Most tools added AI and called it a feature. We kept asking whether it actually makes results more reliable.

Session two of Office Hours is recorded. Jan covers the ML classifier, the authentication layer, and the MCP integration that won't act without your explicit go-ahead.

45 minutes. Q&A included.

Recording: https://www.youtube.com/watch?v=abGruzf2pPk

#penetrationtesting #offensivesecurity #vulnerabilitymanagement

Frida 17.9.5 Released

https://frida.re/news/2026/05/02/frida-17-9-5-released/

Read on HackerWorkspace: https://hackerworkspace.com/article/frida-17-9-5-released

#cybersecurity #exploit #penetrationtesting

#ParentingInPalestine #FWakeParentingIn
#Invincible #FWakeInvincible
#BulletProofMetaphors #PenetrationTesting
#FWakePenetration #PenetrationTestingMetaphors
#FWakeRabbitTest #RabbitTest /\

$1,000,000,000.00 vs. $10.00 #Testing #FWakeTesting tools #TestingTools /\

#RFP35 https://old.reddit.com/r/invinciblememes/comments/1t1uxs0/is_rudy_a_fraud/

Teachable to YouTube - Here's Why I Made the Switch

https://www.youtube.com/watch?v=IeoMGk3hN0Q

#cybersecurity #vulnerability #penetrationtesting

HackRF PortaPack Splash Screen Without Removing the SD Card

https://www.youtube.com/watch?v=KZ6xrDWykf4

#cybersecurity #iotsecurity #penetrationtesting

CVE-2026-40321: stored XSS in DNN (DotNetNuke) prior to v10.2.2 chains to full RCE.

Any authenticated user can upload a crafted SVG with embedded JavaScript. If a power user opens it, the payload calls DNN's own config endpoint to drop an ASPX backdoor in the server root.

One file. One click. Full RCE. CVSS 8.1, patched, fully documented.

Write-up + PoC payloads: https://pentest-tools.com/blog/dotnetnuke-xss-to-rce

More research from our team: https://pentest-tools.com/research

#offensivesecurity #penetrationtesting #infosec

AI Hacking Tools Are Coming Soon… NEW Neoconda AI Integration Details!

https://www.youtube.com/watch?v=89DTERT6IvI

#cybersecurity #aisecurity #penetrationtesting

Compliance evidence trails don't build themselves in the two weeks before an audit.
Jan Pedersen walked through how continuous scanning handles that automatically: scheduled scans, before-and-after remediation proof, reports for both auditors and engineers.

Recording: https://www.youtube.com/watch?v=HpuXoV_ngRQ
Tomorrow: session two on AI, accuracy and what's next.
1️⃣ 3:00 PM Bucharest / 1:00 PM London / 8:00 AM New York
👉 https://zoom.us/webinar/register/WN_uMAjbUwRSqCj1knLCcOCTg
2️⃣ 7:00 PM Bucharest / 5:00 PM London / 12:00 PM New York / 9:00 AM Los Angeles
👉 https://zoom.us/webinar/register/WN_xp1ewHcMQVKVoZe4bAEIxw
#infosec #compliance #penetrationtesting

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side

https://thehackernews.com/2026/04/mythos-changed-math-on-vulnerability.html

Read on HackerWorkspace: https://hackerworkspace.com/article/mythos-changed-the-math-on-vulnerability-discovery-most-teams-aren-t-ready-for-the-remediation-side

#aisecurity #vulnerability #penetrationtesting

Sicherheitslücke in Geutebrück-Kameras: Befehlsinjektion ermöglichte Root-Zugriff über Weboberfläche

Über mindestens 13 CGI-Endpunkte der Weboberfläche ließen sich nach erfolgreicher Authentifizierung beliebige Systembefehle mit Root-Rechten einschleusen. Ausgangspunkt war eine einzige Fehlermeldung des Unix-Werkzeugs sed.

https://www.all-about-security.de/sicherheitsluecke-in-geutebrueck-kameras-befehlsinjektion-ermoeglichte-root-zugriff-ueber-weboberflaeche/

#penetrationtesting #unix #root #rootrechte #Authentifizierung