LinkedIn A scanner is quick to install.social

09:06

Identeco on LinkedIn A cabinet of malicious software for Halloween Halloween is coming up soon!social

09:00

Digital Shadows Residential Proxies Mask Social-Engineering Attacksvendor

08:50

Group-IB False Protection, Emptied Accounts: The Seven Android Trojan Families Targeting Indian Banking Appsvendor

08:37

Holm Security on LinkedIn We’re pleased to be included in KuppingerCole Analysts' Leadership Compass for Attack Surface Management 2026.social

08:02

SOCRadar n0n Ransomware: Inside an AI-Assisted Extortion Operationvendor

07:58

G DATA CyberDefense on LinkedIn Day 2 at the it-sa – Home of IT Security – we are ready!social

07:42

Kaduu Darknet Search Engine: DreamHost Password Reset Incidentvendor

06:31

techjuice.pk Bitdefender Launches GravityZone Exposure Management Tool

05:02

Cyble From Hijacked PBX to Stolen Trunk: INJ3CTOR3’s Campaign Evolvesvendor

04:03

itsecuritynews.info PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts

01:45

@RidgeSecurityAI on X Tenable just announced OPEN for AI, connecting exposure intelligence with other security platforms through MCP and APIs.

01:38

Tenable Tenable Expands AI-Driven Security Orchestration Through Open Integrationsvendor

00:00

JupiterOne The Ultimate Guide to Continuous Threat Exposure Management (CTEM)vendor

00:00

CloudSEK The Doorway Botnet: Inside a Large-Scale IoT and Network Device Compromise Campaignvendor

00:00

CloudSEK Inside "MR ROBOT" - Anatomy of a Malware-as-a-Service Operation Targeting Indian Bank Customersvendor

Tuesday 27 October 2026

22:13

securitybrief.in Horizon3 links NodeZero findings with Cortex XSOAR

21:29

@SCMagazine on X Successful CTEM connects discovery, validation and remediation, ensuring the right teams fix exploitable risks and verify the fixes actually work, says...

21:12

@hendryadrian.bsky.social on Bluesky A bug bounty assessment of an unnamed cloud provider chained Kubernetes, control-plane and managed-service flaws to bypass tenant isolation

20:34

Sprocket Security on LinkedIn Every AI agent we ship comes with 3 things: a specialty, a boundary it can't cross, and a human who answers for its output.social

19:31

Praetorian php2shell in Practice: Exploitable, Conditional, and Hard to Mass-Exploitvendor

19:30

@pullrepo.bsky.social on Bluesky 🚀 Fastest-growing AI projects today: 1

19:30

@TenableSecurity on X Atos, a global leader in AI-powered digital transformation, selected Tenable One for unified, AI-driven visibility across IT, cloud, identity and OT...

18:20

Censys Censys AI Agents: Automate Investigations and Amplify Your Threat Intelvendor

17:37

Cobalt The Patch Is the Starting Gun: PHP2Shell and the AI Race to a PoCvendor

17:26

hackread.com CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch

17:23

Bishop Fox on LinkedIn More than 72,000 CVEs have already been published in 2026, far exceeding previous years.social

More: Bishop Fox on LinkedIn

17:13

@undercode.bsky.social on Bluesky Mastering Modern Bug Bounty: 5 Essential Rules for High-Yield Vulnerability Research + Video Introduction: Bug bounty hunting in 2026 has evolved...

16:26

dev.to Supply-chain vulnerabilities in software

16:00

@OXENTechnology on X Your biggest cybersecurity risk may be something you don't even know exists.

15:24

@reconbee.bsky.social on Bluesky we explore External Attack Surface Management (EASM) and its growing importance in today’s cybersecurity landscape

15:15

Empirical Security “Wake me up when everything’s fixed”: the cost of AI remediation without prioritizationvendor

15:15

SafeBreach on LinkedIn Security teams need more than visibility.social

15:00

watchTowr on LinkedIn On 20th October, watchTowr confirmed the rumors ahead of the industry - PHP2Shell was real, and details of two critical Remote Code Execution vulnerabilities in PHP were incoming…social

15:00

@rahultyagihacks on X CVE-2026-62201: OpenClaw SSRF Explained Can a sandbox expose internal APIs and cloud metadata to attackers?

14:51

LocateRisk on LinkedIn The first day of the it-sa – Home of IT Security 2026 is running at full speed and we are right in the middle of it!social

14:42

Strobes Security on LinkedIn In 2005, one sneaky script got a guy a million MySpace friends in about 20 hours.social

14:40

Filigran on LinkedIn Attackers don't follow a script.social

14:40

@FiligranHQ on X That's validation in Continuous Threat Exposure Management (CTEM), and #OpenAEV attack chaining follows the same logic.

14:25

Pentest-Tools.com on LinkedIn You probably got into #cybersecurity because no two days look the same.social

14:01

G DATA CyberDefense on LinkedIn Securely Positioned Part 1: Clarify Needs, Take Targeted Action 🗓️ 10.11.2026 | 10:00 - 11:00 Uhr Anyone who wants to improve their IT security needs to first...social

14:00

Intruder on LinkedIn AI pentest reports now go straight into Vanta 📋social

14:00

SOCRadar September 2026: FBI Breach, Clop Hijack & IDScan Leakvendor

13:54

@TrollEyeSec on X Are you actually reducing risk, or just getting better at managing your backlog?

13:47

Brinqa How to Tell Whether Your Exposure Management Program Is Reducing Riskvendor

13:24

@ralf-ladner.bsky.social on Bluesky Exposure Management for the proactive reduction of critical risks before hackers exploit them #AttackSurfaceManagement @Bitdefender_DE

13:21

thenextweb.com Bitdefender’s new tool maps how attackers could reach critical systems

13:15

Bishop Fox on LinkedIn Security teams have different gaps to close.social

13:13

manilatimes.net Tenable Selected by Atos to Power Continuous Threat Exposure Management Program

13:03

@kazwan.bsky.social on Bluesky Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts TORRANCE, Calif., Oct

13:00

@stocktitan.net on Bluesky #TENB Tenable Selected by Atos to Power Continuous Threat Exposure Management Program...

13:00

@theitnerd.ca on Bluesky Bitdefender Launches GravityZone Exposure Bitdefender today announced GravityZone Exposure Management, an advanced solution that gives organizations...

13:00

Tenable Tenable Selected by Atos to Power Continuous Threat Exposure Management Programvendor

13:00

Bishop Fox Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)vendor

13:00

Tenable Whole-of-state defense: How SLED agencies can secure critical infrastructure in the AI eravendor

12:55

Horizon3.ai Horizon3 Announces NodeZero Integration With Palo Alto Networks Cortex XSOARvendor

12:48

SOCRadar Australia’s Annual Cyber Threat Report 2025-26 Shows Cyber Incidents Up 20%vendor

12:47

Filigran Knowing when not to act: how security agents earn autonomyvendor

12:45

Halo Security on LinkedIn “Everybody wants to say they’re a partner while they’re trying to sell you something.social

12:39

gbhackers.com Hackers Compromise 17 Exposed AI Pentesting Panels to Deploy Malware and Steal Credentials

12:27

SOCRadar PHP2Shell Weaponized After Japanese Real Estate Extortionvendor

12:24

Rapid7 Simplify User Access Management with SCIM on Rapid7 Command Platformvendor

12:14

Synack Web Application Penetration Testing Services for Enterprises: Scope, Timeline, and Costvendor

11:46

Kaduu From traditional courses to 3D simulations: Cyberfrog Securityvendor

11:40

WithSecure A critical PHP flaw is in the news. Here is what it means for your business.vendor

11:40

WithSecure From panic to plan: exposure management for the next PHPvendor

11:39

WithSecure 72 hours of PHP2Shell: what MSPs learnedvendor

11:31

CyberMindr Security Risks That Come With an Acquired Company’s External Footprintvendor

11:26

@undercode.bsky.social on Bluesky The Obsolescence of Point-in-Time Testing: Why Continuous Bug Bounty and AI-Driven Crowd Security Are Reshaping Enterprise Defense + Video...

10:41

CyberVadis on LinkedIn Your IT security team is not growing at the same pace.social

10:35

CyberVadis on LinkedIn Your vendor list keeps growing.social

10:30

LocateRisk on LinkedIn The doors of it-sa – Home of IT Security 2026 are open and we are ready for the rush!social

10:29

@undercodenews.bsky.social on Bluesky AI Is Accelerating Cyberattacks: Why Continuous Exposure Management Is Becoming Essential for Modern Security + Video Introduction: The Shift From...

10:16

kitploit.com CVEngine — AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

10:14

cysmo on LinkedIn cysmo Cyber Risk Rating: ⚠️ PHP2Shell Update | CONFIRMED EXPLOITED | Who hasn’t patched yet?social

09:43

G DATA CyberDefense Wenn KI zum Hacker wird: Neue Risiken für die Cybersicherheitvendor

09:30

OnSecurity on LinkedIn Five providers in the running, and we came out on top.social

09:30

@pullrepo.bsky.social on Bluesky 🚀 Fastest-growing AI projects today: 1

09:12

Saporo on LinkedIn On November 18th and 19th, Saporo will be present at Tech Show Paris, which is celebrating its 10th anniversary this year.social

09:00

Bitdefender Your Attack Surface Is Growing Faster Than Your Team Can Respondvendor

08:55

Yogosha on LinkedIn And if your attack surface could be tested continuously, even while your teams are sleeping?social

08:54

Greenbone on LinkedIn it-sa – Home of IT Security 2026 is officially underway!social

08:14

G DATA CyberDefense on LinkedIn Tag 1 auf der it-sa – Home of IT Security!social

08:00

businesswire.com Bitdefender Launches GravityZone Exposure Management to Help Security Teams Proactively Reduce Critical Risks Before Attackers Exploit Them

07:30

Patrowl on LinkedIn Patrowl is participating in Unlock Your Brain!social

07:29

SOCRadar Wasmtime Sandbox Escape Flaws Patched in Craneliftvendor

07:16

CyberDart on LinkedIn The 4 objections we hear most from Italian companies.social

07:03

Cyberwatch on LinkedIn 63 days. In 2018-2019, this was the average time between the release of a patch and the appearance of an exploit.social

06:55

Strobes Security Best AI pentesting platforms for SOC 2 and PCI DSS compliancevendor

05:30

UpGuard Threat Exposure Management Framework Explainedvendor

05:30

UpGuard Data Breach vs. Data Leak: What's the Difference?vendor

05:30

UpGuard Data Leaks and the Deep Web: Swimming in the Deep Endvendor

05:30

UpGuard What is the NIST Cybersecurity Framework (NIST CSF)?vendor

05:30

UpGuard What Is Dark Web Monitoring?vendor

05:30

UpGuard Security Posture Monitoring and Board Reporting Toolsvendor

05:30

UpGuard How to Detect Data Leakage: A Full Guide to Data Leak Detectionvendor

05:30

UpGuard What is a Brute Force Attack?vendor

05:30

UpGuard Introducing the UpGuard Risk Operations Centervendor

05:30

UpGuard Introducing App Store Threat Detection: Visibility Where Brand Monitoring Couldn't Reachvendor

05:30

UpGuard What is an Attack Vector? 16 Critical Examplesvendor

05:30

UpGuard Brand Impersonation is moving into the App Storevendor

05:30

UpGuard What is Defense in Depth?vendor

05:30

UpGuard What is Personally Identifiable Information? Definition + Examplesvendor

05:30

UpGuard The Digital Risk Protection Market: Analyst Coverage Explainedvendor

05:30

UpGuard What Are Cloud Leaks?vendor

05:30

UpGuard How to Prevent Data Leaksvendor

05:30

UpGuard Exploits Explained: How They Work, Types, and Mitigationvendor

05:30

UpGuard Top 5 Free Open Port Check Tools in 2026vendor

05:30

UpGuard How to Prevent Data Breaches in 2026 (Highly Effective Strategy)vendor

05:30

UpGuard Apache vs Nginxvendor

05:30

UpGuard Data Loss vs. Data Leaks: What's the Difference?vendor

05:30

UpGuard How to Perform a Cybersecurity Risk Assessmentvendor

05:30

UpGuard How to Detect Identity Breaches (Before It’s Too Late)vendor

05:30

UpGuard Best Cyber Risk Posture Management (CRPM) Platformsvendor

05:30

UpGuard The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Managementvendor

05:30

UpGuard Best Data Breach and Data Leak Detection Tools in 2026vendor

05:30

UpGuard Solving CISOs’ Toughest Security Challenges With UpGuard’s Risk Operations Centervendor

05:30

UpGuard The 12 Best Third-Party Risk Management Software Solutions (2026)vendor

05:30

UpGuard IIS vs Apache: Which is the Best Web Server?vendor

05:30

UpGuard What are the Main Differences Between Proxy Servers & VPNs?vendor

05:30

UpGuard What is Compliance Management in Cybersecurity?vendor

05:30

UpGuard Cybersecurity and Social Responsibility: Ethical Considerationsvendor

05:30

UpGuard How to Perform a Cybersecurity Audit: A 3-Step Guidevendor

05:30

UpGuard MongoDB vs MySQLvendor

05:30

UpGuard What are Vulnerability Disclosure Programs?vendor

05:30

UpGuard What is a Cyber Attack? Common Attack Techniques and Targetsvendor

05:30

UpGuard Exposed Server Headers and Cybersecurity Riskvendor

05:30

UpGuard How to Reduce False Positives in Data Leak Detectionvendor

05:30

UpGuard How to Create a Vendor Risk Summary Reportvendor

05:30

UpGuard How to Create a Secure Password in 2026: The Password Security Checklistvendor

05:30

UpGuard What is Vulnerability Remediation?vendor

05:30

UpGuard A Data Leak Detection Guide for the Tech Industry in 2026vendor

05:30

UpGuard Cybersecurity Vs. Information Security: What's the Difference?vendor

05:30

UpGuard What is SOC 2?vendor

05:30

UpGuard What is SQL Injection?vendor

05:30

UpGuard GDPR Compliance: A 10-Step Checklist for Businessesvendor

05:30

UpGuard What is an Open Port? Definition & Free Checking Toolsvendor

05:30

UpGuard What is a Cyber Threat?vendor

05:30

UpGuard 6 Most Common Causes of Data Leaksvendor

05:30

UpGuard How to Detect Data Exfiltration (Before It's Too Late)vendor

05:30

UpGuard CPRA (California Privacy Rights Act) Compliance Guidevendor

05:30

UpGuard What is a Data Leak? Stop Giving Cybercriminals Free Accessvendor

05:30

UpGuard How to Identify and Strengthen Weak SSLvendor

05:30

UpGuard Choosing the Right Attack Surface Visibility Softwarevendor

05:30

UpGuard 8 Ways Finance Companies Can Prevent Data Leaksvendor

05:30

UpGuard What is Exposure Management in Cybersecurity?vendor

05:30

UpGuard What is the Gramm-Leach-Bliley Act (GLBA)?vendor

05:30

UpGuard Best Vulnerability Management Tools & Software in 2026vendor

05:30

UpGuard Best Attack Surface Management Tools and Vendors for 2026vendor

05:30

UpGuard Choosing a Tech Attack Surface Management Product in 2026vendor

05:30

UpGuard What is Cybersecurity Risk? A Thorough Definitionvendor

05:30

UpGuard PHP2Shell: A Clear Explanation and Response Frameworkvendor

05:30

UpGuard The Best Supplier Risk Management Software in 2026vendor

05:30

UpGuard What is Data Loss Prevention (DLP)?vendor

05:30

UpGuard Best Data Breach & Data Leak Detection Toolsvendor

05:21

CybelAngel Phishing Kits and Lookalike Domains: How Banks Are Targetedvendor

04:30

helpnetsecurity.com 71% of vulnerability exploitation starts within a week of disclosure

01:19

Tenable Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)vendor

00:00

Intruder What we’ve shipped lately: October 2026vendor

Monday 26 October 2026

22:15

Aikido Security How to patch PHP2Shell with free Aikido Imagesvendor

19:48

Tenable Discover and remediate PHP2Shell exposure with Tenablevendor

19:17

NetSPI Authorization Differential Testing in Salesforcevendor

19:15

Nanitor on LinkedIn If everything is urgent, nothing is.social

19:10

kitploit.com strix — Updated! — Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

18:27

Flare Who Pays When AI Makes Cybercrime Cheaper? Inside the New Economics of Ransomware and Extortionvendor

17:32

Rapid7 CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decodervendor

17:24

Autobahn Security on LinkedIn Today the patch is out, and the first exploit attempts are already being seen.social

16:44

Flashpoint AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communitiesvendor

16:32

Ethiack on LinkedIn Arbitrary file write is often treated as an "almost critical" bug class in web security: interesting and dangerous, but hard to prove impact when you can't drop a web shell in an…social

16:18

Axonius From CAASM to Asset Intelligencevendor

16:00

Strobes Security Run pentests from Claude Code with the Strobes MCP serversvendor

15:07

Palo Alto Networks Palo Alto Networks Named a Leader in the 2026 Gartner Magic Quadrant for Privileged Access Managementvendor

14:44

Outpost24 Weak eMudhra Certificates and Java Trust Store Vulnerability: What You Need to Knowvendor

14:00

siliconangle.com ProjectDiscovery adds Neo Triage to confirm which vulnerabilities are exploitable

14:00

Digital Shadows From 20 Minutes to Under 5: How GreyMatter SIEM-Less Speeds Up Investigationsvendor

13:21

Zerocopter on LinkedIn AI finds security vulnerabilities faster than ever.social

13:00

BreachLock on LinkedIn 📍 If you’re attending FS-ISAC Americas Fall Summit in Austin this week, be sure to come talk with us at booth #77.social

13:00

Holm Security on LinkedIn Meet us at the #ECSOVillage in Nürnberg 👋 From tomorrow through Thursday, three of our team members will be at it-sa EXPO&Congress, exhibiting and speaking.social

12:29

SOCRadar Node2Shell: Brotli Flaw Hits Python Packagesvendor

12:25

CyCognito on LinkedIn A Fortune 500 company's customer platform exposed nearly 100 records.social

12:09

Hive Pro on LinkedIn HiveForce labs : Threat Intelligence unit of Hive Pro is the backbone of Hive Pro's Exposure Management Platform.social

11:34

Cyver on LinkedIn Pentest data is some of the most sensitive data an organization produces: exploitable findings, internal hostnames, credentials found during testing, and...social

11:08

kitploit.com nuclei — Updated! — Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and cloud…

More: kitploit.com

11:00

pcgamer.com Korean police arrest cyberhacking gang reportedly led by self-taught hacker, who allegedly used AI to breach 60 firms and received a mere $210 in ransom

10:50

Cyble Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracksvendor

10:45

Rootshell Security on LinkedIn The October Rootshell update brings smarter prioritization and a new way to talk to your vulnerability data: 🎯 EPSS – know what attackers are likely to exploit...social

10:21

Rootshell Security October Release: Sharper prioritization. Smarter answers. Cleaner data.vendor

10:18

CyCognito 5 attack chains that started with assets nobody thought to testvendor

09:00

Lansweeper The Thing That Nobody Knew Was Therevendor

08:31

BreachLock on LinkedIn Every autonomous pentesting vendor says they use agentic AI, validate exploits and eliminate false positives, but a datasheet alone can’t prove any of that.social

07:36

Kaduu Darknet Search Engine: Lessons from Quest Diagnostics Breachvendor

06:02

Nordic Defender on LinkedIn Software development has accelerated.social

05:27

SOS Intelligence The SOS Intelligence CVE Chatter Weekly Top Ten – 26 October 2026vendor

05:00

CybelAngel Cyber Roundup: Week of October 19vendor

00:00

Axonius The Axonius AI Handbook: Getting Started with the AI Companion and AI Workforcevendor

00:00

Axonius How Axonius extends PQC readiness across AWS and every other environmentvendor

00:00

Nanitor Who fixes it? How to scope an MSP vulnerability management servicevendor

00:00

Axonius 5 insights from scoping and discovering PHP2Shellvendor

00:00

Axonius Node2Shell / HTTP2Shell (CVE-2026-111497): Identify & fix vulnerable assetsvendor

Sunday 25 October 2026

19:35

Phoenix Security HTTP2Shell Expansion (CVE-2026-111497): Where the Brotli Decoder Bug Went After Node.js and Pythonvendor

09:11

Phoenix Security HTTP2Shell (CVE-2026-111497): How a Brotli Decoder RCE Spread from Node2Shell to Python2Shell and Every HTTP Stackvendor

00:00

Ethiack Node2Shell / HTTP2Shell (CVE-2026-111497): Check If You're Exposedvendor

Saturday 24 October 2026

19:46

Aikido Security Adding Aikido AI pentesting to your existing security stackvendor

19:03

Intruder on LinkedIn Annual pentesting had a good run.social

19:02

Intruder on LinkedIn Attended a funeral for the annual pentest this week ⚰️ Hosted by Intruder in London, it had gothic decor, live music, themed cocktails and even a confessional...social

14:19

Phoenix Security LiteLLM 1.107.0 Supply Chain Compromise (No CVE): Dual Python Startup-Hook Stealer Shipped Through a Hijacked Release Pipelinevendor

08:52

Brinqa PHP2Shell: What CVE-2026-109618 and CVE-2026-109619 Mean for Security Teamsvendor

04:25

thehackernews.com CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

04:00

Strobes Security HTTP2Shell (CVE-2026-111497): The Brotli RCE Hitting Node.js, Python and Morevendor

Friday 23 October 2026

20:56

Synack PHP2Shell and the Case for Exploitability Validationvendor

20:45

Aikido Security Node2Shell evolves to HTTP2Shell. Brotli flaw (CVE-2026-111497) blast radius affects many libraries & apps using HTTP.vendor

17:50

Horizon3.ai CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Availablevendor

17:46

Cobalt Why One AI Pentest Run Isn't Enoughvendor

17:26

Flare “PoC Yes. RCE No.”: What the Underground Actually Thinks of the Public PHP2Shell Exploitsvendor

16:59

Ridge Security The Security Implications of Autonomous AI Systems: An Offensive Rigor Perspectivevendor

16:32

Palo Alto Networks Palo Alto Networks Brings Continuous AI Defense and Prisma AIRS to the OpenAI Marketplacevendor

15:57

RiskRecon on LinkedIn New critical PHP vulnerabilities are putting websites and applications at risk.social

15:38

Rapid7 Rapid7's Metasploit released 11 new modules, including six targeting Langflow's open-source LLM workflow builder covering authentication bypass and multiple...vendor

15:24

Hive Pro on LinkedIn On October 21, PHP shipped an out-of-band emergency release for PHP2Shell, two critical flaws in the PHP engine itself.social

15:21

AttackIQ Enter 666: Unmasking Beast Ransomwarevendor

15:14

CovertSwarm php2shell: moving beyond a lab proof of concept to code execution with ASLR enabledvendor

14:40

Novee Webinar: Inside Simpson Strong-Tie’s Shift to Continuous Pentestingvendor

14:30

Empirical Security Hay and Needlesvendor

13:55

NopSec on LinkedIn PHP2Shell (CVE-2026-109618 and CVE-2026-109619) are critical remote code execution flaws in the core PHP engine, and active exploitation has been observed in...social

13:34

Cyberint on LinkedIn Check Point Exposure Management: Rapid fire questions - but you can only give the WRONG answer!social

13:32

Siemba on LinkedIn Attackers now run on autopilot.social

13:00

FortiRecon Understanding PHP2Shell Vulnerabilities and Reducing Risk While You Patchvendor

More: FortiRecon

12:14

Intruder on LinkedIn And that’s a wrap on our Funeral for the Annual Pentest ⚰️💐social

12:00

runZero By our powers combined!vendor

11:41

CyberMindr PHP2Shell: How CyberMindr Helped Companies Stay Ahead of Attackersvendor

11:22

DynaRisk on LinkedIn Brilliant morning at Cyber Insurance Frontier in London!social

11:21

CyberVadis on LinkedIn We are hiring (#hiring) for the position of Customer Success Manager - German/English Speaker (Paris, Île-de-France).social

09:34

Siemba Automated IDOR Testing: What Tools Catch and Humans Confirmvendor

09:23

Siemba What is IDOR and How to Security Test for Insecure Direct Object References?vendor

09:11

CovertSwarm Release: local checker for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)vendor

08:47

Rootshell Security Rootshell Platform – Patch Notes October 2026vendor

08:18

LocateRisk Node2Shell: Kritische Node.js-Sicherheitslücke – betroffene Software finden und schließenvendor

07:00

CybelAngel The API Threat Report: What 2026 Has Taught Us So Farvendor

06:41

Kaduu Data Breach Monitoring After Capcom’s 11.7M Account Leakvendor

06:30

Patrowl on LinkedIn Two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619.social

00:00

Axonius When the Security Bottleneck Movesvendor

00:00

Ethiack Ethiack Zero: Attackers Don’t Wait for the CVE | Ethiack.vendor

Thursday 22 October 2026

22:04

Tenable The adversary economy: How threat actors are reacting to PHP2Shellvendor

21:55

Synack Continuous penetration testing services typically use subscription or credit-based pricing models rather than per-engagement fees.vendor

20:25

Horizon3.ai CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerabilityvendor

19:53

Ridge Security PHP2Shell: Critical PHP Remote Code Execution Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)vendor

19:23

NopSec What is CVE-2026-109618 and CVE-2026-109619?vendor

19:00

Horizon3.ai PHP2Shell Exposure Depends on More Than Whether You Use PHPvendor

18:11

Aikido Security Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)vendor

16:26

Flare PHP2Shell Exposure: 73% of 2.2 Million Version-Disclosing PHP Services Run Unsupported Branchesvendor

16:15

AttackIQ From PHP2Shell Monitoring to Customer Validation: A Day in Adversary Researchvendor

16:07

Enginsight Experteninterview Krankenhaus-IT: „Fragen Sie nicht zuerst, ob Sie gehackt werden können...“vendor

14:36

CybelAngel AfD Email Leak: Hacktivism and European Political Unrestvendor

13:56

Kaduu PHP2Shell: Critical PHP Vulnerabilities Expose Web Servers to Remote Code Executionvendor

13:06

Pentera PHP2Shell: the expiry date on “too hard to exploit”vendor

13:00

Bishop Fox iOS Game Hacking: From Zero to God Modevendor

13:00

Bishop Fox The True Blast Radius of an AI Attackvendor

13:00

Tenable How to contain shadow AI, as it takes on multiple forms and spreads throughout your environmentvendor

12:53

Enginsight Schwachstellen priorisieren mit dem Environmental Score: Hosts nach ihrem Wert für den Betrieb bewertenvendor

12:15

CyberMindr Why Organizations Struggle to Maintain Visibility into Vendor Riskvendor

12:14

CyberVadis on LinkedIn Every company claims that its suppliers are secure.social

12:01

Outpost24 Patching PHP2Shell: How to Find and Fix Your Exposurevendor

11:53

Aikido Security eMudhra CA compromise: eight private keys, and one of them is 4 - CVE-2026-111943vendor

11:37

G DATA CyberDefense PHP2Shell: What the security flaw means and why it must be patched immediatelyvendor

11:00

businesswire.com AttackIQ Wins Three 2026 Top InfoSec Innovator Awards for Adversarial Exposure Validation, CTEM and Agentic AI

10:46

Kaduu Kaseya Dark Web ID vs DarknetSearch: Which Is Better for MSSPs?vendor

09:57

cysmo on LinkedIn cysmo Cyber Risk Rating: 🚨 PHP2Shell | LIVE TODAY IN LONDONsocial

09:16

EBRAND Brand Protection ROI: Moving Beyond Takedowns to Measurable Business Valuevendor

09:08

Siemba Introducing Business Scenario Testing: Security-Test Just the Flow You Shippedvendor

08:30

Cyble The Keys Are in the Browser: Secret Exposure Across AI-Built Websitesvendor

08:10

Mitigant on LinkedIn Our CEO Nils Karn and CTO Kennedy Torkura will be there and would welcome the chance to connect.social

08:10

Enginsight Kritische PHP-Sicherheitslücken (PHP2Shell): Enginsight ist nicht betroffenvendor

07:57

XRATOR on LinkedIn Tape on the webcam does not protect your passwords. Mark Zuckerberg tapes over his webcam. The ex-FBI boss does too.social

07:57

CyberDart on LinkedIn Companies that launch a bug bounty have 3 things in common.social

07:09

Group-IB Inside SiriusQT: A Seriously Skilled RATvendor

07:00

ThingsRecon 7 Documents to Request During Vendor Due Diligencevendor

06:15

Aleph Index on LinkedIn Ten searches per day, free, no registration.social

06:00

Strobes Security Introducing Red Loop: continuous, proven testing of your whole attack surfacevendor

02:32

kitploit.com faraday v5.25.1 — Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America…

More: kitploit.com

02:13

rappler.com Chinese-linked hackers compromise ConnectWise, target hundreds in global attack

01:37

RedSeal PHP2Shell: Your website may be vulnerable. What can an attacker reach next?vendor

00:00

Brinqa Aim Before You Automate: Pointing SOC Workflows at the Exposures That Mattervendor

Wednesday 21 October 2026

22:27

Filigran PHP2Shell puts attack surface visibility to the testvendor

20:08

LocateRisk Apache Traffic Server: multiple critical security vulnerabilities (CVE-2026-111816, CVE-2026-111815, and others)vendor

19:43

news.ycombinator.com Ask HN: How do you handle AI security for automated vulnerability management?

18:56

Novee Introducing Novee Workflows: Automate Everything Beyond the Pentestvendor

18:50

Flashpoint The Missing Layer in Vulnerability Prioritization: Full Visibility Into Your Attack Surfacevendor

18:32

AttackIQ Response to CISA Advisory (AA26-293A): #StopRansomware: SafePay Ransomwarevendor

16:57

theblaze.com Most of the internet is suddenly melting down, and there's only one fix

16:50

Cyberwatch on LinkedIn Since yesterday, two of its most critical vulnerabilities in recent years have been made public.social

16:33

Horizon3.ai Audit-Ready Isn’t Attack-Ready.vendor

16:25

NetSPI PHP2Shell Unauthenticated RCE on PHP: CVE-2026-109618 & CVE-2026-109619vendor

15:45

BreachLock on LinkedIn Breach360 was named Best Autonomous Penetration Testing Solution in Cyber Defense Magazine’s 2026 Top InfoSec Innovator Awards!social

15:22

Rapid7 CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPvendor

15:17

CyCognito Emerging Threat: php2shell (CVE-2026-109618, 109619) Critical PHP Remote Code Executionvendor

15:00

Empirical Security Naming without Knowing: An Introductionvendor

14:19

watchTowr PHP Remote Code Execution (“PHP2Shell” CVE-2026-109618 & CVE-2026-109619)vendor

13:39

IONIX on LinkedIn 🚨 LIVE: #php2shell is moving fast.social

13:30

webpronews.com Mondoo Launches Agentic Remediation That Deploys Fixes Through Intune and Falcon

13:25

Aikido Security Software supply chain security best practices for 2026vendor

13:05

Aikido Security LiteLLM compromised again: infostealer and RAT found in version 1.107.0vendor

13:00

Flare Measuring Credential Exposure of Contractors and Integrators After the Refrigeration System Attack in France: 601 Industrial Remote Access Addresses Recovered From Stealer Logs…vendor

13:00

Tenable How Tenable brought multi-language support to security detectors with agentic translationvendor

13:00

Rapid7 Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Daysvendor

11:42

IONIX php2shell (CVE-2026-109618 & CVE-2026-109619) and how IONIX is helping you respondvendor

11:31

Palo Alto Networks Advancing Agentic AI Security with Palo Alto Networks and NVIDIAvendor

11:00

Digital Shadows Security Operations Is a Defense Layer, Not a Cost Centervendor

11:00

Digital Shadows Alert Fatigue Is Costing Your SOC $77K Per Analyst, Per Yearvendor

11:00

Digital Shadows PHP2Shell: Responding to Critical PHP Vulnerabilitiesvendor

10:32

thehackernews.com The Harness Is the Hard Part of Agentic Pentesting

10:25

LocateRisk on LinkedIn At 16:00 CET today, the PHP emergency release is coming.social

10:15

Brinqa The 5 Stages of CTEM, and What Each One Demands From Your Datavendor

10:10

Strobes Security PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Leaked PHP Flaws and What to Do Nowvendor

09:20

CyCognito Emerging Threat: (CVE-2026-108097) Drupal Core Field UI Remote Code Executionvendor

09:15

Board of Cyber on LinkedIn Hacked refrigerators, destroyed goods: the cyber risk does not only affect data.social

09:03

Yogosha on LinkedIn The 3rd edition of "Hack your High School (ethically)" has been launched!social

09:01

Tenable php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilitiesvendor

08:24

LocateRisk PHP2Shell: Exploit for critical PHP vulnerability - find and close affected softwarevendor

08:03

Outpost24 5 Reasons PCI ASV Scans Fail (and How to Avoid Them)vendor

07:19

Group-IB Stray Cat, Open Doors: How k0t Wanders Through the Network Edgevendor

06:47

Kaduu Darknet Monitoring Lessons From Zeabur’s Security Breachesvendor

06:45

G DATA CyberDefense aquaRömer relies on G DATA MXDR: "I have rarely experienced such a smooth introduction"vendor

06:31

Cyberwatch on LinkedIn Cyber Resilience Act: 24 hours to give the alert.social

03:30

helpnetsecurity.com DevGuard: Open-source vulnerability management for the software supply chain

01:54

Aikido Security PHP2Shell: Critical PHP vulnerabilities, affected versions and fixes | CVE-2026-109618 and CVE-2026-109619vendor

00:00

Axonius Axonius named an Overall Leader in the KuppingerCole Analysts Leadership Compass Attack Surface Management 2026vendor

00:00

JupiterOne PHP2Shell: A Practical Guide to Scoping Your Response | JupiterOnevendor

00:00

Axonius Everyone has AI. Axonius has the ground truth. Introducing Axonius Verified.vendor

00:00

Axonius KuppingerCole Analysts Leadership Compass Attack Surface Management 2026vendor

00:00

Axonius October 2026 Launch Week | Day 3: Asset Intelligencevendor

00:00

Axonius Every asset class, one operating model, and you can check the workvendor

00:00

Axonius PHP2Shell (CVE-2026-109618 & CVE-2026-109619): How to identify and fix vulnerable assetsvendor

00:00

Ethiack PHP2Shell (CVE-2026-109618 & 109619): Affected Versions & Detectionvendor

00:00

Intigriti AI raised the floor. The hacker crowd keeps raising the ceiling.vendor

Tuesday 20 October 2026

23:46

UpGuard Best Dark Web Monitoring Services for Businessvendor

23:07

Phoenix Security 800 Systems affected PHP Core RCE (CVE-2026-109618, CVE-2026-109619): Two Critical Remote Code Execution Flaws Patched October 21vendor

22:11

runZero Critical RCE vulnerability in PHP: Find impacted assetsvendor

21:58

Tenable Oracle October 2026 Critical Patch Update Addresses 1209 CVEsvendor

21:49

securitybrief.in Tenable launches open AI partner network for security

21:23

Horizon3.ai CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Executionvendor

20:56

Aikido Security The 10 best email security software platforms in 2026vendor

20:28

Flare AI Models are Fueling a New Wave of Cybercrime: A Quantitative Analysisvendor

20:25

Aikido Security The 9 best phishing simulation tools in 2026vendor

19:35

watchTowr Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619)vendor

19:33

Aikido Security The 9 best KnowBe4 alternatives in 2026vendor

17:33

Aikido Security The 8 best security awareness training platforms in 2026vendor

16:13

Aikido Security The 8 best Mimecast alternatives in 2026vendor

14:37

Cobalt Dissecting the ax-llm CVEs: Why Edge AI Memory and Execution Boundaries Mattervendor

13:37

Flare Arachnophobia: How Fear, Branding, and Bad Attribution Distorted The Comvendor

13:02

Horizon3.ai Horizon3 Surpasses $100 Million ARR, Marking a Key Milestone in the Shift to Continuous, Production-Safe Autonomous Securityvendor

13:00

Tenable Tenable Expands Open Security Ecosystem to Extend Exposure Intelligence and Accelerate AI Security Outcomesvendor

12:46

Holm Security NIS2 vulnerability management: What § 30 BSIG requiresvendor

12:46

Halo Security on LinkedIn A vulnerability scan alone doesn't tell you whether an attacker can exploit weaknesses in your environment.social

12:45

thenextweb.com Terra Security’s AI Native Cybersecurity podcast opens with Amazon’s CISO

12:32

Yogosha on LinkedIn Hack ton Lycée (ethically) returns for a 3rd edition!social

12:00

Aikido Security Aikido launches Noon: workforce security for every employeevendor

11:59

Synack API Penetration Testing for Enterprise APIs: Methodology, Scope, and What’s Coveredvendor

11:05

infoblox.com What if Your Analyst Could Just Ask? Connecting Tenable Findings to Infoblox Network Identity with MCP

11:05

enidnews.com Tenable Expands Open Security Ecosystem to Extend Exposure Intelligence and Accelerate AI ...

11:00

globenewswire.com Tenable Expands Open Security Ecosystem to Extend Exposure Intelligence and Accelerate AI Security Outcomes

11:00

globenewswire.com Tenable Expands Open Security Ecosystem to Extend Exposure Intelligence and Accelerate AI Security Outcomes

10:00

Pentera ECB AI Cybersecurity Action Plan: What Banks Must Submit by October 31vendor

08:15

Saporo on LinkedIn We are today at Identity Days in Paris, for the 8th edition of the event!social

08:07

Group-IB Criminals exploit spend-management platform onboarding processes to create fraud infrastructure, potentially making legitimate businesses unknowingly complicit...vendor

08:05

CyberDart on LinkedIn 5 reasons to launch a bug bounty program if you have a large application surface!social

07:28

Board of Cyber on LinkedIn Today at 11 AM, we will see how to evolve the cyber evaluation of suppliers without multiplying the questionnaires and follow-ups.social

06:20

gbhackers.com New RedAgents AI Platform Deploys Multiple Hacking Agents to Find and Exploit Vulnerabilities

06:00

Digital Shadows Everything But the SIEM: ReliaQuest GreyMatter SIEM-Less Is Herevendor

04:53

kitploit.com aws-pentest — Automated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration checks…

00:00

Axonius Introducing Axonius Security for AI to help organizations discover and govern AI assetsvendor

00:00

Axonius October 2026 Launch Week | Day 2: Security for AIvendor

00:00

RCE Security Imperia CMS <= 11.7.2 SiteActive TEMPLATE Unauthenticated SSTI Remote Code Executionvendor

Monday 19 October 2026

17:02

itsecuritynews.info Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

More: itsecuritynews.info

16:34

Rapid7 The article argues that AI agents accessing corporate systems require security controls placed outside the agents themselves, rather than treating them as...vendor

16:23

theregister.com Security patches need patches now that attackers have AI

15:57

Rapid7 Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)vendor

15:11

Rapid7 Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779vendor

14:34

Rapid7 CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wildvendor

14:27

CyCognito Behind the graph: The art of target selection for AI pentestingvendor

13:35

norforge.com Inside Cairn: Open Windows into massive AI-Driven Cyber Operations

13:27

ThreatNG Security Trust is the First Exploit: Defending Your Brand's Digital Perimetervendor

13:17

Tenable Unmasking the robots: Why it’s critical to discover AI agent identities and how Tenable helps you secure themvendor

13:13

manilatimes.net Axonius Introduces AI Workforce, Providing Security Teams With Virtual Workers to Act on Verified Data

13:00

Bishop Fox Ransomware Security Guidevendor

12:59

Palo Alto Networks Reinventing Endpoint Security with Cortex XDR Onevendor

12:59

Palo Alto Networks Introducing Unit 42 Managed Agentic Endpoint Securityvendor

11:03

postregister.com Axonius Introduces AI Workforce, Providing Security Teams With Virtual Workers to Act on ...

11:00

siliconangle.com Axonius launches AI Workforce virtual workers as AI Companion and MCP Server go live

11:00

Aikido Security Drata and Aikido: audit-ready pentesting, built into your compliance workflowvendor

10:53

Phoenix Security From Finding to Fix: A Phoenix Release Built for Actionvendor

09:02

CovertSwarm Why a vulnerability research agent has to look beyond one filevendor

09:00

Aikido Security Yearly pentests can’t keep up. Test more on the same budgetvendor

08:53

Attaxion Idextrus Partners with Attaxion to Deliver Continuous Attack Surface Visibility to Small and Mid-Sized Businessesvendor

06:49

Kaduu Dark Web Alerts After Burger King Japan Data Breachvendor

06:28

Aleph Index on LinkedIn The following Tuesday at 3:12am, a hacker logged into the admin console with valid credentials.social

04:57

SOS Intelligence The SOS Intelligence CVE Chatter Weekly Top Ten – 19 October 2026vendor

04:00

Tenable H2O Retailing Reduces Cybersecurity Risk with the Tenable One Exposure Management Platformvendor

00:39

ThreatNG Security The End of Security Awareness: Why You Can't Train Away an Emotional Reactionvendor

00:00

Axonius Axonius AI for Securityvendor

00:00

Axonius Axonius has the data and Axonius AI has the answer. Axonius AI is generally available.vendor

00:00

Axonius October 2026 Launch Week | Day 1: AI for Securityvendor

00:00

Axonius From Prompt-to-Action: Self-aware environments for the AI eravendor

00:00

Nanitor One ticket per CVE: how to cut vulnerability noise in an MSPvendor

Saturday 17 October 2026

22:19

Aikido Security Your CVE is reachable. But is it exploitable?vendor

Friday 16 October 2026

22:48

Zscaler Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Accessvendor

20:47

RunSybil Top Escape.tech alternatives for offensive security in 2026vendor

19:48

Aikido Security Top Horizon3 alternatives in 2026vendor

19:22

NopSec on LinkedIn Short answer: NopSec Long answer: When security programs are built around certain platform, and said platform gets discontinued, most teams start by looking...social

18:36

Censys Web Scanning in Censys ASM Just Got Deepervendor

17:28

Palo Alto Networks Fast-Track Your PQC Strategy: A Template for OMB M-26-15 Readinessvendor

15:59

watchTowr Frequently Asked Questions About the BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)vendor

15:23

Outpost24 Outpost24 Brings Self-Service Simplicity to PCI ASV Scanningvendor

14:52

Attaxion on LinkedIn We're excited to join WhoisXML API in Tokyo for the WXA Tokyo Forum 2026 event, gathering cybersecurity leaders to talk about Agentless Exposure Management and the current…social

13:35

Cyble Your AI Agent Doesn’t Have MFAvendor

13:33

Cobalt The Token Tax: Why AI Pentesting Gets Expensive Fastvendor

13:31

Rapid7 Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)vendor

13:00

Flare How an Average of $6 Can Buy Personal Information: Inside Latin America’s “Identity-as-a-Service” Marketsvendor

13:00

Rapid7 Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Researchvendor

12:40

watchTowr BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)vendor

12:19

ThreatNG Security Stop Blaming the Victim: Shifting the Burden Back to the Attackervendor

11:04

kitploit.com AdStrike is an open-source AI-powered modular framework designed for authorized Active Directory penetration testing, offering AD enumeration, attack-path...

07:57

Board of Cyber on LinkedIn And if the security questionnaire was no longer the starting point of every supplier assessment?social

07:31

Kaduu Dark Web Alerts: UK Legal Aid Data Theft Reaches 1978vendor

07:13

LocateRisk CVE-2026-103768: Upload vulnerability in ELEX-HelpDesk pluginvendor

05:53

VORNAC on LinkedIn 25,000 customers of a bank have lost their data because someone downloaded an open-source tool that bears "Pentest" in its name.social

04:00

manilatimes.net ThreatBook Launches AI-Powered Pentest Aggregator, RedAgents

01:17

prnewswire.com ThreatBook Launches AI-Powered Pentest Aggregator, RedAgents

00:19

RedSeal SINET New York 2026: Five Takeaways on AI, Exposure, and the Future of Cyber Defensevendor

00:00

JupiterOne The Top 10 CTEM Vendors in 2026 & Features to Considervendor

00:00

Axonius EO 14421 Readiness Through Asset Intelligencevendor

00:00

Ethiack SAST vs DAST vs SCA: The Comparison for CISOs and AppSecvendor

Thursday 15 October 2026

22:00

Palo Alto Networks AI-Powered Espionage Campaign Targets Government Linux Infrastructurevendor

19:21

securityaffairs.com U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

19:20

Rapid7 How Multi-Campus Universities can Build a more Connected Security Programvendor

18:03

Flashpoint Insider Threat Report: Dark Web Recruitment & Access Trendsvendor

17:02

AttackIQ Response to CISA Advisory (AA26-281A)vendor

14:39

NopSec on LinkedIn The short version: a manual engagement where our research team attacks your AI application the way an adversary would, starting at the model layer and working...social

14:19

ThreatNG Security Mind the Gap: The Visibility Deficit Between Your SOC and the Cybercriminalvendor

14:10

Empirical Security Kenna Is Sunsetting. Your Next Move Just Got Easier.vendor

14:00

esecurityplanet.com Data Visibility Is Only Half the Job: How DSPM Helps CISOs Reduce Risk

13:17

darkreading.com Organizations should shift from generic vendor-assigned vulnerability scores to exploit data tailored to their specific environments, prioritizing actual risk...

13:14

Synack Discovery Has Scaled. Remediation Hasn’t: Top Takeaways on Threat Exposure Analyticsvendor

13:00

Bishop Fox AI Security Scoping: Define What To Test In Your Deploymentvendor

12:01

bleepingcomputer.com Is AI pentesting as good as a human pentester?

12:00

Brinqa Fourteen Hundred CVEs, One Fire: The Count Has Stopped Telling You Anything.vendor

08:44

Cyble The GhostX Ecosystem: Forged in Transit, Licensed to Deceivevendor

08:13

EBRAND Top Five Tips for Cybersecurity Awareness Month 2026vendor

00:00

Nanitor MSP vulnerability management: the 5 problems to fix firstvendor

00:00

Intigriti What ID verification changes mean for public bug bounty programs at Intigritivendor

00:00

JupiterOne Which assets does your scanner see that your EDR doesn't? One query. | JupiterOnevendor

Wednesday 14 October 2026

23:31

itsecuritynews.info Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions

22:00

infosecurity-magazine.com Mind The Hack is a certified European cybersecurity firm developing the Exposure Decision Platform, which combines offensive security expertise, ethical...

19:39

Censys Frostbitten in France: A Danfoss StoreView Internet Exposure Reportvendor

17:41

Novee Stop Building Your Own AI Pentestervendor

16:00

Palo Alto Networks CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interfacevendor

15:07

UpGuard Poisoned Vector: JADEPUFFER and Using Unauthenticated Chroma Databases for Retrieval Extortionvendor

15:01

itsecuritynews.info The Blind Spots of Agentic Pentesting and How to Close Them

13:36

Cyble The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flawsvendor

13:16

CyCognito on LinkedIn Thanks to Jane King and LilaMax Media for hosting our CEO Rob N.social

13:00

Bishop Fox Behind Closed Doors: How Physical Penetration Testing Secures Sensitive Conversationsvendor

13:00

Censys 5 Key Takeaways From Censys’ State of the Internet Reportvendor

13:00

Rapid7 From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)vendor

12:47

Rapid7 Unauthenticated SQL Injection In Channel Software WebAlliance eCommercevendor

12:20

businessinsider.com Is your security strategy ready for more AI? Here's what new research reveals.

12:00

bleepingcomputer.com The Blind Spots of Agentic Pentesting and How to Close Them

11:00

globenewswire.com Tenable to Announce Fiscal Third Quarter 2026 Earnings Results

10:32

Outpost24 Microsoft Patch Tuesday – October 2026vendor

10:31

CyCognito Emerging Threat: (CVE-2026-103849) Adobe Commerce Template Injection Remote Code Executionvendor

10:29

Zerocopter on LinkedIn After the great success of last year, the third edition of Hack050 will take place on Thursday, October 29!social

09:26

NetSPI Introducing the NetSPI Platform MCPvendor

08:45

Saporo on LinkedIn Last week in Munich, Olivier Eyries spoke at TRENDSPECTIVES, Giesecke+Devrient’s first foresight conference, on Preemptive Identity Exposure Management.social

08:29

Palo Alto Networks The Blind Spot in Orbit: Why Space Could Be the Next Infrastructure Crisisvendor

08:01

Group-IB KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorizevendor

04:42

LocateRisk CVE-2026-87855: Security update for JTL-Connector for WooCommercevendor

04:00

techcentral.co.za AI is only as good as your asset data

03:34

LocateRisk CVE-2026-70279: XSS-Spoofing in Microsoft Exchange Servervendor

Tuesday 13 October 2026

21:50

Ivanti October 2026 Patch Tuesdayvendor

21:40

Rapid7 Patch Tuesday - October 2026vendor

20:35

NetSPI Administrating the Administrator, An OCI Identity Domains Permission Bypassvendor

20:27

manilatimes.net Tenable Announces Closing of New $400M Secured Revolving Credit Facility

19:36

Empirical Security Microsoft Just Published More CVEs Today Than All of Last Yearvendor

18:30

18:05

globenewswire.com Tenable Announces Closing of New $400M Secured Revolving Credit Facility

18:01

runZero Ivanti Connect Secure CVE-2026-104935: Find impacted appliancesvendor

17:06

Rapid7 Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)vendor

16:49

Synack Continuous Penetration Testing vs. Annual Pentests: What Enterprises Need to Knowvendor

16:00

watchTowr Frequently Asked Questions About the Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)vendor

16:00

Bishop Fox Attack Surface Discovery Datasheetvendor

16:00

Bishop Fox Emerging Threat Testing Datasheetvendor

16:00

Bishop Fox Attack Surface Testing Datasheetvendor

15:56

watchTowr Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)vendor

15:11

axios.com Companies are building with AI — and exposing new security risks

14:33

Ivanti October 2026 Security Updatevendor

14:20

IONIX The Quiet Takeover: How Your Forgotten Cloud Resources End Up Selling Slot Machinesvendor

13:45

Filigran Saved filters in OpenCTI: build once, share with your teamvendor

13:00

nextbigfuture.com Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo – NextBigFuture.com

13:00

Bishop Fox Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)vendor

12:55

AttackIQ CISA BOD 26-04: Adversary Opportunity Drives Vulnerability Prioritization Across the Federal Governmentvendor

12:36

Novee Webinar: Inside the Novee Gymvendor

11:29

Rapid7 CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLabvendor

11:20

cloudtweaks.com From Vulnerability Management to Exposure Management

11:02

Cyble “Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegationsvendor

10:21

CyCognito Emerging Threat: (CVE-2026-89110) SAP NetWeaver Visual Composer Broken Access Controlvendor

09:36

Brinqa Feed the Beast: The Data Won't Slow Down, So the Appetite Has to Keep Upvendor

09:00

businesswire.com Intruder Report: 90% of Security and Engineering Leaders Declare the Annual Pentest Dead as Code Ships Daily

08:29

Palo Alto Networks NHS England evolves its cybersecurity strategy with Palo Alto Networks and IBMvendor

07:00

Bishop Fox Continuous Security Testing Solution Briefvendor

06:01

VORNAC on LinkedIn From finding to fixing: VORNAC x Protforce 🤝 We have a new partner by our side: Protforce GmbH, a specialist for information security from Wiesbaden.social

00:00

Intruder State of AI pentesting: adoption, trust, and the future of the pentestvendor

00:00

Intruder How to evaluate an AI pentesting toolvendor

Monday 12 October 2026

14:56

Phoenix Security From 29,000 Findings to 516 Fixes: Why Vulnerability Management Must Move to Remediationvendor

14:34

Attaxion Brazil Election Domains 2026vendor

13:47

Aikido Security Aikido Security is now CREST accreditedvendor

11:02

openpr.com Attack Surface Management Market Size Worth USD 14.68 Billion by 2034 | CAGR of 30.63%

11:00

Digital Shadows MCP Security: What Security Teams Need to Know About the New AI Attack Surfacevendor

11:00

Digital Shadows An MCP Firewall Isn’t Enough: Why AI Agents Still Need Detection and Responsevendor

08:57

Kaduu Darknet Search Engine: Nippon Columbia Data Exposurevendor

08:17

G DATA CyberDefense AI and Human: Why the interplay makes a Managed SOC strongvendor

04:57

SOS Intelligence The SOS Intelligence CVE Chatter Weekly Top Ten –vendor

Sunday 11 October 2026

17:49

CyCognito Emerging Threat: (CVE-2026-107406) NetScaler ADC and Gateway Remote Code Execution via SAMLvendor

08:41

CyCognito Emerging Threat: (CVE-2026-107406) NetScaler ADC and Gateway Remote Code Execution via SAMLvendor

Saturday 10 October 2026

21:20

Hackrate on LinkedIn Your attack surface doesn’t stop changing after a penetration test.social

More: Hackrate on LinkedIn

13:01

itsecuritynews.info Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

10:30

bleepingcomputer.com Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

03:18

cio.economictimes.indiatimes.com Scalefusion launches vulnerability management capability for Windows and macOS endpoints

Friday 9 October 2026

19:21

Censys The Ultimate Guide to Brand Protection with Censysvendor

17:15

Praetorian Hunt, Triage, and Act on Guard Findings in Slackvendor

16:32

Outpost24 CRA Vulnerability Management: 6 Things You Should Be Doing Nowvendor

14:00

Empirical Security Nine Hours on a Train to VulnOptiCONvendor

14:00

Aikido Security Top 6 developer security tools for enterprise teams in 2026vendor

12:03

UpGuard 12 Cybersecurity Horror Stories of 2026 (No Costume Required)vendor

08:28

Enginsight Enginsight im Expertengespräch mit Cybersecurity-Insider Candid Wüest: „Unternehmen brauchen Resilienz“vendor

07:16

Nanitor on LinkedIn Nanitor 7.3.0 is live 🚀 and the headline feature solves a problem every security team knows.social

07:00

Group-IB Agentic AI In Cybersecurity: What Changes When The System Chooses The Next Stepvendor

06:53

Kaduu Dark Web Alerts After FBI Disrupts Chinese Hacking Toolsvendor

04:58

gbhackers.com FBI Warns Chinese Hackers Use Automated Tools and Botnets to Steal Sensitive Data

04:00

helpnetsecurity.com What the BPFDoor backdoor tells us about attacks on the network edge

00:00

VORNAC Picus-Alternative aus Deutschland: VORNAC im Vergleichvendor

00:00

VORNAC Cymulate Alternative from Germany: VORNAC in comparisonvendor

00:00

VORNAC Pentera alternative from Germany: VORNAC in comparisonvendor

00:00

VORNAC German alternative to Fleuret: VORNAC in comparisonvendor

00:00

VORNAC XBOW-Alternative aus Deutschland: VORNAC im Vergleichvendor

00:00

VORNAC Horizon3 Alternative from Germany: VORNAC in Comparisonvendor

Thursday 8 October 2026

21:30

Palo Alto Networks The Mango Strategy: A CEO’s Guide to AI Cybersecurityvendor

19:41

Filigran XTM Platform Q3 2026 updates: OpenCTI, OpenAEV, XTM One, and XTM Hubvendor

19:35

kitploit.com dddd — Batch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain enumeration, and Nuclei…

18:27

Tenable Top FedRAMP-compliant security tools in 2026vendor

17:43

Siemba How AI Agents Escalate Privileges Through AWS Lambda (and How to Audit for It)vendor

16:12

Synack Web Application Penetration Testing Companies: What Enterprise Buyers Should Comparevendor

14:56

Censys New on the Map — September 2026: 22 Protocol and Endpoint Scannersvendor

13:00

Tenable Tenable Uses OpenAI GPT Cyber Models to Advance Agentic Security Review in the CyberAgents Exchangevendor

13:00

Bishop Fox Healthcare Security: A Guide to Offensive Testingvendor

11:00

globenewswire.com Tenable Uses OpenAI GPT Cyber Models to Advance Agentic Security Review in the CyberAgents Exchange

11:00

forbes.com Why Attack Path Analysis Could Stop Rogue AI Agent Swarms

11:00

globenewswire.com Tenable Uses OpenAI GPT Cyber Models to Advance Agentic Security Review in the CyberAgents Exchange

10:45

cysmo on LinkedIn cysmo Cyber Risk Rating: Strengthening cyber resilience for German SMEs: Welcome Corporate Special Risks to the cysmo community!social

10:07

EBRAND ICANN Reveal Day 2026vendor

10:00

Strobes Security Your board won't ask if you're secure anymore. It will ask you to prove it.vendor

08:30

forbes.com The Patch Window Is Gone: Now Measure What You Can Actually Control

07:36

gbhackers.com 12 Best ASPM Platforms Compared (2026): Features & Pricing

07:02

itsecuritynews.info AI Spam Surge Forces Google to Pause Open Source Bug Bounty Program

00:00

CloudSEK NEBULA - Seven Fake AI SDK Packages on npm Install a Windows RAT That Needs No DLLvendor

Wednesday 7 October 2026

16:38

Novee Introducing MCP Assets and Novee Prompt Library: Targeted Testing for Your Newest Attack Surfacesvendor

16:34

watchTowr Post-Exploitation Analysis & Artifacts – Citrix NetScaler CVE-2026-88771vendor

14:37

Synack AWS Penetration Testing for Enterprises: What to Scope and How to Budgetvendor

14:12

AttackIQ Small Oversights, Big Consequences: Validating AWS Identity and Data Protectionvendor

14:00

Empirical Security Reserved but Public: The CVE IDs That Exist Everywhere Except the CVE Listvendor

13:50

cysmo on LinkedIn cysmo Cyber Risk Rating: Outside-In Cyber Insurance Summit Milan 2026 | On Stage & 🇮🇹 ONE MARKET, EVERY PERSPECTIVEsocial

13:28

helpnetsecurity.com Edgescan Atomic validates attack paths with controlled AI testing

12:49

UpGuard Find Out if You're Exposed on the Dark Webvendor

12:18

Holm Security Vulnerability threat intelligence & AI: How Holm Security builds testsvendor

10:11

CyCognito Emerging Threat: (CVE-2026-21589) Atlassian Data Center Arbitrary File Access via Path Traversalvendor

10:07

CyberMindr Why PE Firms Can No Longer Manage Cyber Risk Deal by Dealvendor

07:59

Outpost24 What to Do if Your PCI ASV Scan Failsvendor

06:39

Kaduu Dark Web Monitoring: Google Pauses Open-Source Bug Bountyvendor

06:00

Kaduu South Korea Bank Data Breaches: Was AI Behind the Attacks?vendor

02:30

helpnetsecurity.com Automation, AI agents or people? Sorting out who handles each security finding

02:00

securitybrief.in RiskProfiler launches MCP connector for AI threat hunts

00:00

Strobes Security Why your annual penetration test is already obsoletevendor

00:00

Intigriti Beyond asset discovery. Real-life CrowdRecon use case exploredvendor

00:00

Aikido Security How Aikido helps you meet SOC 2 Type 1 and Type 2vendor

Tuesday 6 October 2026

19:18

securitybrief.in Vicarius launches ScriptAI for faster vulnerability fixes

18:59

Cobalt No Plan Survives First Contact: Scoping the AI-Delivered Pentestvendor

15:53

Filigran Stop defending alone: shared intelligence beats siloed securityvendor

13:42

Aikido Security Aikido Security achieves FedRAMP Moderate authorizationvendor

13:18

XRATOR on LinkedIn Tomorrow, October 7, the National Assembly begins examining the Resilience bill.social

13:06

Phoenix Security Start in the Middle: How Autogroup Turns Asset Metadata into Ownershipvendor

13:00

nextbigfuture.com Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management – NextBigFuture.com

13:00

Bishop Fox Why the AI Attack Surface Extends Your Stackvendor

13:00

Tenable Tenable Appoints Industry Veteran Charlie Bell to Board of Directorsvendor

12:54

Pentera Pentera Named Among the Most Promising Solutions in Wavestone’s Landscape of Agentic AI Pentestingvendor

12:14

cybersecuritynews.com Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

11:41

watchTowr Atlassian Jira, Confluence (and more) Arbitrary File Read Vulnerability (CVE-2026-21589)vendor

11:00

globenewswire.com Tenable Appoints Industry Veteran Charlie Bell to Board of Directors

More: globenewswire.com

10:59

businesswire.com ArmorCode Study Highlights the Growing Gap Between AI-Powered Vulnerability Discovery and Risk Reduction

10:58

Brinqa Where Is Your Exposure Management Program Stalling? A Four-Stage Self-Checkvendor