While traditional penetration testing (pen testing) has long been the go-to method for identifying security gaps in a organization’s network and web application, a new approach has emerged: ...

When automated pen-testing tools appeared a few years ago they prompted an interesting question: How close are they to replacing human pen testers? While the short answer was "not that close — yet," ...

Speaking during the virtual (ISC) 2 Security Congress Alex Haynes, CISO at CDL, explored the various pen-testing approaches available to organizations and outlined how companies can determine which is ...

Simply using point-in-time penetration testing to identify vulnerabilities gives hackers the upper hand says Tom Eston. Here he explains the advantages of moving pen testing towards ‘offensive ...

Businesses typically try to take steps to defend their digital networks, but many organizations discover their weak points the hard way: when they get slammed with a full-court cyber-attack. The ...

Last week, one of the partners in my firm (Bishop Fox) said something that rang true: "If you want to be a real penetration tester, you have to live it." In a similar vein, Paul Graham says, "To do ...

Cybersecurity funding is falling after enjoying impressive heights in the last few years. According to Crunchbase, VC financing for security declined to just over $1.6 billion in Q2 2023, marking a 63 ...

Core Security Technologies CTO Ivan Arce lists 12 reasons Fortify Co-Founder and Chief Scientist Brian Chess is wrong about 2009 marking the end of pen testing Each year, during the sprint to the ...