Karl Fosaaen Guest Blogs for Secure360
NetSPI Senior Security Consultant Karl Fosaaen recently wrote a couple of guest blogs for the upcoming Secure360 2014 Conference blog, you can find them here:
- 5 Must-Have Web Application Penetration Testing Strategies
- 5 Must-Have Network Penetration Testing Strategies
If you enjoy these, be sure to make it out to Secure360 this year as Karl will be presenting as well as co-instructing a full-day class on “An Introduction to Penetration Testing” along with NetSPI Principal Consultant Scott Sutherland.
To learn more about Secure360, Karl’s presentations, or information on how to sign up for the training please visit the pages below:
Explore More Blog Posts
You’ve Got (Graph) Mail – Leveraging Microsoft Graph API Change Notifications for Data Exfiltration
Discover how threat actors leverage Microsoft Graph API Change Notifications and Rich Notifications for stealthy post-exploitation data exfiltration of Outlook emails and Teams messages.
Authorization Differential Testing in Salesforce
NetSPI Salesforce expert Aussan explores how holding identity steady across UI API, GraphQL, and custom @AuraEnabled Apex methods reveals hidden authorization gaps.
PHP2Shell Unauthenticated RCE on PHP: CVE-2026-109618 & CVE-2026-109619
The PHP project has disclosed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting all PHP installations that serve web requests. Both vulnerabilities carry a CVSS 4.0 score of 9.2 (Critical).