NetSPI

The Proactive Security Solution | Securing the most trusted brands on Earth

#PenetrationTesting #proactivesecurity

[NetSPI @NetSPI]

We're heading to InfoSec World 2026 in Orlando and we'd love to see you there. Find us at Booth 809, October 12-14 at the Gaylord Palms Resort, where we'll be talking about what it actually takes to find the vulnerabilities that put organizations at real risk.

See you there!

[NetSPI @NetSPI]

Heading to BSides Ahmedabad?

We'd love to connect with cybersecurity professionals who are passionate about offensive security, consulting, and making an impact. Come say hello and learn more about opportunities at NetSPI!

[NetSPI @NetSPI]

pfBlockerNG flaw (CVE-2026-78902): DNS request stores XSS in logs. Admin views Stats page, malicious JS executes, CSRF token stolen, reverse shell launched as root. Netgate patched in 24 hours. Update now. #Pentesting #CyberSecurity https://t.co/kZZEiHnlXh

[NetSPI @NetSPI]

PATCH NOW! CVE-2026-75650 Adobe Commerce / Magento Open Source — Unauthenticated RCE

To learn more, please visit our website:
https://t.co/NMZLQLdur7

[NetSPI @NetSPI]

Big news: NetSPI and @synack are merging in an exclusive covered by @AxiosPro. Two of the strongest offensive security teams in the industry, combining human expertise with agentic AI for continuous testing and validation. Read the full story: https://t.co/WJfitfHaHJ

[NetSPI @NetSPI]

Azure has 897 built-in roles & 22,018 permissions. Reviewing by role misses things. Using a permissions-first approach, we found a built-in role that could escalate to Owner with zero ABAC constraints. Reported to MSRC, now fixed. https://t.co/le6Jr3dPKh

[NetSPI @NetSPI]

NetSPI & @synack are forming the industry’s leading offensive cybersecurity platform. Hear from NetSPI CEO Aaron Shilts on why ⬇️

Read why the future of offensive security isn't a choice between human & machine.

Read his latest: https://t.co/I52dMC8aXH

[NetSPI @NetSPI]

We are thrilled to announce that NetSPI and @synack have entered into a definitive agreement to merge & form the industry’s leading offensive cybersecurity platform.

Full announcement: https://t.co/O9Uy9csFQI

#NetSPI #Synack #OffensiveSecurity   #ContinuousTesting

[NetSPI @NetSPI]

Fal.Con 2026 kicks off today, and so does the conversation about what continuous pentesting actually looks like.

Most pentesting gives you a snapshot. Attackers don't work off snapshots.

Stop by booth #2203 to see it in action. https://t.co/fsEDryoMCw

[NetSPI @NetSPI]

Heading to Fal.Con 2026? So are we.

Find NetSPI at booth #2203 for live demos of continuous pentesting in action and real conversations about offensive security.

See you next week! https://t.co/qq23KGy4bY

[NetSPI @NetSPI]

AI pentesting benchmarks give you numbers, but none of them tell you what they mean. NetSPI built one and the reference point is humans.

EchoBench: https://t.co/WlyZmgjbI8

#AIpentesting #benchmark #EchoBench

[NetSPI @NetSPI]

BOFScale runs a full Tailscale daemon inside a C2 implant process. No driver. No service. No disk state. No child processes. Traffic blends in as standard WebSockets through CloudFront or Fastly. YARA rules and detection guidance included for defenders: https://t.co/TfuD3rfsTi

[NetSPI @NetSPI]

Detection tells you something might be wrong. Pentesting tells you where you're actually exposed.

If you're at Fal.Con 2026, let's talk about the difference. Visit NetSPI at booth #2203. https://t.co/21hKXjPX4J

[NetSPI @NetSPI]

Your build pipeline trusts Artifactory. We found 4 chained bugs that let an unauthenticated attacker steal any artifact in it, no login required.

Auth bypass → missing authz → path traversal → router/Tomcat parsing mismatch = full artifact theft.

https://t.co/8GXLy6dYoG

[NetSPI @NetSPI]

Black Hat is almost here! If you're going to be in Vegas, let's find time to chat.

Contact us to set up a meeting. https://t.co/NDs2u88HQB

[NetSPI @NetSPI]

Designed to help your business validate every finding, test continuously, and fix what matters.

Our expanded offerings are designed with AI in mind. Built continuously, so you can have peace of mind.

learn more: https://t.co/xixxv6yPC3

#ContinuousTesting #PTaaS

[NetSPI @NetSPI]

Third-party VM extensions are convenient. That's exactly why attackers like them too.

Part 2 of our Azure extension abuse series: how a rogue Salt Master can push root-level commands to your VMs, and the detection signals that give it away. https://t.co/Lp9MHd5rrs

[NetSPI @NetSPI]

Connect your AI to NetSPI’s validated pentest data. Auto-create tickets, enrich alerts, and update systems of record, without dumping raw findings.

Learn more: https://t.co/ldd21cewhI

#ContinuousTesting #MCPintegrations

[NetSPI @NetSPI]

Join our team at #BlackHatUSA to talk about how modern continuous pentesting works.

Want to compare notes? Contact us and let's put time on the calendar. https://t.co/X4hjy2mtRj

#BlackHatUSA #continuoustesting #pentesting

[NetSPI @NetSPI]

NetSPI's Continuous Web App Pentesting is here! Find authentication weaknesses, broken access controls, injection flaws, and API vulnerabilities before they become business problems.

Learn More→https://t.co/Z5Fos31NC3

#Pentesting#WebAppSecurity#ContinuousTesting