Scroll down for the latest penetration testing news and information.
Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.
Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally
Avada Builder flaws allowed file read and SQL injection on one million WordPress sites
Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately
CrackArmor AppArmor flaws let local Linux users gain root, break containers and enable DoS attacks
DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data
Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools
