NetSPI

The Proactive Security Solution | Securing the most trusted brands on Earth

#PenetrationTesting #proactivesecurity

[NetSPI @NetSPI]

AI agents are the new insider risk. Not because they’re trusted. Because they can be manipulated into crossing boundaries they’re supposed to respect.

Do you know what your agents can access? https://t.co/GdC5UJVPlJ

#CybersecurityAwarenessMonth #AIpentesting

[NetSPI @NetSPI]

AI security fails in the seams. Every team reviews its own work. Few review the chain of risk when systems interact. And new exploit paths emerge.

Get the full story in The CISO’s Guide to the Evolving AI Threat Model: https://t.co/fsjBkBkY5E

#AIpentesting

[NetSPI @NetSPI]

AI has changed the attack. Your offensive security has to change with it.

That's why @NetSPI and @synack are now one: the speed and scale of agentic AI plus elite human expertise.

Learn more: https://t.co/UaErqxcOql

#NetSPI #Synack #OffensiveSecurity #AgenticAI #Cybersecurity

[NetSPI @NetSPI]

PATCH NOW! CVE-2026-109618 and CVE-2026-109619 – PHP RCE

The PHP project has disclosed two critical vulnerabilities affecting all PHP installations that serve web requests.

Exploitation has been confirmed in the wild.

Learn more: https://t.co/AZu3RC7E1B

[NetSPI @NetSPI]

OCI blocked a User Manager from resetting an admin's password. It still let them mint API keys for that admin. Two authorization models, one gap, and a spot in Oracle's June 2026 CPU.

Here's how it worked: https://t.co/uc45GEKtY0

#OCI #CloudSecurity

[NetSPI @NetSPI]

@SynackRedTeam researcher d7x found a dangling CNAME leading to JavaScript injection and parent-domain cookies at risk across entire infrastructure.

As NetSPI and @synack come together, meet the experts behind both teams:
https://t.co/sDZs5XjAOT

#OffensiveSecurity

[NetSPI @NetSPI]

Shadow AI is the new shadow IT. Data leaves through prompts to models with broad access, not file transfers your DLP catches.

What's leaving your org through the gaps traditional controls missed? Let's talk: https://t.co/H21b1Hhdmi

#CybersecurityAwarenessMonth #AIpentesting

[NetSPI @NetSPI]

NetSPI and Synack are now one.

Together we're building one platform for offensive security, pairing elite hackers with agentic AI at enterprise scale.

Continuous testing for a wider attack surface and human-validated findings you can act on.

#NetSPI+Synack #OffensiveSecurity

[NetSPI @NetSPI]

AI has changed the social engineering game. Attacks are more convincing. More personal. Harder to spot.

Your organization needs to be ready. Want to explore your social engineering strategy? Let's chat: https://t.co/Linq5hWgwr

#CybersecurityAwarenessMonth #AIpentesting

[NetSPI @NetSPI]

The industry is going autonomous. We're proving there's a better way. Find us at #InfoSecWorld Booth 809, Oct 12-14 in Orlando.

[NetSPI @NetSPI]

Threat landscape 2026: Your security playbook may already be out of date.

Before you can defend the new attack surface, you have to understand it.

We're digging into the changes this #CybersecurityAwarenessMonth. Reach out to test your AI: https://t.co/KQ7f9By3qF

#AIpentesting

[NetSPI @NetSPI]

We're heading to InfoSec World 2026 in Orlando and we'd love to see you there. Find us at Booth 809, October 12-14 at the Gaylord Palms Resort, where we'll be talking about what it actually takes to find the vulnerabilities that put organizations at real risk.

See you there!

[NetSPI @NetSPI]

Heading to BSides Ahmedabad?

We'd love to connect with cybersecurity professionals who are passionate about offensive security, consulting, and making an impact. Come say hello and learn more about opportunities at NetSPI!

[NetSPI @NetSPI]

pfBlockerNG flaw (CVE-2026-78902): DNS request stores XSS in logs. Admin views Stats page, malicious JS executes, CSRF token stolen, reverse shell launched as root. Netgate patched in 24 hours. Update now. #Pentesting #CyberSecurity https://t.co/kZZEiHnlXh

[NetSPI @NetSPI]

PATCH NOW! CVE-2026-75650 Adobe Commerce / Magento Open Source — Unauthenticated RCE

To learn more, please visit our website:
https://t.co/NMZLQLdur7

[NetSPI @NetSPI]

Big news: NetSPI and @synack are merging in an exclusive covered by @AxiosPro. Two of the strongest offensive security teams in the industry, combining human expertise with agentic AI for continuous testing and validation. Read the full story: https://t.co/WJfitfHaHJ

[NetSPI @NetSPI]

Azure has 897 built-in roles & 22,018 permissions. Reviewing by role misses things. Using a permissions-first approach, we found a built-in role that could escalate to Owner with zero ABAC constraints. Reported to MSRC, now fixed. https://t.co/le6Jr3dPKh

[NetSPI @NetSPI]

NetSPI & @synack are forming the industry’s leading offensive cybersecurity platform. Hear from NetSPI CEO Aaron Shilts on why ⬇️

Read why the future of offensive security isn't a choice between human & machine.

Read his latest: https://t.co/I52dMC8aXH

[NetSPI @NetSPI]

We are thrilled to announce that NetSPI and @synack have entered into a definitive agreement to merge & form the industry’s leading offensive cybersecurity platform.

Full announcement: https://t.co/O9Uy9csFQI

#NetSPI #Synack #OffensiveSecurity   #ContinuousTesting

[NetSPI @NetSPI]

Fal.Con 2026 kicks off today, and so does the conversation about what continuous pentesting actually looks like.

Most pentesting gives you a snapshot. Attackers don't work off snapshots.

Stop by booth #2203 to see it in action. https://t.co/fsEDryoMCw