The Proactive Security Solution | Securing the most trusted brands on Earth #PenetrationTesting #proactivesecurity
Minneapolis, MN
Based in United States
- Tweets 6,509
- Following 534
- Followers 4,133
- Likes 1,057
AI agents are the new insider risk. Not because they’re trusted. Because they can be manipulated into crossing boundaries they’re supposed to respect.
Do you know what your agents can access? ow.ly/TA6b5100CWE
#CybersecurityAwarenessMonth #AIpentesting
129
AI security fails in the seams. Every team reviews its own work. Few review the chain of risk when systems interact. And new exploit paths emerge.
Get the full story in The CISO’s Guide to the Evolving AI Threat Model: ow.ly/gMOk50ZZPQu
#AIpentesting
1
155
AI has changed the attack. Your offensive security has to change with it.
That's why @NetSPI and @synack are now one: the speed and scale of agentic AI plus elite human expertise.
Learn more: ow.ly/3RWg50ZZQ17
#NetSPI #Synack #OffensiveSecurity #AgenticAI #Cybersecurity
1
125
OCI blocked a User Manager from resetting an admin's password. It still let them mint API keys for that admin. Two authorization models, one gap, and a spot in Oracle's June 2026 CPU.
Here's how it worked: ow.ly/mO8T50ZXnNQ
#OCI #CloudSecurity
1
3
164
@SynackRedTeam researcher d7x found a dangling CNAME leading to JavaScript injection and parent-domain cookies at risk across entire infrastructure.
As NetSPI and @synack come together, meet the experts behind both teams:
ow.ly/YwEu50ZWqqt
#OffensiveSecurity
3
205
Shadow AI is the new shadow IT. Data leaves through prompts to models with broad access, not file transfers your DLP catches.
What's leaving your org through the gaps traditional controls missed? Let's talk: ow.ly/bBkr50ZVrEX
#CybersecurityAwarenessMonth #AIpentesting
1
1
151
NetSPI and Synack are now one.
Together we're building one platform for offensive security, pairing elite hackers with agentic AI at enterprise scale.
Continuous testing for a wider attack surface and human-validated findings you can act on.
#NetSPI+Synack #OffensiveSecurity
1
635
AI has changed the social engineering game. Attacks are more convincing. More personal. Harder to spot.
Your organization needs to be ready. Want to explore your social engineering strategy? Let's chat: ow.ly/wJQn50ZSZnv
#CybersecurityAwarenessMonth #AIpentesting
156
The industry is going autonomous. We're proving there's a better way. Find us at #InfoSecWorld Booth 809, Oct 12-14 in Orlando.
2
145
Threat landscape 2026: Your security playbook may already be out of date.
Before you can defend the new attack surface, you have to understand it.
We're digging into the changes this #CybersecurityAwarenessMonth. Reach out to test your AI: ow.ly/6Wi350ZSCkP
#AIpentesting
149
We're heading to InfoSec World 2026 in Orlando and we'd love to see you there. Find us at Booth 809, October 12-14 at the Gaylord Palms Resort, where we'll be talking about what it actually takes to find the vulnerabilities that put organizations at real risk.
See you there!
1
145
pfBlockerNG flaw (CVE-2026-78902): DNS request stores XSS in logs. Admin views Stats page, malicious JS executes, CSRF token stolen, reverse shell launched as root. Netgate patched in 24 hours. Update now. #Pentesting #CyberSecurity ow.ly/rLQn50ZQzVw
2
6
412
Azure has 897 built-in roles & 22,018 permissions. Reviewing by role misses things. Using a permissions-first approach, we found a built-in role that could escalate to Owner with zero ABAC constraints. Reported to MSRC, now fixed. ow.ly/By6F50ZIUhv
9
19
1,126
NetSPI & @synack are forming the industry’s leading offensive cybersecurity platform. Hear from NetSPI CEO Aaron Shilts on why ⬇️
Read why the future of offensive security isn't a choice between human & machine.
Read his latest: ow.ly/Pp5t50ZIMs0
4
321
We are thrilled to announce that NetSPI and @synack have entered into a definitive agreement to merge & form the industry’s leading offensive cybersecurity platform.
Full announcement: ow.ly/FIOC50ZIt9o
#NetSPI #Synack #OffensiveSecurity #ContinuousTesting
1
8
24
4,303
Fal.Con 2026 kicks off today, and so does the conversation about what continuous pentesting actually looks like.
Most pentesting gives you a snapshot. Attackers don't work off snapshots.
Stop by booth #2203 to see it in action. ow.ly/3IhP50ZysJy
341
Heading to Fal.Con 2026? So are we.
Find NetSPI at booth #2203 for live demos of continuous pentesting in action and real conversations about offensive security.
See you next week! ow.ly/20H650ZysGr
1
203
AI pentesting benchmarks give you numbers, but none of them tell you what they mean. NetSPI built one and the reference point is humans.
EchoBench: ow.ly/GR9o50ZELb0
#AIpentesting #benchmark #EchoBench
3
8
2,684
BOFScale runs a full Tailscale daemon inside a C2 implant process. No driver. No service. No disk state. No child processes. Traffic blends in as standard WebSockets through CloudFront or Fastly. YARA rules and detection guidance included for defenders: ow.ly/cCz150ZBEZ3
3
13
599
Detection tells you something might be wrong. Pentesting tells you where you're actually exposed.
If you're at Fal.Con 2026, let's talk about the difference. Visit NetSPI at booth #2203. ow.ly/8C1V50ZysET
1
1
229
Your build pipeline trusts Artifactory. We found 4 chained bugs that let an unauthenticated attacker steal any artifact in it, no login required.
Auth bypass → missing authz → path traversal → router/Tomcat parsing mismatch = full artifact theft.
ow.ly/ipjI50ZzRyc
1
4
11
840
Black Hat is almost here! If you're going to be in Vegas, let's find time to chat.
Contact us to set up a meeting. ow.ly/6U1750Zmwp8
250
Designed to help your business validate every finding, test continuously, and fix what matters.
Our expanded offerings are designed with AI in mind. Built continuously, so you can have peace of mind.
learn more: ow.ly/Vur650ZtB1c
#ContinuousTesting #PTaaS
225
Third-party VM extensions are convenient. That's exactly why attackers like them too.
Part 2 of our Azure extension abuse series: how a rogue Salt Master can push root-level commands to your VMs, and the detection signals that give it away. ow.ly/l4sc50ZtBRR
3
8
487
Connect your AI to NetSPI’s validated pentest data. Auto-create tickets, enrich alerts, and update systems of record, without dumping raw findings.
Learn more: ow.ly/gfQb50Zo111
#ContinuousTesting #MCPintegrations
1
2
289
Join our team at #BlackHatUSA to talk about how modern continuous pentesting works.
Want to compare notes? Contact us and let's put time on the calendar. ow.ly/MgHc50Zmwo1
#BlackHatUSA #continuoustesting #pentesting
2
2
382
NetSPI's Continuous Web App Pentesting is here! Find authentication weaknesses, broken access controls, injection flaws, and API vulnerabilities before they become business problems.
Learn More→ow.ly/UIBW50Zo0PQ
#Pentesting#WebAppSecurity#ContinuousTesting
186
Extensions exist to make VM admin easier. They make an attacker's job easier too.
Our new blog breaks down how a rogue Chef server can hijack the extension framework on Azure VMs for silent code execution. Learn what to watch for in your logs: ow.ly/n7Ut50ZrlgW
4
12
568
CVE-2026-63030 & CVE-2026-60137 WordPress Core Pre-Authentication RCE. These vulnerabilities allow attackers to chain an unauthenticated WordPress REST API flaw with a SQL injection bug to fully take over sites running Core 6.9.0–6.9.4 or 7.0.0–7.0.1: ow.ly/jZHV50Zq9x8
13
35
5,610
AI security tools move fast, but without expert validation, false positives pile up and real threats get missed. NetSPI experts cut through the noise, confirm severity, and surface what needs action
Learn More→ow.ly/gK8v50Zo0Y5
#AISecurity#Cybersecurity#ContinuousTesting
1
263
New OSS tool: ADPathFinder joins SharpHound + OpenGraph (MSSQLHound, ConfigManBearPig) into one graph query. Cross-dataset AD/ADCS/MSSQL/SCCM paths become one finding, not a dozen leads to piece together. ESC1-9, SCCM checks, password audits w/ BH context. ow.ly/UB9u50ZnMbt
8
28
4,197
NetSPI's Continuous AI Penetration Testing gives security teams the metrics and trend data to benchmark risk over time.
Stay ahead of the game → ow.ly/QnzA50ZlOwQ
#AISecurity #Pentesting #ContinuousTesting
2
209
Our Continuous Penetration Testing platform now includes ongoing internal network visibility, helping your team stay ahead of misconfigurations, privilege escalation, and unauthorized access paths.
Read More: ow.ly/ye1v50Zm6cH
#ContinuousTesting #NetworkSecurity
1
230
NetSPI has expanded its continuous pen testing offerings to include web application, AI/ML, AI findings validation and internal network.
Learn more → ow.ly/RC8x50ZlOqs
#ContinuousTesting #PTaaS
1
230
Thousands of AI-generated findings won't tell you what risks are real.
Our new Continuous AI Findings Validation service does. Experts verify severity and cut the noise so your team acts on what matters.
Read more: ow.ly/zvOJ50Zloun
#ContinuousTesting #PTaaS
168
We're expanding our continuous pentesting platform to include: Continuous Web App Testing, Continuous AI Testing, Continuous Internal Testing, and Continuous AI Findings Validation.
More visibility. Less noise.
Read more: ow.ly/lP2b50ZlouG
#ContinuousTesting #PTaaS
152
See you at TROOPERS26 on June 25 at 2:15pm in Track 2!
NetSPI’s @kfosaaen and Thomas Elling will present: Modern Adventures in Azure Privilege Escalation. Don’t miss the talk to get an overview of Azure attack paths.
Learn more: ow.ly/vYoH50Z8RA8
4
655
In his latest research, NetSPI's Thomas Byrne breaks down how Nested App Authentication (NAA) flows can be abused to bypass Microsoft Entra Conditional Access Policies entirely using the authentication flow working exactly as designed.
Read more: ow.ly/TWtx50ZffNj
3
18
7,601
NetSPI's Karl Fosaaen & Thomas Elling are taking the stage at #TROOPERS26.
Topic: Modern Adventures in Azure Privilege Escalation
Initial access. Escalation. Lateral movement. Persistence. And a new resource for exploiting Azure attack paths: ow.ly/B0t050Z8RxM
1
1
1
446
Journalist pretext + ProtonMail + Evilginx AITM = C-suite exec forwarding your phish to two vendors.
Rafael Seferyan, Principal Tech Lead at NetSPI wrote a blog detailing the whole thing: ow.ly/o3At50Ze190
1
3
314
PATCH NOW! CVE-2026-20253 Splunk Enterprise Unauthenticated Arbitrary File Operations / RCE. This vulnerability allows any network-reachable attacker to create or overwrite files on the server without credentials. Immediate action is necessary: ow.ly/ijNi50ZbY5n
1
7
15
2,407
MFA was a strong control in the environment. It was also the key to breaking it.
Legacy NIS + Duo Auth Proxy + a RADIUS shared secret = full domain compromise.
New technical blog walks the full attack chain from unauthenticated Apache NiFi RCE to DCSync: ow.ly/1qCO50Z92mM
4
5
619
Your external attack surface changes every time you deploy something new. Attackers notice. NetSPI's continuous external pentesting identifies and validates real risk across your internet-facing assets as they change, not months later: ow.ly/uNMQ50Z1aL1
142
Critical Drupal + PostgreSQL SQL injection critical vulnerability. Unauthenticated attackers can run arbitrary SQL queries, leading to full database compromise or RCE. Actively exploited in the wild.
Patch now. ow.ly/NuyZ50Z4sCw
#Drupal #CVE #proactivesecurity #PatchNow
1
282
Finding vulnerabilities is only half the battle. Getting them to the right team fast enough is where most programs break down.
NetSPI's agentic MCP integrations automate that handoff, no manual data entry required.
Learn more: ow.ly/3aik50Z1aHr
134
UEFI flaws hide before your OS even loads. NetSPI's Larry 'Patch' Trowell built a blueprint for finding them without physical hardware. Read more: ow.ly/nzg250Z2Rfr
1
2
245
New Hack Responsibly podcast episode 🎧
@kfosaaen talks to James Albany. Topics: continuous testing, AI in pentesting, overlooked attack surfaces, and breaking into a data center with a credit card.
Listen here: ow.ly/jQzZ50Z2Gtb
#podcast #hackresponsibly
3
157
Cloud misconfigurations don't wait for your next scheduled test. Neither should your security program. NetSPI's continuous cloud pentesting catches excessive permissions, exposed services, and misconfigurations as they emerge: ow.ly/rLsE50Z1aCa
#CloudSecurity #Pentesting
1
1
130
Continuous pentesting keeps visibility current as your attack surface evolves. NetSPI finds real risk as it appears, not months later.
Learn more: ow.ly/sN9n50YZ85s
#continuouspentesting #proactivesecurity
137
Automation creates noise. Point-in-time testing leaves gaps. The answer is continuous, human-validated security testing.
NetSPI's Continuous Pentesting finds and validates real risk as your environment changes. Read more: ow.ly/FYCZ50YY9Es
1
1
140
NetSPI launches AI-powered Continuous Pentesting.
Your attack surface never stops evolving. Your security program shouldn't either.
Human-led. AI-accelerated. Continuously validated. Learn more: ow.ly/ixUJ50YY9uK
2
1
205
#WorldPasswordDay: even mature orgs face credential exposure through third-party breaches, password reuse, or social engineering. Prevention matters. NetSPI's dark web monitoring helps you find out faster. ow.ly/vAHB50YW3hh
1
1
170
PATCH NOW! CVE-2026-41940 | cPanel & WHM Authentication Bypass. This allows a remote, unauthenticated attacker to gain root-level admin access by injecting arbitrary values into a server-side session file, effectively bypassing all credential checks. ow.ly/59Sm50YTxlu
356
PATCH NOW! CVE-2026-35616 & CVE-2026-21643 – Fortinet FortiClientEMS. These vulnerabilities have been exploited in the wild & allow unauthenticated attackers to bypass API authentication & execute unauthorized code or commands.
Learn more: ow.ly/aWWQ50YF1Lh
1
1
3
577
On March 24, 2026, a severe compromise was identified in LiteLLM, a widely adopted open-source LLM proxy framework. A compromise at this centralized layer exposes your entire LLM provider surface area. Read more: ow.ly/ZOkV50YyoBB
2
4
812
Reactive security can’t keep up with AI and cloud sprawl. We’re proud to be recognized among Notable Vendors in Forrester’s Proactive Security Platforms Landscape, Q1 2026! See why continuous validation is the new standard for modern #security: netspi.com/newsroom/press-re…
1
93
PATCH NOW! CVE-2025-26399 SolarWinds Web Help Desk
This critical vulnerability allows unauthenticated remote attackers to execute arbitrary code on affected systems.
To learn more, please visit our website: ow.ly/xnzV50Ys5Wh
1
295
Web applications are often the first point of contact for users, and attackers alike.
Learn more in our Application Penetration Testing eBook to protect against threats like injection attacks, broken access controls, and business logic flaws: ow.ly/BT3u50Yen4F
1
97
PATCH NOW! CVE-2026-20127 - Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass
This flaw allows unauthenticated, remote attackers to gain administrative privileges on affected systems.
To learn more, please visit our website: ow.ly/PQvL50YnemK
340
We look forward to connecting with fellow leaders at FS-ISAC Americas Spring Summit:
📅 March 1-4, 2026
📍 Orlando, FL
Visit us at the summit: ow.ly/7y2F50YbL7L
#FSISAC #FinancialInnovation #RiskManagement #StrategicSecurity #CISO
120
NetSPI is sponsoring the FS-ISAC Americas Summit in March!
Connect with us in Orlando, FL: ow.ly/wTgU50YbL9O
#FSISAC #FinancialInnovation #RiskManagement #StrategicSecurity #CISO
119
NetSPI is proud to be a bronze sponsor at FS-ISAC Americas Spring Summit March 1-4, 2026. Visit us in Orlando, FL: ow.ly/vauJ50YbL1o
#FSISAC #FinancialInnovation #RiskManagement #StrategicSecurity #CISO
131
NetSPI Principal Consultant Ceri Coburn identified a high-risk vulnerability (CVE-2025-67813) within Quest Desktop Authority that could allow attackers to execute remote code with SYSTEM privileges.
Get the details: ow.ly/Zpgg50Y7Cg1
4
7
1,060
PATCH NOW! CVE-2026-1281 & CVE-2026-1340 – Ivanti Endpoint Manager Mobile (EPMM)
Both vulnerabilities have been exploited in the wild and allow unauthenticated remote threat actors to compromise EPMM appliances.
To learn more, please visit our website: ow.ly/vF6J50Y6Ehu
1
2
425
PATCH NOW ⚠️
CVE-20260-21962 - Oracle WebLogic Server Proxy Plugin
This is a critical vulnerability that impacts key components of Fusion Middleware allowing for portenial unauthenticated remote access to backend systems.
Learn more: ow.ly/5Cb350Y1tW4
535
Heading to Chaos Communication Congress in Germany? Don't miss Sam Beaumont and Larry Trowell where they’ll demonstrate affordable, home-built lased-based hardware hacking techniques.
Attend the talk on Tuesday, December 30 at 12:50pm: ow.ly/7jv550XLrA1 #39c3
1
2
4
740
Join NetSPI's Sam. Beaumont & Larry "Patch" Trowell at Chaos Communication Congress (CCC) in Hamburg, Germany on Tuesday, Dec. 30.
Learn how laser (or light) based hardware attacks are achievable using low-cost technology: ow.ly/7jv550XLrA1 #39c3
2
3
703
The Hack Responsibly Podcast is back with an exciting new episode!
Join host @kfosaaen as he chats with @mainframed767, Director of Mainframe Pentesting at NetSPI. This episode is packed with insights, stories, and inspiration.
🎧 Listen now: ow.ly/uZiH50XJP38
2
3
718
NetSPI experts share insights on the trends shaping the future of cybersecurity and how organizations can adapt to stay ahead.
Read the full blog: ow.ly/laaS50XAkYE
150
How is the AI threat landscape evolving? In the latest Hack Responsibly podcast episode, NetSPI's @kfosaaen sits down with Kim Wiles, Director of AI Penetration Testing, to discuss the critical security challenges facing large language models (LLMs). piped.video/mPyALe68uvg
2
2
586
Are you based in Portland, OR and looking to get started with your pentesting career? Join NetSPI U to get hands-on penetration testing experience and learn about NetSPI’s Proactive Security approach. Read our full job description and apply today: ow.ly/EOpi50X6bxJ
214
🎙️ Welcome to the Hack Responsibly Podcast!
A new series hosted by VP Research @kfosaaen.
First guest: Director of Social Engineering Patrick Sayler discusses real-world stories, MFA fatigue, and device code phishing.
Listen to the full episode! ow.ly/Sw0B50Xkk5p
1
2
241
Immerse yourself in the pentesting world and join NetSPI University – a 6-month training opportunity in Minneapolis. Apply today to get hands-on experience with penetration tests & the opportunity to work on web application customer projects! ow.ly/zMh050X6bwr
176
Read our new blog post written by @kfosaaen: Decrypting VM Extension Settings with Azure WireServer ow.ly/aAJN50Xh55x
Karl dives into leveraging the Azure WireServer service to decrypt protected settings, offering scripts for both Windows & Linux VMs.
3
4
290
Think bug bounty programs are just about software vulnerabilities? Think again. ow.ly/nOfM50X9heP
150
Want to start your career in #pentesting? Join NetSPI U to get hands-on penetration testing experience and work on web application projects. Apply today: ow.ly/5AKA50X6btW
#Portland #Oregon #careers
1
2
435
Apply to become part of NetSPI University in Minneapolis, MN – a 6-month in-person training opportunity to get hands-on penetration testing experience and work on web application pentesting projects: ow.ly/Hkri50X6brr
196
Join NetSPI University to get hands-on penetration testing experience and learn about NetSPI’s Proactive Security approach. Read our full job description and apply today: ow.ly/TAQv50X6bjb
#NetSPIUniversity #pentesting #career #hiring
184
From phishing emails to impersonation tactics, attackers are constantly finding new ways to exploit human behavior.
Read about real-world social engineering stories that highlight the tactics used by threat actors. ow.ly/Lw1F50X5AmO
#cybersecurityawarenessmonth
1
227
Can AI write secure code? We put it to the test.
Our Director of Technical Enablement, Mel Miller, shares the results of our latest experiment: building & testing a web application coded almost exclusively by AI.
Read the full analysis here: ow.ly/kWwQ50WQM6l
2
1
2
374
Today we celebrate International Women in Cyber Day—honoring innovators, leaders, & trailblazers driving cybersecurity forward. Thank you to the women protecting our digital world & inspiring the next generation of talent.
#womenincyber #internationalwomenincyberday #pentesting
1
260
New research from NetSPI from @kfosaaen & Thomas Elling reveals how Azure tenant IDs leaked through Entra ID authentication maps cloud resources to their owners.
Check out the new ATEAM tool for automated discovery.
Full technical breakdown: ow.ly/UOcu50WFzto
3
14
1,183
New Azure App Services security research by NetSPI's @kfosaaen
TL;DR: Users w/ Contributor permissions can extract & decrypt authentication tokens to impersonate other users accessing the application.
Read more: ow.ly/vQAO50WuqpU
#Azure #CloudSecurity
2
11
840