Team NetSPI
More By Team NetSPI
Apache HTTP Server: Critical RCE Vulnerability ( CVE-2026-119618 )
The Apache Software Foundation has disclosed a critical vulnerability, CVE-2026-119618, in the HTTP/2 module (mod_http2) of Apache HTTP Server.
PHP2Shell Unauthenticated RCE on PHP: CVE-2026-109618 & CVE-2026-109619
The PHP project has disclosed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting all PHP installations that serve web requests. Both vulnerabilities carry a CVSS 4.0 score of 9.2 (Critical).
The CISO’s Guide to the Evolving AI Threat Model
Get a clear picture of how AI threats are entering your organization. Our experts share how models can be manipulated, how to identify what’s exposed, what’s exploitable, and what to fix first.
NetSPI and Synack to Merge, Forming A Leading Offensive Cybersecurity Platform
September 2, 2026 – NetSPI®, a global leader in modern penetration testing, and Synack, a global leader in continuous security validation, today announced a definitive agreement to merge and form the industry’s leading offensive cybersecurity platform. The combination brings together two of the premier expert-led offensive security organizations and integrates agentic AI across the combined platform to deliver continuous testing and validation at enterprise scale.
Fal.Con 2026
Join NetSPI at CrowdStrike's Fal.Con 2026, at Mandalay Bay Resort, in Las Vegas. Find our team of proactive security experts at NetSPI's booth #2203
NetSPI Expands Suite of AI-Powered Continuous Pentesting Services as Organizational Attack Surfaces Grow
NetSPI expands suite of Human-Led, AI-Powered Continuous Pentesting Services, including a first-of-its-kind AI Findings Validation service, as well as continuous testing for web applications and internal networks.
Confidence Over Noise: Introducing Continuous AI Findings Validation
NetSPI's Continuous AI Findings Validation service applies expert human judgment to AI-generated security findings, eliminating false positives and verifying severity so security teams can trust, prioritize, and act with confidence instead of chasing noise.
Microsoft is working on a patch for ‘YellowKey’ attack on BitLocker, offers temporary fix
CSO Online interviewed NetSPI's VP of Research, Karl Fosaaen, for a May 20, 2026 article about how Microsoft is working on a patch for a zero-day vulnerability dubbed "YellowKey" (CVE-2026-45585).
Internal Network Pentesting
Secure your internal networks against evolving threats with actionable insights discovered through expert-led penetration testing.
EPISODE 06 – Testing at the Speed of Hackers
In this episode of the Hack Responsibly podcast, NetSPI VP of Research Karl Fosaaen connects with James Albany, Senior Director of Network Pentesting.
Gartner Report for Penetration Testing as a Service (PTaaS)
Download the full Gartner® report for comprehensive insights on PTaaS trends, benefits, and implementation considerations.
Scaling Security with Modern PTaaS: Gartner Report Insights
Discover Gartner® 2025 insights on how PTaaS scales security with continuous validation, automation, and real-time remediation, and how NetSPI can help.