Scroll down for the latest penetration testing news and information.
Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.
Fortra claims the number of unauthorized Cobalt Strike licenses in the wild fell 80% over two years
Elementor plugin flaw puts 2m WordPress websites at risk, allowing XSS attacks via malicious scripts
Critical Fancy Product Designer plugin flaws risk remote code execution and SQL injection attacks on WordPress sites
Five LPE flaws in Ubuntu’s needrestart utility enable attackers to gain root access in versions prior to 3.8
CVE-2024-38173 is a medium severity RCE flaw in Microsoft Outlook, similar to CVE-2024-30103
Microsoft 365's anti-phishing tip can be hidden via CSS, as shown by Certitude's Moody and Ettlinger
