🇭🇺 Hungarian security teams can now validate what they find with local support!

Pentest-Tools.com is now also available in Hungary through Maxvalor, a cybersecurity distributor based in Budapest known for bringing proven, practical solutions to their market.

🤝 This partnership means consultants and internal security teams in Hungary can access our product, all while backed by MaxValor’s local expertise.

To introduce the collaboration, Maxvalor is hosting a webinar (in Hungarian) tomorrow for their community, exploring how we help teams detect, validate, and report real vulnerabilities faster.

👉 Learn more and register to the webinar: https://www.linkedin.com/events/7390009358027395073/

#offensivesecurity #hungary #cybersecurity #vulnerabilitymanagement

Security researchers reveal vulnerability in the Anti-malware Security and Brute-force Firewall plugin for WordPress

Vulnerability:
CVE-2025-11705 - missing capability checks allowing an attacker to obtain the nonce

Impact: Allows a low-privileged user to read sensitive files and data

Remediation: Apply patch ASAP

#cybersecurity #vulnerabilitymanagement #Wordfence

https://www.bleepingcomputer.com/news/security/wordpress-security-plugin-exposes-private-data-to-site-subscribers/

WordPress security plugin exposes private data to site subscribers

The Anti-Malware Security and Brute-Force Firewall plugin for WordPress, installed on over 100,000 sites, has a vulnerability that allows subscribers to read any file on the server, potentially exposing private information.

BleepingComputer

OpenAI has launched Aardvark, an autonomous “agentic security researcher” powered by GPT-5.

It scans codebases for vulnerabilities, validates exploitability in sandboxed environments, and auto-generates potential patches.

Early reports show 10+ CVEs identified in open-source projects.

What’s your view - is AI-driven vulnerability research the future of cybersecurity or another layer of risk?

#CyberSecurity #OpenAI #GPT5 #Aardvark #Infosec #AI #DevSecOps #VulnerabilityManagement #MachineLearning #CodeSecurity #TechNews

👻 This Halloween, make sure *you* haunt vulnerabilities - not the other way around. 😈

October updates are here, and they’re a real treat for security teams.

Check out the new powers you can use to keep monsters out:
🕸️ Catch 2 new RCEs before attackers do (Fortra GoAnywhere & SolarWinds).
🎯 Validate #SessionReaper safely with Sniper: Auto-Exploiter.
☁️ Scan private Azure environments securely with our new VPN Agent.
📁 Download multiple reports in one go (no more manual horrors).
📚 See how we help MSPs, consultants & internal teams - and hear it from them if we do a good job (or not).

https://youtu.be/F8E5H0oO-pk

🍭 Check the changelog for the full basket: https://pentest-tools.com/change-log

#cybersecurity #vulnerabilitymanagement #offensivesecurity #azure

ICS[AP] Dashboards are updated with the 2 CISA Advisories released on 10/30/25:

ISO: 1 New
Hitachi Energy: 1 New
www.icsadvisoryproject.com

#icssecurity
#otsecurity
#vulnerabilitymanagement

ICS[AP] updated CISA ICS Advisories Master File for 10/30/25 & the following year's CSVs:

CISA_ICS_ADV_2025_10_30.csv

Available @ ICS[AP] GitHub: https://github.com/icsadvprj/ICS-Advisory-Project/tree/main

#opensource
#vulnerabilitymanagement
#icssecurity

GitHub - icsadvprj/ICS-Advisory-Project: The ICS Advisory Project is an open-source project to provide DHS CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis for the ICS/OT community. This is a community effort: please contribute to improve, expand, and maintain this data source.

The ICS Advisory Project is an open-source project to provide DHS CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis for the ICS/OT community. This is ...

GitHub

Federal agencies are racing to patch a VMware Tools flaw that lets hackers grab root access—Chinese state-backed group UNC5174 has been exploiting it. What does this mean for digital security? Read on for the full story.

https://thedefendopsdiaries.com/vmware-tools-flaw-cve-2025-41244-federal-agencies-scramble-to-patch-amid-active-exploitation/

#vmwaretools
#cve202541244
#cybersecurity
#cisa
#unc5174
#vulnerabilitymanagement
#patching
#infosec

🚨 Massive surge in automated #botnet activity
→ Targeting PHP servers, IoT devices & cloud gateways
→ Mirai, Gafgyt, Mozi exploiting known CVEs
→ AWS & Google Cloud used to hide source
Experts warn: even low-skilled attackers can now wreak havoc with public exploit kits.

💭 Thoughts on securing production environments from automated scans?
Follow @technadu for real-time #infosec updates & research drops.

#CyberSecurity #Botnet #PHP #IoTSecurity #CloudSecurity #ThreatIntel #DevSecOps #Malware #VulnerabilityManagement #DigitalDefense

Why Both Vulnerability Management (VM) and Continuous Pen Testing (CPT) Are Important for Strong Cybersecurity?

Discover why combining Vulnerability Management (VM) and Continuous Pen Testing (CPT) is essential for proactive, robust, and resilient cybersecurity defense.

Read more: https://bit.ly/4hA3e9X

#CyberSecurity #VulnerabilityManagement #PenTesting #ContinuousTesting #DataProtection #CyberResilience #ECSInfotech #ECS #CyberDefense

Canada’s critical systems are under digital siege. Hacktivists exploited everyday weaknesses—tinkering with water pressure, oil gauges, and even farm silos. How safe is our infrastructure when chaos can strike so easily?

https://thedefendopsdiaries.com/hacktivist-attacks-expose-vulnerabilities-in-canadas-critical-infrastructure/

#hacktivism
#criticalinfrastructure
#canadacybersecurity
#cyberattacks
#infosec
#infrastructuresecurity
#publicsafety
#vulnerabilitymanagement
#energysecurity
#agrosecurity