AI security fails in the seams. Every team reviews its own work. Few review the chain of risk when systems interact. And new exploit paths emerge. Get the full story in The CISO’s Guide to the Evolving AI Threat Model: ow.ly/gMOk50ZZPQu #AIpentesting

AI has changed the attack. Your offensive security has to change with it. That's why @NetSPI and @synack are now one: the speed and scale of agentic AI plus elite human expertise. Learn more: ow.ly/3RWg50ZZQ17 #NetSPI #Synack #OffensiveSecurity #AgenticAI #Cybersecurity

PATCH NOW! CVE-2026-109618 and CVE-2026-109619 – PHP RCE The PHP project has disclosed two critical vulnerabilities affecting all PHP installations that serve web requests. Exploitation has been confirmed in the wild. Learn more: ow.ly/9WP450ZZNFn

OCI blocked a User Manager from resetting an admin's password. It still let them mint API keys for that admin. Two authorization models, one gap, and a spot in Oracle's June 2026 CPU. Here's how it worked: ow.ly/mO8T50ZXnNQ #OCI #CloudSecurity

Shadow AI is the new shadow IT. Data leaves through prompts to models with broad access, not file transfers your DLP catches. What's leaving your org through the gaps traditional controls missed? Let's talk: ow.ly/bBkr50ZVrEX #CybersecurityAwarenessMonth #AIpentesting

NetSPI and Synack are now one. Together we're building one platform for offensive security, pairing elite hackers with agentic AI at enterprise scale. Continuous testing for a wider attack surface and human-validated findings you can act on. #NetSPI+Synack #OffensiveSecurity

AI has changed the social engineering game. Attacks are more convincing. More personal. Harder to spot. Your organization needs to be ready. Want to explore your social engineering strategy? Let's chat: ow.ly/wJQn50ZSZnv #CybersecurityAwarenessMonth #AIpentesting

The industry is going autonomous. We're proving there's a better way. Find us at #InfoSecWorld Booth 809, Oct 12-14 in Orlando.

Threat landscape 2026: Your security playbook may already be out of date. Before you can defend the new attack surface, you have to understand it. We're digging into the changes this #CybersecurityAwarenessMonth. Reach out to test your AI: ow.ly/6Wi350ZSCkP #AIpentesting

We're heading to InfoSec World 2026 in Orlando and we'd love to see you there. Find us at Booth 809, October 12-14 at the Gaylord Palms Resort, where we'll be talking about what it actually takes to find the vulnerabilities that put organizations at real risk. See you there!

Heading to BSides Ahmedabad? We'd love to connect with cybersecurity professionals who are passionate about offensive security, consulting, and making an impact. Come say hello and learn more about opportunities at NetSPI!

pfBlockerNG flaw (CVE-2026-78902): DNS request stores XSS in logs. Admin views Stats page, malicious JS executes, CSRF token stolen, reverse shell launched as root. Netgate patched in 24 hours. Update now. #Pentesting #CyberSecurity ow.ly/rLQn50ZQzVw

PATCH NOW! CVE-2026-75650 Adobe Commerce / Magento Open Source — Unauthenticated RCE To learn more, please visit our website: ow.ly/s9Ku50ZL3pb

Big news: NetSPI and @synack are merging in an exclusive covered by @AxiosPro. Two of the strongest offensive security teams in the industry, combining human expertise with agentic AI for continuous testing and validation. Read the full story: axios.com/pro/enterprise-sof…

Azure has 897 built-in roles & 22,018 permissions. Reviewing by role misses things. Using a permissions-first approach, we found a built-in role that could escalate to Owner with zero ABAC constraints. Reported to MSRC, now fixed. ow.ly/By6F50ZIUhv

NetSPI & @synack are forming the industry’s leading offensive cybersecurity platform. Hear from NetSPI CEO Aaron Shilts on why ⬇️ Read why the future of offensive security isn't a choice between human & machine. Read his latest: ow.ly/Pp5t50ZIMs0

We are thrilled to announce that NetSPI and @synack have entered into a definitive agreement to merge & form the industry’s leading offensive cybersecurity platform. Full announcement: ow.ly/FIOC50ZIt9o #NetSPI #Synack #OffensiveSecurity   #ContinuousTesting

Fal.Con 2026 kicks off today, and so does the conversation about what continuous pentesting actually looks like. Most pentesting gives you a snapshot. Attackers don't work off snapshots. Stop by booth #2203 to see it in action. ow.ly/3IhP50ZysJy

Heading to Fal.Con 2026? So are we. Find NetSPI at booth #2203 for live demos of continuous pentesting in action and real conversations about offensive security. See you next week! ow.ly/20H650ZysGr