Market monitor · 29 October–5 November 2026

Exposure Management Market: news river

341 articles and posts matched in the period, 336 stories, newest first.

Thursday 5 November 2026

05:48

Phoenix Security From Freezer Hacks to Developer Compromise: Ordinary Weaknesses, Extraordinary Consequencesvendor

Wednesday 4 November 2026

22:00

Horizon3.ai Horizon3 Expands Australia and New Zealand Team, Strengthens APJ Investmentvendor

21:06

Aikido Security Surviving cybersecurity until the end of 2026vendor

16:25

Rapid7 Rapid7 Achieves ISO/IEC 42001 Certification for its AI Management Systemvendor

16:22

NetSPI Leveraging Microsoft Graph API Change Notifications for Data Exfiltrationvendor

15:08

itsecuritynews.info The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

15:02

Seemplicity on LinkedIn A plan of action isn't action.social

15:00

Empirical Security Naming without Knowing: On Being Vulnerablevendor

14:52

SOCRadar on LinkedIn SOCRadar Extended Threat Intelligence: SOCRadar Extended Threat Intelligence at CYSEC GLOBAL Egypt!social

More: SOCRadar on LinkedIn

14:51

Novee Mass Assignment Vulnerability: How Attackers Turn API Convenience Into Privilege Escalationvendor

14:44

ThreatNG Security on LinkedIn On this day in 1988, we celebrated the premiere of John Carpenter’s iconic sci-fi film, They Live!social

14:42

CybelAngel External Threat Detection for Lean Security Teams: 5 Questions to Ask Before you Buyvendor

14:30

cloudnativenow.com How Exposure Management Improves Cloud Detection and Response

14:23

Onit Security on LinkedIn But so do we, if we use the one thing they don’t have: the context of our own environment.” Manish Nashine , Global Head of Threat Exposure Management at The...social

14:01

Rapid7 The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliancevendor

14:00

Black Kite on LinkedIn We’re heading to London for Vendor & Third Party Risk Europe, and we’d love to see you there.social

14:00

Flare Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Namevendor

14:00

Bishop Fox Attacking AI: Real-World Paths to Compromisevendor

12:35

Cyberint on LinkedIn Check Point Exposure Management: 📬 Catch up on Check Point Exposure Management in our October 2026 newsletter, featuring the new Safe Remediation Starter Pack, a free PHP2Shell…social

12:12

SignalFisher on LinkedIn Did you miss Sandro Nafzger ’s keynote at it-sa – Home of IT Security last week?social

11:59

Greenbone AI Safety without loss of control: Deterministic tests at AI speedvendor

11:31

Ethiack on LinkedIn Testing an AI pentesting agent only once means you're only seeing half the picture of how it actually performs.social

11:30

Vicarius on LinkedIn CVE-2026-119977 affects the WordPress core upgrade process.social

10:25

Kaduu Robbery at Binance: fake interview and million-dollar cyberattackvendor

10:14

Cyver on LinkedIn Anyone who played Super Mario knows the first run of a level rarely goes to plan.social

09:50

Rootshell Security on LinkedIn 🎬 That CISO Moment | Episode 1social

09:24

SOCRadar KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theftvendor

09:00

CovertSwarm on LinkedIn An attacker with a goal can cross your web app, your network, and your people in a single route.social

08:45

CovertSwarm How AI strengthens whole brand offensive securityvendor

08:34

YesWeHack on LinkedIn But can you achieve that when pentests take months to schedule and provide results?social

08:25

businesswire.com CrowdStrike Unveils Agentic Adversary Emulation on the Falcon Platform to Identify and Close Exploitable Attack Paths

08:20

@viocyber on X You're exposed the moment the advisory publishes.

More: @viocyber on X

08:17

@kazwan.bsky.social on Bluesky Turning Cyber Risk Into Action: The Value of Threat Exposure Management November 4, 2026 -- There’s no shortage of security data these days

08:01

Hackuity on LinkedIn Next stop: FutureCISO Malaysia.social

07:56

Kaduu Fake Nuclear Alerts in Russia and Ukraine: Cyberattack Risksvendor

07:37

@pingoru.bsky.social on Bluesky 🟠 Tenable is reporting a Partial Outage since 07:30 UTC "Tenable Vulnerability Management: Delay in Findings" Affects: FRA Live timeline →...

07:32

@outagewatch.flarewarden.com on Bluesky 🟠 Tenable: Tenable Vulnerability Management: Delay in Findings Service disruption · Security · since 07:30 UTC Affected: FRA Our probes: tenable.com...

07:03

cybersecuritynews.com Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored]

06:28

@hasamba72.bsky.social on Bluesky Open source ARTEX runs LLM-driven autonomous pentests: asset coverage graphs, findings tracking, browser-extension traffic capture from authenticated...

06:19

Phoenix Security Why AI Fix Pull Requests Don’t Get Merged, and What Makes Them Mergeablevendor

06:17

Phoenix Security Phoenix Security Makes Purple Hook Generally Available to Deliver the Fix Inside the Sessionvendor

06:16

Phoenix Security Phoenix Security Makes Green AI Remediation Generally Available as Security Teams Pay for Automated Fixes Developers Never Mergevendor

06:00

CrowdStrike CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threatsvendor

05:30

@coinacademy_fr on X OpenAI recruits Cathedral, the startup of ex-DOGE who introduced himself at Anthropic.

03:40

@YDS95 on Reddit How to learn cloud security

01:21

@grok on X The main trends for 2026: offensive AI (autonomous attacks, deepfake, hyper-personalized phishing) and defensive AI (agentic SOC), boom of non-human identities to govern, Zero…

00:48

kitploit.com VulnClaw — AI Agent + MCP Toolchain + Penetration Skill Orchestration, Combined with Large Language Models, Natural Language Input → Automatically Completes the Full Process from…

00:42

@cybersecurity.page on Bluesky A solo security pro managing 2500 endpoints across a global footprint is shopping for vulnerability management tools, with automation the top...

00:00

Intigriti The AI Pentesting wave. Pay for effort vs pay for impact.vendor

Tuesday 3 November 2026

23:10

@undercode.bsky.social on Bluesky The Shift to AI-Assisted Bug Hunting in 2026: Navigating Noise, False Positives, and Heuristic Reconnaissance + Video Introduction: As artificial...

20:49

Picus Security on LinkedIn Enterprises test only 32% of their attack surface on average (Omdia).social

20:49

@PicusSecurity on X Enterprises test only 32% of their attack surface on average (Omdia).

20:11

ThreatNG Security on LinkedIn On this day in 1954, Godzilla premiered in Japan.social

20:10

@undercode.bsky.social on Bluesky Automating Bug Bounty Triage in the AI-Generated Security Reports + Video Introduction: The widespread adoption of generative AI has led to a flood...

19:20

@undercode.bsky.social on Bluesky Defending the Frontier: Triage Tactics, Automation Frameworks, and Machine Learning Guardrails Against AI-Generated Bug Bounty Slop + Video...

19:16

Synack on LinkedIn With the Synack Platform, the organization is testing its web and mobile apps year-round.social

18:26

@wijbusinessnieuws.bsky.social on Bluesky Cyber attacks on cooling systems: does your company know what is vulnerable?

18:16

Novee Novee Named One of Dun’s 100 Top 10 Best Startups to Work For in 2026vendor

17:50

Synack What Is Continuous Automated Penetration and Attack Testing?vendor

17:30

@securityelites1.bsky.social on Bluesky 📢 Hacker Recon Checklist: 10-Step Ethical Hacking Recon Guide Learn the hacker recon checklist used in penetration testing and bug bounty hunting....

17:22

Brinqa on LinkedIn AI is helping security teams find more insights, faster.social

17:14

@rrmdp on Reddit [Hiring] Director, Customer Success at Armorcode Inc · Remote · $100,000/yr

16:59

Outpost24 How to Complete a Self-Service PCI ASV Scan in 4 Stepsvendor

16:10

NopSec What is CVE-2026-101767?vendor

15:27

Strobes Security on LinkedIn Most MSSP clients still get one pentest a year.social

15:01

SpyCloud on LinkedIn Fraud teams are always playing catch-up after an identity gets compromised and the damage is already done.social

15:01

Vicarius on LinkedIn Two vulnerabilities are being actively exploited.social

14:59

Flare Inside a Microsoft Lookalike Domain Masquerading as Czech Company’s IT Department Infrastructurevendor

14:49

@TrollEyeSec on X At TrollEye Security, we're helping CISOs reduce remediation workloads and better understand financial risk heading into 2027.

14:32

Pentest-Tools.com on LinkedIn Every practitioner remembers the first time two small findings added up to something serious.social

14:25

Novee on LinkedIn Today, we're launching Novee External Surface Testing, bringing external attack surface testing and deep application pentesting together in one platform.social

14:21

Siemba Introducing IDOR Testing: Find the Authorization Gaps Hiding Across Your APIsvendor

14:01

nl.mashable.com Cybersecurity Is Moving Beyond Exposure Detection To Preemptive Remediation

14:00

helpnetsecurity.com Novee puts forgotten internet-facing assets through penetration testing

14:00

Bishop Fox AI Findings are Cheap to Find & Costly to Trustvendor

13:45

Halo Security on LinkedIn New FBI and CISA warning: SafePay ransomware has already impacted 600 orgs and continues to target multiple critical infrastructure segments.social

13:43

watchTowr on LinkedIn The watchTowr Labs team have been busy publishing research from behind the scenes 🚀 In case you missed any, below is a roundup of recent research.social

13:40

cysmo on LinkedIn cysmo Cyber Risk Rating: New team in town 🏑 | CYSMO × SCHWARZ-WEISS KÖLNsocial

13:23

Kaduu Chainalysis Data Breach: AI Attack and Customer Risksvendor

13:20

SOCRadar on LinkedIn SOCRadar Extended Threat Intelligence: See you in Madrid!social

13:13

Hadrian on LinkedIn Frontier models can already hack.social

13:10

@h4zy.bsky.social on Bluesky Ah similar to vulnerability management can easily be 80% asset management

13:00

@1ns0mn1h4ck.bsky.social on Bluesky AI has changed CTFs. To bring back their spirit of learning and sharing, Insomni’hack 2027 will be non-competitive, with no prizes. Join the CTF and...

12:52

Enginsight on LinkedIn The number of new CVEs (Common Vulnerabilities and Exposures) is growing faster than patch teams can keep up.social

12:50

YesWeHack on LinkedIn What happens in Buenos Aires doesn't stay in Buenos Aires!social

12:45

@DEVOTOMSOLUTION on X Rank exposures by four questions — exploited?

12:19

@He1s_Sammy on X THIS IS F**KING Dangerous HACKERS CAN USE THIS TO MAP AN ENTIRE ATTACK SURFACE.

12:15

Hackuity on LinkedIn We now integrate with SysReptor Pentest Reporting!social

12:01

XBOW on LinkedIn At Singapore's largest government-led technology conference, come meet the #XBOW team at STACK Expo for a 1:1 on autonomous offensive security.social

12:00

runZero The undead in your network: EOL and PQCvendor

11:31

Ethiack on LinkedIn Exploitation windows have collapsed from years to days to hours, with approximately 67% of exploited vulnerabilities now zero-days (zerodayclock).social

11:27

Siemba on LinkedIn Your last pentest tested an app that no longer exists.social

10:54

G DATA CyberDefense Attack on the cold chain: Unknown individuals manipulate refrigeration systems in supermarketsvendor

10:42

Pikered on LinkedIn It is one of the questions that guided the discussion at the Richmond Cyber Resilience Forum Autumn Edition 2026, where we were with Pikered for two days of...social

10:31

SecPod on LinkedIn We recently conducted a partner enablement session focusing on Saner COSP and CNAPP.social

10:00

Digital Shadows Ransomware and Cyber Extortion in Q3 2026vendor

09:51

Enginsight Enginsight released version 4.9.1 of its platform, moving the Alarm-Route feature from beta to full release.vendor

09:40

Zerocopter on LinkedIn A look back on #Hack050!social

09:38

@niebezpiecznik.bsky.social on Bluesky Zhakuj te rządowe serwery, to jeszcze Ci zapłacą! Można dostać nawet 20 000 za błąd, o ile jest krytyczny

09:35

@zaufana3strona.bsky.social on Bluesky Startuje polska platforma bug bounty pod opieką CERT Polska zaufanatrzeciastrona.pl/post/startuj..

09:09

CybelAngel DarkBlinders Hit Government Cloud, Israeli Target: 5 Things to Knowvendor

09:05

Nordic Defender on LinkedIn You have a web application your customers rely on—whether it’s your product, your customer portal, or part of the service you deliver.social

08:57

Board of Cyber on LinkedIn Board of Cyber at the #BercyDeLaCyber to close Cyber Month On October 29, we participated with HEXATRUST in the 1st edition of the Bercy de la Cyber, organized...social

08:32

ThingsRecon on LinkedIn ThingsRecon · Supply Chain Intelligence: Risk follows the connection.social

08:00

CrowdStrike CrowdStrike Secures AI Agents Inside Claude Coworkvendor

08:00

CrowdStrike CrowdStrike Advances AI Security and Safety from Endpoint to Cloudvendor

08:00

CrowdStrike Introducing AI Kill Switch: Taking Control When AI Agents Go Roguevendor

07:43

UpGuard PHP2Shell Is a Vendor Problem Too: How to Find and Close Third-Party Exposurevendor

07:37

interestingengineering.com OpenAI joins forces with security researchers to strengthen its digital defenses

07:32

techcentral.co.za A practical guide to attack surface management for South African organisations

07:30

Patrowl on LinkedIn Forgotten assets, exposed services, unnoticed past vulnerabilities...social

07:29

CyberDart on LinkedIn Do you want to try the bug bounty at our expense?social

07:16

Aleph Index on LinkedIn With AI, a single individual now conducts what required an entire team yesterday.social

07:01

Enginsight Enginsight gewinnt Verdane als Partner für den Ausbau seiner europäischen Cybersicherheits-Lösungvendor

06:30

@undercode.bsky.social on Bluesky Continuous Exposure Management in the AI Exploitation Era: Building Cyber Resilience Beyond Traditional Patch Management + Video Introduction: The...

06:00

ThingsRecon Security ratings fail to capture how differently two companies can be affected by the same supplier breach.vendor

04:57

Horizon3.ai AI-Powered Penetration Testing: How Autonomous Offensive Security Worksvendor

04:00

@kitafox.bsky.social on Bluesky From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era. (AI-generated vulnerability reports increase, making

02:50

@opsmatters.com on Bluesky The latest update for #NucleusSecurity includes "Known Exploited Means Your Mitigation Is Next" and "#AI-accelerated Vulnerability Discovery Demands...

01:45

ArmorCode on LinkedIn AI has made finding vulnerabilities and writing fixes the easy part.social

01:30

@undercode.bsky.social on Bluesky Weaponized Vulnerability Intelligence: Prioritizing the 05% Threat Surface in Enterprise Patching Timelines + Video Introduction: Modern enterprise...

00:00

JupiterOne What Is Exposure Assessment? Lessons From JPMC's AI Playbook | JupiterOnevendor

20:08

Axonius Buyer’s Guide for Security and ITvendor

19:07

Axonius How to reclaim excessive license costs with Axoniusvendor

19:07

Axonius How to track and report cybersecurity metrics with Axoniusvendor

19:07

Axonius Rethinking Identity Governance: Amir Ofek Interviewvendor

18:08

Axonius How to improve CMDB coverage with Axoniusvendor

18:08

Axonius Ten Questions Every Cybersecurity Team Must Ask (and get answers to) About Cyber Asset Management A Comprehensive Guide for Security Prosvendor

18:08

Axonius Burnout in cybersecurity leadership: Strategies for staying sanevendor

18:08

Axonius Burnout in cybersecurity leadership: Symptoms we don’t talk aboutvendor

Monday 2 November 2026

23:34

Ridge Security on LinkedIn Your security tools probably already find more vulnerabilities than your team can handle.social

22:44

Novee Introducing Novee External Surface Testing: Go Broad and Deep. Prove What’s Exploitable.vendor

22:24

Cobalt on LinkedIn The AI security conversation usually starts with prompt injection and jailbreaks.social

21:55

AttackIQ on LinkedIn FRC is bringing Trellix and AttackIQ together for a live webinar demonstrating what continuous security validation looks like in action.social

21:35

@undercode.bsky.social on Bluesky Navigating AI-Assisted Submissions in Modern Bug Bounty Platforms + Video Introduction: The integration of automated tooling and large language...

21:27

darkreading.com One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning

20:36

@politikrypt.bsky.social on Bluesky global digital infrastructure. The incident raises urgent questions about AI governance and the need for proactive vulnerability management in...

20:36

@the.mazz.zone on Bluesky I've been leading my domain's ai-assisted vulnerability management initiative over the last 6 months and for most of that time I've been daydreaming...

20:17

RunSybil on LinkedIn One agent discovers an arbitrary file-read vulnerability.social

19:29

Cobalt AI's Biggest Security Risks Are Increasingly Familiar Flawsvendor

19:12

Censys European refrigerator controller redux: A new wave of refrigeration attacksvendor

18:32

Synack on LinkedIn Last stop in our #OptivCon roadshow!social

18:25

Palo Alto Networks New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agentsvendor

18:03

Censys Thoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2Shellvendor

18:00

@jobmeerkat.bsky.social on Bluesky Maze HQ is bringing AI agents to vulnerability management, investigating and helping resolve security findings so teams can focus on real-world risk....

17:45

SOCRadar on LinkedIn SOCRadar Extended Threat Intelligence: BSides NoVA 2026: 500+ attendees, hands-on workshops, and a booth line that kept the conversations going all day.social

17:41

ProjectDiscovery on LinkedIn Skyscanner's security team had to keep up with faster releases without becoming the bottleneck.social

16:59

Palo Alto Networks Guiding Customers Through Critical PHP Vulnerabilitiesvendor

16:04

RedSeal on LinkedIn RedSeal’s Estimated ROI Assessment for Exposure Management provides a practical framework for evaluating exposure management as both a security and business...social

15:58

helpnetsecurity.com CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)

15:13

Onit Security on LinkedIn Nobody puts Dave’s laptop on the crown jewels' list.social

15:10

Pentera on LinkedIn Plug in a frontier model to test a web app and you get generic findings, more noise that doesn’t help you understand what is critical for your business.social

15:08

Picus Security on LinkedIn Your last pentest tested the environment you had that day.social

15:00

runZero Critical ClickHouse vulnerability: CVE-2026-116366vendor

14:30

Empirical Security November 2026 CVE of the Month: Which of Adobe's 31 ColdFusion Fixes to Rush (CVE-2026-106616)vendor

14:24

Phoenix Security Binance $6.3B Hack: How a Compromised DevOps Laptop Reached the Hot-Wallet Signer (No CVE)vendor

14:24

Phoenix Security Attackers Deploying Malicious Code in Kubernetes Clusters to Mine Monerovendor

14:06

Edgescan on LinkedIn The engineering deserves a little applause.social

14:00

Securin on LinkedIn We’re heading to El Paso InfraGard's ResponseCon 2026 to work through real security challenges with the teams protecting utilities and public infrastructure.social

13:45

LocateRisk CVE-2026-116606: Authentifizierungsumgehung im Barracuda Email Security Gatewayvendor

13:41

Pentest-Tools.com on LinkedIn That's why we're proud to see Vodafone acknowledge publicly that Specter, our autonomous pentesting engine, found an important vulnerability through their...social

13:32

Novee on LinkedIn 📹 Watch: How to retire the annual pentest.social

13:30

Filigran Using OpenCTI to operationalize Google Threat Intelligencevendor

13:25

SOCRadar Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourgvendor

13:10

Enginsight on LinkedIn Around 290 new CVEs per day: That's the average number of vulnerabilities published until October 31st, 2026 (NVD data).social

13:09

Enginsight Strong demand at it-sa strengthens growth trajectory of Enginsightvendor

13:06

EBRAND Dark Web Monitoring: Detecting and Mitigating Hidden Threatsvendor

13:02

Cyberint on LinkedIn Check Point Exposure Management: Check Point Exposure Management was recently included in three Gartner research publications on exploitability, autonomous remediation, and…social

13:00

Flare Analysis After the Refrigeration System Attack in France: Two Thirds of Exposed Refrigeration Controllers Share an Address with Cameras, Remote Desktop, and VPNsvendor

12:56

@profsimononline.bsky.social on Bluesky Severity ratings tell you what could happen

12:55

Enginsight The CVE Program and what important terms like CVE, CVSS, EPSS meanvendor

12:42

Cyberwatch on LinkedIn The chat of our launch webinar Cyberwatch 16.0 was non-stop!🎙️ And a clear trend emerges: even before the new features, what concerns security teams is the...social

12:39

CyCognito on LinkedIn With thousands of assets across an organization's external attack surface, knowing what to test is just as important as knowing how to test it.social

12:32

G DATA CyberDefense on LinkedIn "Go back to how things were at the beginning." Said and done.social

12:01

@oludai.bsky.social on Bluesky ✨ Trending new AI project on GitHub: N1nEmAn/sapper-v2 — 576★ · Python « Autonomous pentest legion — AI commander + worker swarm + layered...

11:42

Cyver on LinkedIn We've been looking at where AI agents fit in real red team work.social

11:17

SOCRadar Ivanti Connect Secure Zero-Day Chain Enables Root Accessvendor

11:04

Rapid7 Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)vendor

10:43

SOCRadar Pataya Food Leak, Belgian Military Data, China Housing Fund, Anka DDoS, and Vijay Sales Accessvendor

10:39

Detectify on LinkedIn We're excited to share that Detectify is featured in KuppingerCole Analysts' 2026 Leadership Compass on Attack Surface Management.social

10:20

CybelAngel Cyber Roundup: Week of October 26vendor

10:07

@caleb_cnk on X Continuous Threat Exposure Management: CTEM and Cloud Resilience #CybersecurityNews #CyberSecurity #CybersecurityAwarenessMonth #AINews https://t.co/VVP6j2zTea

10:00

Digital Shadows Your AI Is Now Part of Your Attack Surfacevendor

10:00

Digital Shadows The SOC Analyst Role Is Not Going Away. Agentic Defense Is Making It Stronger.vendor

09:31

gbhackers.com 11 Breach & Attack Simulation Tools: The 2026 Buyer’s Verdict Guide

09:05

@undercode.bsky.social on Bluesky Mastering External Attack Surface Management: Closing Blind Spots From an Attacker’s Perspective + Video Introduction: An organization’s true attack...

09:02

Nordic Defender on LinkedIn Your last pentest assessed the product you had then.social

09:00

Aikido Security Critical Linux kernel TCP vulnerability can allow remote code execution (CVE-2026-98432)vendor

08:00

Hacktify on LinkedIn We'll meet in Siófok in November. We'll be at the FUTURE IT 2026 conference, from November 10 to 12 at Hotel Azúr.social

07:51

Strobes Security We Checked 286 Indian Companies. 4 in 5 Are One Bug Away From a Breachvendor

07:45

Nanitor on LinkedIn Clients buy levels, not scans.social

07:39

Kaduu Threat Intelligence Platform: Binance’s $6.3B Crypto Theftvendor

06:00

CrowdStrike What Makes a Good Security Agent? 5 Lessons from the AgentWorks Hackathonvendor

04:56

SOS Intelligence The SOS Intelligence CVE Chatter Weekly Top Ten – 02 November 2026vendor

00:00

Intigriti PHP2Shell revisited: What Intigriti’s insights tell us about real-world riskvendor

00:00

Axonius DoW Instruction 8430.01 Software Readiness Starts with Asset Inventoryvendor

00:00

Brinqa Node2Shell (CVE-2026-111497): Scoping and Remediating Brotli Exposurevendor

00:00

Ethiack How Bondalti Validated Critical Industrial Defenses with Ethiackvendor

00:00

Nanitor Proving value: how MSP vulnerability reports keep clients payingvendor

Sunday 1 November 2026

21:45

@undercode.bsky.social on Bluesky Bridging the Gap Between Isolation and Remediation in AI-Powered Bug Bounty Automation + Video Introduction: Integrating security testing late in the...

21:10

@undercode.bsky.social on Bluesky Evaluating Autonomous AI Security Agents: Beyond Exploit Demos to Production Defense + Video Introduction: Autonomous AI security agents promise to...

20:40

@ireneinthecloud.bsky.social on Bluesky Standard vulnerability management processes were built to deal with average exploitation times after disclosure on the order of months and years....

20:12

@ireneinthecloud.bsky.social on Bluesky AI shifts attacker economics via scale and speed

16:20

@undercode.bsky.social on Bluesky Securing Intelligent Systems: The Convergence of Artificial Intelligence, Ethical Hacking, and Bug Bounty Operations + Video Introduction: The rapid...

12:15

Picus Security on LinkedIn Agentic pentesting is the most capable form of offensive testing today, and it can only test what it can safely reach.social

11:55

@undercode.bsky.social on Bluesky Penetration Testing Evolution: From Manual Reconnaissance to AI-Driven Autonomous Attack Simulation + Video Introduction: The cybersecurity landscape...

11:05

@undercode.bsky.social on Bluesky Navigating the AI-Driven Threat Landscape: Modern Vulnerability Management and Bug Bounty Operations in Critical Infrastructure + Video Introduction:...

09:45

@undercode.bsky.social on Bluesky Integrating AI into Modern Bug Bounty Workflows and Security Testing Methodologies + Video Introduction: Integrating artificial intelligence into...

08:19

@Artilas_Digital on Reddit Shannon: an autonomous, AI pentester for web applications and APIs (50k stars)

07:05

@undercode.bsky.social on Bluesky Navigating Vulnerability Research and Bug Bounty Triage in the AI Automation + Video Introduction: The rapid infusion of artificial intelligence into...

03:57

kitploit.com - The generated text has been blocked by our content filters.

Saturday 31 October 2026

21:26

Praetorian on LinkedIn In the second half of October 2026, the industry saw a preview of what we will likely live with for the next several years: the opening of a new operational tempo.social

14:50

Ethiack on LinkedIn For CISOs and security leaders, manual pentesting and automated scanning have long forced a trade-off: coverage versus depth.social

13:03

NetSPI on LinkedIn Trick: a weak password that lets an attacker walk right in.social

12:32

itsecuritynews.info AI penetration testing tools compared: what autonomous pentesting actually validates

More: itsecuritynews.info

12:30

RedSeal on LinkedIn 🎃 Some things are better left unseen.social

09:20

@earanyash.bsky.social on Bluesky Fair - between Big Sleep and the autonomous pentest/CTF-bot pipelines, the tooling to find exploitable bugs fast has existed a while.

08:15

@undercode.bsky.social on Bluesky Automated AI Workflow Frameworks Accelerate Bug Bounty Hunting: Analyzing the ‘bug-bounty-hunting-prompts’ Prompt Architecture + Video Introduction:...

08:15

WithSecure on LinkedIn Exploitation now happens in hours.social

07:42

LocateRisk CVE-2026-109220: PHP Object Injection im WooCommerce-Plugin pdf-for-woocommercevendor

More: LocateRisk

06:41

Siemba on LinkedIn Know who you’re letting in, all year round.social

04:40

@undercode.bsky.social on Bluesky Autonomous AI Agents Breach Enterprise Perimeter via Third-Party Integrations in Bug Bounty Demonstration + Video Introduction: Recent security...

04:19

techbullion.com Best Adversarial Exposure Validation (AEV) Platforms for Enterprise Security Teams

Friday 30 October 2026

22:20

@aitoolstack.bsky.social on Bluesky curl shut its bug bounty in Jan 2025 largely over AI-written reports that didn't reproduce: discovery outpaced triage

22:12

Flare Beyond the Binance Attack: How Stealer Logs Can Link Corporate Sign-Ins to Developer and Monitoring Toolsvendor

21:30

cyberscoop.com China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days

20:03

NopSec on LinkedIn NopSec CTO and Founder Michelangelo Sidagni recently walked through what is in use right now: LLM-enhanced risk prioritization, CVE-to-MITRE ATT&CK mapping...social

19:39

ArmorCode on LinkedIn A pull request merges on Tuesday.social

19:31

Aikido Security AI agent security in Kubernetes: Why prompt injection isn't the right termvendor

18:10

Siemba on LinkedIn October has been a rough month for security teams, and it isn’t over yet.social

18:09

Intigriti on LinkedIn This month's issue is as usual packed with bug bounty tips: ✅ A full Microsoft Edge exploit chain using only logic bugs ✅ 1-click RCE in Discord via Twitch...social

18:06

Sprocket Security on LinkedIn The pushback we hear most on continuous pentesting: "I can barely keep up with the results of one test a year.social

17:44

Censys Introducing Censys Starter Subscriptionsvendor

17:39

Cobalt Supabase From a Pentester's Perspective: Methodology and Where the Real Risks Hidevendor

17:05

Cobalt on LinkedIn 🎃 The scariest part of our 2026 pentest data isn’t a shocking twist.social

17:03

Empirical Security on LinkedIn Even after all this time in vulnerability management, we need not just a better way to prioritize but also a better way to defend what we're prioritizing -- and what we're…social

17:00

Brinqa on LinkedIn 91% of organizations in the SANS 2026 Exposure Management Survey have an exposure management program.social

16:56

Empirical Security Can You Defend Your Remediation Strategy?vendor

16:46

Cobalt Top 10 Spookiest Web App Vulnerabilitiesvendor

16:26

Censys on LinkedIn Rapid Response: This Week's Critical Vulnerability Advisories Three new advisories from Censys ARC this week, covering Oracle E-Business Suite, Drupal, and...social

16:19

Hackuity on LinkedIn Top to have participated in IT-SA 2026 in Nuremberg alongside Campus Cyber and the French delegation!social

16:04

CovertSwarm Protecting keys is not enough. You need to prove what an attacker can do with them.vendor

16:03

NetSPI on LinkedIn Scott Weston from NetSPI+Synack is speaking tomorrow at 3:00 PM in Room 121, and you won’t want to miss it!social

16:01

Rapid7 Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)vendor

16:01

Horizon3.ai on LinkedIn 🪦 We’re ending October with one final security assumption ready for the graveyard: Resilience is measured by how well you recover from an attack.social

15:52

Kaduu ENGIE data leak: when a service provider becomes the gateway for cybercriminalsvendor

15:30

@RedLegg on X A critical finding isn't always the highest remediation priority.

15:19

Edgescan on LinkedIn Keeping up takes a team: continuous visibility to spot changes, vulnerability management to track issues, expert-led pen testing for depth and AI-powered pen testing between…social

15:18

insurancejournal.com Opterrix Launches AI-Powered Portfolio Management Workflow

14:24

Pentest-Tools.com on LinkedIn 📣 Exclusive exploit for #Node2Shell, now available in Pentest-Tools.com.social

14:17

Phoenix Security on LinkedIn Phoenix Security | ASPM: Yesterday we unveiled at Lonestar Application Security Conference (LASCON) in Texas the Hook Security philosophy and how it can save time and frustrationsocial

14:01

Flashpoint The Flashpoint Threat Intelligence Brief: Middle Eastvendor

14:01

NetSPI on LinkedIn Hack Responsibly Newsletter: October 2026 Editionsocial

13:54

SafeBreach on LinkedIn 1 in 4 malicious breaches is now AI-enabled.social

More: SafeBreach on LinkedIn

13:17

Cyver on LinkedIn Happy Hacking-ween from the Cyver.io team!social

13:13

Aikido Security Binance hack: how a compromised developer laptop can lead to a $6.3 billion breachvendor

13:09

Cyberint on LinkedIn Check Point Exposure Management: 🚨 Are you exposed to the PHP2Shell vulnerability?social

13:04

Hadrian on LinkedIn Three days at it-sa 2026 and Hall 7 kept us busy.social

12:04

@paulirolla.bsky.social on Bluesky Bug bounty platforms are full of zero days found by agents now

12:01

Pentera on LinkedIn Stranger things happen when you don’t test your web apps.social

12:00

Brinqa on LinkedIn Leave the guesswork in the graveyard this Halloween.social

11:53

CyberMindr on LinkedIn Healthcare cybersecurity goes beyond protecting sensitive patient records.social

11:24

DynaRisk on LinkedIn Our Threat Intelligence Lead, Milivoj Rajic Rajić, is speaking at the upcoming Digital Forensics Conference 2026 in Belgrade.social

10:00

ONYPHE on LinkedIn The scariest map on the Internet 🇫🇷 The scariest things aren’t always hiding in the dark.social

10:00

Bitdefender on LinkedIn Effective exposure management goes beyond patching vulnerabilities.social

09:58

@secureawake on X AI era cyber attack countermeasures are shifting from post-attack response to pre-attack prevention.

09:35

GObugfree on LinkedIn We said, that Cyber Security Training can't make any sense?social

09:35

@undercode.bsky.social on Bluesky Automating Bug Bounty Triage: Using Gemini CLI to Complement AI-Driven Attacks and Spot Vulnerabilities + Video Introduction: Integrating automated...

09:33

Siemba Murphy’s Law Hits Cybersecurity: What October 2026 Taught Security Teams (PHP2Shell, HTTP2Shell, GitLab & More)vendor

09:00

Raynet on LinkedIn Hidden vulnerabilities may be lurking in your IT environment, just waiting to spread terrible cyber threats.social

08:51

SOCRadar Binance Hack: Inside the $6.3B Hot Wallet Theftvendor

08:09

XMCO on LinkedIn In The Wild - September 2026: 8 critical vulnerabilities analyzed by CERT-XMCO.social

08:08

YesWeHack on LinkedIn We tested it on XSS and insecure deserialization labs to see how useful it really is.social

08:07

CybelAngel Lumma Stealer: Inside the Malware-As-A-Service Threatvendor

07:56

Kaduu Darknet Search Engine Lessons from Polymarket’s $2.5M Breachvendor

07:00

Lansweeper Dynamic Groups Returnvendor

06:14

Group-IB Deepfake Fraud Prevention: Why Detection Alone Failsvendor

05:55

kitploit.com ARTEX — LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and vulnerability retesting.

05:00

CrowdStrike CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloudvendor

05:00

CrowdStrike Build an Intelligence Advantage with Falcon Next-Gen SIEMvendor

05:00

CrowdStrike CrowdStrike Agent Graph Shows How Agents Act on the Endpointvendor

03:45

@opsmatters.com on Bluesky The latest update for #Detectify includes "Detectify featured in KuppingerCole's Analysts 2026 Leadership Compass on Attack Surface Management" and...

03:31

Autobahn Security on LinkedIn Autobahn Security | Reduce Hackability: Your WordPress is up to date.social

01:49

CYFIRMA on LinkedIn ONE CRITICAL LESSON: EXPOSURE IS AN OPPORTUNITY FOR ATTACKERS.social

01:42

Tenable php2shell one week later: Why one exploit doesn’t work everywherevendor

00:00

Intigriti Intigriti Bug Bytes #241 - October 2026 🚀vendor

00:00

Intruder 8 best CSPM tools for 2027vendor

Thursday 29 October 2026

22:55

RunSybil on LinkedIn Thank you to RunSybil for supporting [un]prompted II.social

21:55

@undercode.bsky.social on Bluesky The Autonomous AI Security Execution Trap: Implementing Pre-Flight Scope Verification and Safeguards in AI-Assisted OffSec Workflows + Video...

21:30

@carpeinferi.bsky.social on Bluesky Coming in hot with part two of the day with Forward (formerly Forward Networks) to talk about verified exposure management

19:26

Cobalt on LinkedIn 🎃 This Halloween, don’t let a zombie horde of bug submissions eat your team alive.social

19:10

Cobalt on LinkedIn “There is a lot of snake oil out there.social

18:04

Nucleus Security on LinkedIn 👋 Welcome to Nucleus, Martin Orozco!social

18:02

Edgescan on LinkedIn A real-world use case for Edgescan WAF Rule Generation.social

17:00

Brinqa on LinkedIn One of the quieter costs of unreliable exposure data can show up in reporting to leadership.social

16:36

@BassamMaharmeh on X Why are software vulnerabilities that have been known for years still being exploited?

16:29

@grape2024.bsky.social on Bluesky I Automated My Entire Bug Bounty Recon :One Script, Start to Finish Stop running 15 tools manually

16:00

forrester.com Break Out Of The Vulnerability Matrix At Forrester Security and Risk 2026

15:56

Netcraft on LinkedIn The best online digital risk protection providers combine broad monitoring across web services and other external channels with validated detection, risk prioritization, and…social

15:15

Raynet on LinkedIn What a great few days at it-sa – Home of IT Security in #Nuremberg!social

15:15

Synack API Penetration Testing Checklist: What Enterprise Security Teams Should Requirevendor

15:10

SafeBreach on LinkedIn On October 8, CISA added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.social

15:01

Censys Censys takes census of the Internet like no one elsevendor

15:01

UpGuard AI Just Rewrote the Rules of BEC: Are Your Defenses Ready?vendor

14:58

UpGuard Left Unsupervised: 10 Times Access Outlived Its Authorizationvendor

14:54

UpGuard YOLO Mode: Hidden Risks in Claude Code Permissionsvendor

14:53

UpGuard A CISO's Guide to the Business Risks of AI Development Platformsvendor

14:48

UpGuard Decoding the Copilot Ecosystemvendor

14:43

UpGuard Governing Excessive Agency in the Anthropic Ecosystemvendor

14:40

UpGuard The 2026 Enterprise AI Security Indexvendor

14:38

UpGuard Why Banning SaaS and AI Backfires (And What to Do Instead)vendor

14:37

UpGuard AI Assurance: The Third Head of Your AI Governance Watchdogvendor

14:37

watchTowr on LinkedIn watchTowr has been listed as a Sample Vendor for Preemptive Exposure Management in the 2026 Gartner Emerging Tech Impact Radar: Preemptive Cybersecurity.social

14:35

UpGuard No Hackers Required: 10 Shadow AI Leaks Hiding in Plain Sightvendor

14:27

@famato.bsky.social on Bluesky Winter is coming. 72,812 CVEs in 2026 vs 48,244 in all of 2025. Exploiting vulnerabilities is already the initial access #1 (31%). Autonomous Pentest of...

14:25

Horizon3.ai Why Old Vulnerability Management Habits Keep Rising from the Gravevendor

14:03

GObugfree on LinkedIn Ready for launch, but Sicherheitskonzept is missing!social

14:01

@undercode.bsky.social on Bluesky Building Hackbot v1: A Practical Starting Point for AI-Driven Bug Bounty Reconnaissance + Video Introduction: Integrating artificial intelligence...

14:00

Searchlight Cyber on LinkedIn Disappointment #29: every step they planned for ends in a dead end.social

13:50

UpGuard How User Risk Finds the Shadow AI Outside Your Directoryvendor

13:47

Pikered on LinkedIn Pikered and Arsenalia at the Richmond Cyber Resilience Forum Two days at the Richmond Italia Cyber Resilience Forum (Autumn Edition) 2026 in Rimini, a...social

13:39

GObugfree on LinkedIn "What makes it work is trust!" Banking is organized cooperation based on trust between customers <-> bank bank <-> banks bank <-> supervision & partners...social

13:39

XRATOR on LinkedIn Yes, nearly 3 out of 4 hacks involve a human: a click, a reused password, an email too well imitated.social

13:32

Strobes Security on LinkedIn It’s that time of year again 🎃 We made a little Halloween film, and if you’ve ever wrapped up a pentest and shipped something new the next day, you already...social

13:07

Cyberint on LinkedIn Check Point Exposure Management: Wrong answers only, round two!social

13:05

Nucleus Security on LinkedIn Stop by Booth 33 to talk vulnerability and exposure management, meet the Nucleus Security team, and enter for a chance to win the new Beats 360 🎧 See you there!social

13:03

@runzero.com on Bluesky Heading to the IANS Boston Forum today? So is the runZero team! We’re proud to sponsor this year’s forum

13:01

NetSPI on LinkedIn For 20 years, the CISO's job was largely to identify risk, categorize it, and route it to the team that owned it.social

13:00

Bishop Fox A Journey into Claude's Sandboxvendor

13:00

Aikido Security The day after tomorrow: After PHP2Shell, it gets worse, then defenders winvendor

12:47

Horizon3.ai on LinkedIn Attackers are moving at machine speed.social

12:43

Novee on LinkedIn Most exploits show up before the CVE does.social

12:26

GObugfree on LinkedIn 🚀 The new GObugfree platform is live and already in use at #GOhack26.social

11:21

Fleuret AI on LinkedIn Last night, HEC Venture Lab and HEC MBA Entrepreneurship Club (VIBE) hosted our Masterclass at HEC Paris: a round table with the co-founders of Fleuret AI.social

10:53

Phoenix Security The AI Coding Assistant Is Spending Tokens to Find What The Scanner Already Foundvendor

10:51

Yogosha Giving AI agents the rules of the game: how we built the Yogosha Skillvendor