🎤Come see Damian Goluch on November 17 at Advanced Threat Summit #ATS2026 as he presents AI on the Attacker's Side: Are We Ready for the Next Generation of CyberAttacks? This session will explore how AI can accelerate attacker operations. ow.ly/b5rF5103SkB
0
0
1
325
A single integer overflow in Windows HTTP.sys can lead to local privilege escalation.
In our latest Core Security blog, Cristian Rubio breaks down CVE-2026-62735 from buffer corruption and kernel memory access to SYSTEM token replacement.
coresecurity.com/blog/cve-2026-…
0
4
8
1,501
Hacktivity is bringing us to Budapest on October 21.
Prash Rai and Shaech Choudhury will be there to connect with attendees and talk red teaming, offensive security, and the latest challenges facing security teams.
You’ll find us next to EMIB. See you there!
0
0
2
564
SecTor 2026 starts tomorrow.
Catch Connor Johnson, Nick O’Hara, and Jasmine Zaker at booth #621 for offensive security conversations, demos, and time with the team.
0
0
0
556
Fortra Principal Exploit Writer Ricardo Narvaja analyzes CVE-2026-81963, a Windows CBS local privilege escalation vulnerability that could allow a controlled dpx.dll to load inside the SYSTEM-level TiWorker.exe process.

Read the technical analysis: ow.ly/K0Br50ZTarn
0
1
5
1,400
SecTor 2026 is coming up and Fortra will be in Toronto.
Connect with Connor Johnson, Nick O’Hara, and Jasmine Zaker at booth #621 for offensive security discussions and demos.
If you’re attending SecTor, stop by and see us!
0
1
1
653
Tomorrow at 44CON: Cobalt Strike Fundamentals.

Join Jasmine Zaker, Senior Solutions Engineer at Fortra, for a hands-on session covering command and control and code execution fundamentals in Cobalt Strike.

📍 Novotel London West
📅 September 17
0
0
0
709
LegacyHive goes beyond “Hive loaded.”
New research shows the public PoC can modify a protected administrator registry hive and influence a later High-integrity process. See what the testing revealed. coresecurity.com/blog/cve-2026-…
#WindowsSecurity #VulnerabilityResearch #CyberSecurity
0
1
3
1,609
Most systems you can pull offline to test. A hospital's, you can't. See how a #pentest continuously covers the patient portal, EHR, and connected medical devices without disrupting care, from recon to final report. coresecurity.com/resources/case…
0
2
4
819
For a retail bank, a #pentest does two jobs: surface what an attacker could exploit, and prove to PCI DSS and FFIEC auditors that you looked. See how a full engagement covers both, from recon to final report. Read the use case:
coresecurity.com/resources/case…
0
2
0
942
Get a detailed analysis of CVE-2026-35273, a serious vulnerability affecting Oracle PeopleSoft PeopleTools. Learn about how attackers can use this server-side forgery weakness and how the Fortra FIRE team created an exploit for Core Impact.
coresecurity.com/blog/analysis-…
0
2
14
1,634
What does a federal pen test look like? Get the full breakdown on how agencies use them to meet NIST/FISMA requirements, earn citizen trust, and harden defenses before an attacker finds the gaps:

coresecurity.com/resources/case…
0
0
2
761
Impacket 0.13.1 is live! This release includes new relay surfaces, stronger support for modern Windows and SQL Server environments, and a set of practical improvements across the examples scripts. Check out the blog post to get more details>

coresecurity.com/blog/whats-new…
0
63
168
23,631
Government security teams need an efficient, repeatable way to prove which security flaws, like misconfigurations and application vulnerabilities, pose real risk to operations and sensitive data. See how Core Impact can help. #PenTesting
👉coresecurity.com/industries/gov…
0
2
2
852
The Core Impact exploit library is always expanding, as our our expert researchers continue to expand exploit coverage across operating systems, enterprise applications, and network services. Check out our quarterly recap to find out the latest additions:
coresecurity.com/blog/core-impa…
0
0
1
709
Looking to upgrade your offensive security? Check into one of our Adversary Emulation Suites! Choose from our Red Teaming or Offensive Security Suites and discover the comfort of advanced tools and training. Learn more: coresecurity.com/products/bundl…

#redteaming #offsec
0
3
6
1,637
Headed to Black Hat Asia? We'll see you there! Stop by booth #515 to discuss all things #offsec and then head over to the business hall to check out a speaking session from@outflanknl expert @kyleavery ! @BlackHatEvents
0
0
2
461
Join @kyleavery from @OutflankNL at Black Hat Asia! Learn about methodologies to systematically design RL gyms tailored to security research. Get practical guidance on designing robust reward functions along with strategies for developing efficient training environments.
0
0
1
598
Sweet suite options for every occasion! Choose from our Red Teaming or Offensive Security Suites and find your flavor of adversary emulation. Learn more:

coresecurity.com/products/bundl…

#redteaming #offsec #suites
0
1
2
690
The theme of this year's CypherCon is "Remember when the internet was fun?" It did used to technically come with its own theme song. #dialup
We'll be in Milwaukee tomorrow to reminisce and look to the future. Come find us to chat about every era of #offsec. #CypherCon
0
0
0
402