You’ve got (Graph) mail.

Microsoft Graph Change Notifications can send an attacker a user’s Teams messages and email previews in seconds, and the data travels through Microsoft infrastructure. Learn more: ow.ly/Jru35103RKy

#MicrosoftGraph #M365Security #OffensiveSecurity

Governance moves in quarters. AI moves in seconds.

Attackers are testing your whole system. Are you?

Read The CISO’s Guide to the Evolving AI Threat Model to get started: ow.ly/R6a75103RXv

#AISecurity #CISO #NetSPI #Synack #OffensiveSecurity

Trick or treat? 🍬

Trick: a weak password that lets an attacker walk right in.
Treat: a pentest that finds it first.

Happy Halloween from NetSPI+Synack! 🎃

#Halloween #CyberSecurity #Pentesting #NetSPI #Synack #OffensiveSecurity

Attending Bsides NoVa 2026?

Scott Weston from NetSPI+Synack is speaking tomorrow at 3:00 PM in Room 121, and you won’t want to miss it!

Learn more:
ow.ly/MsSh5100EwE

#BsidesNoVa #GCP #NetSPI #Synack #OffensiveSecurity

For 20 years the CISO’s job was to identify risk and route it to whomever owned it.

AI breaks that model. Shadow AI and autonomous agents create attack surfaces that cross every team boundary.

Learn more: ow.ly/tuK850ZZQmN

#CybersecurityAwarenessMonth #CISO #AIpentesting

Self-hosted models: you gain control & lower costs. You also lose visibility.

Did you consciously make the control vs. visibility trade-off?

Dig deeper in our new eBook: ow.ly/hPgb5100Eui

#CybersecurityAwarenessMonth #AIpentesting

Pentesting Salesforce? Don’t stop at the endpoint. Start comparing paths. 🎯

Aussan Saad-Ali breaks down Authorization Differential Testing in our latest blog: ow.ly/6xo051011iN

#Salesforce #ExperienceCloud #ApplicationSecurity #NetSPI #Synack #OffensiveSecurity

AI agents are the new insider risk. Not because they’re trusted. Because they can be manipulated into crossing boundaries they’re supposed to respect.

Do you know what your agents can access? ow.ly/TA6b5100CWE

#CybersecurityAwarenessMonth #AIpentesting

AI security fails in the seams. Every team reviews its own work. Few review the chain of risk when systems interact. And new exploit paths emerge.

Get the full story in The CISO’s Guide to the Evolving AI Threat Model: ow.ly/gMOk50ZZPQu

#AIpentesting

AI has changed the attack. Your offensive security has to change with it.

That's why @NetSPI and @synack are now one: the speed and scale of agentic AI plus elite human expertise.

Learn more: ow.ly/3RWg50ZZQ17

#NetSPI #Synack #OffensiveSecurity #AgenticAI #Cybersecurity

PATCH NOW! CVE-2026-109618 and CVE-2026-109619 – PHP RCE

The PHP project has disclosed two critical vulnerabilities affecting all PHP installations that serve web requests.

Exploitation has been confirmed in the wild.

Learn more: ow.ly/9WP450ZZNFn

OCI blocked a User Manager from resetting an admin's password. It still let them mint API keys for that admin. Two authorization models, one gap, and a spot in Oracle's June 2026 CPU.

Here's how it worked: ow.ly/mO8T50ZXnNQ

#OCI #CloudSecurity

Shadow AI is the new shadow IT. Data leaves through prompts to models with broad access, not file transfers your DLP catches.

What's leaving your org through the gaps traditional controls missed? Let's talk: ow.ly/bBkr50ZVrEX

#CybersecurityAwarenessMonth #AIpentesting

NetSPI and Synack are now one.

Together we're building one platform for offensive security, pairing elite hackers with agentic AI at enterprise scale.

Continuous testing for a wider attack surface and human-validated findings you can act on.

#NetSPI+Synack #OffensiveSecurity

AI has changed the social engineering game. Attacks are more convincing. More personal. Harder to spot.

Your organization needs to be ready. Want to explore your social engineering strategy? Let's chat: ow.ly/wJQn50ZSZnv

#CybersecurityAwarenessMonth #AIpentesting

The industry is going autonomous. We're proving there's a better way. Find us at #InfoSecWorld Booth 809, Oct 12-14 in Orlando.

Threat landscape 2026: Your security playbook may already be out of date.

Before you can defend the new attack surface, you have to understand it.

We're digging into the changes this #CybersecurityAwarenessMonth. Reach out to test your AI: ow.ly/6Wi350ZSCkP

#AIpentesting

We're heading to InfoSec World 2026 in Orlando and we'd love to see you there. Find us at Booth 809, October 12-14 at the Gaylord Palms Resort, where we'll be talking about what it actually takes to find the vulnerabilities that put organizations at real risk.

See you there!

Heading to BSides Ahmedabad?

We'd love to connect with cybersecurity professionals who are passionate about offensive security, consulting, and making an impact. Come say hello and learn more about opportunities at NetSPI!

pfBlockerNG flaw (CVE-2026-78902): DNS request stores XSS in logs. Admin views Stats page, malicious JS executes, CSRF token stolen, reverse shell launched as root. Netgate patched in 24 hours. Update now. #Pentesting #CyberSecurity ow.ly/rLQn50ZQzVw