Tag: Pentesters

Discover how Komori, a century-old printing giant, is leading the charge in cybersecurity innovation by adapting to internet-connected risks and utilizing advanced solutions like NodeZero to safeguard their legacy.

As cities expand with smart technologies to enhance infrastructure, robust cybersecurity is crucial. Discover how continuous assessments with NodeZero keep urban operations safe and efficient.

Secure your Kubernetes clusters with NodeZero’s autonomous pentesting – proactive, continuous testing to identify vulnerabilities before attackers do.

Explore offensive security gaps and solutions with Horizon3.ai’s Phillip Wylie. Learn strategies to enhance vulnerability assessments and security impact.

Listen to Horizon3.ai’s Phil Wylie and Foresite experts to explore the financial and security benefits of autonomous pentesting and continuous validation.

As enterprises continue to transition on-premises infrastructure and information systems to the cloud, hybrid cloud systems have emerged as a vital solution, balancing the benefits of both environments to optimize performance, scalability, and ease of change on users...

On July 10, 2024, Palo Alto released a security advisory for CVE-2024-5910, a vulnerability which allowed attackers to remotely reset the Expedition application admin credentials. While we had never heard of Expedition application before, it's advertised as: The...

On August 13, 2024, SolarWinds released a security advisory for Web Help Desk (WHD) that detailed a deserialization remote code execution vulnerability. This vulnerability, CVE-2024-28986, was added to CISA's Known Exploited Vulnerability (KEV) catalog two days later...

Business Wire 11/12/2024 Horizon3.ai, a global leader in autonomous security solutions, proudly announces the release of NodeZero™ Kubernetes Pentesting, a powerful new capability available to all NodeZero users. Designed to deploy directly within Kubernetes clusters,...

Business Wire 10/30/2024 Horizon3.ai, a leader in autonomous security solutions, is honored to announce its second consecutive inclusion in the Fortune Cyber 60, presented by Lightspeed. This recognition underscores the company's continued innovation and influence in...

Business Wire 09/25/2024 Horizon3.ai, a global leader in autonomous security solutions, today announced the appointment of Keith Poyser as Vice President for EMEA. Poyser brings more than 25 years of experience in driving sales growth, strategy, and business...

As cities expand with smart technologies to enhance infrastructure, robust cybersecurity is crucial. Discover how continuous assessments with NodeZero keep urban operations safe and efficient.

Secure your Kubernetes clusters with NodeZero’s autonomous pentesting – proactive, continuous testing to identify vulnerabilities before attackers do.

Explore offensive security gaps and solutions with Horizon3.ai’s Phillip Wylie. Learn strategies to enhance vulnerability assessments and security impact.

Listen to Horizon3.ai’s Phil Wylie and Foresite experts to explore the financial and security benefits of autonomous pentesting and continuous validation.

Introduction The recent VMware VMSA describes four new CVEs affecting VMware vRealize Log Insight, reported by ZDI. Three of these CVEs can be combined to give an attacker remote code execution as root. This vulnerability is exploitable in the default configuration for VMware vRealize Log Insight. We have successfully reproduced this exploit and would like to provide the technical details...

Winner, Pwn2Own Toronto 2022

After compromising a Windows domain controller, one of the actions that NodeZero, our autonomous pentest product, performs is dumping all domain user password hashes from the Active Directory database. This is a common attacker technique, and the resulting dump is highly valuable to attackers. But did you know that this data is a great source of insight for defenders too?

Verifying credentialed access to your hybrid cloud sprawl matters more than ever. See example attack paths to understand risks to AWS cloud.

One of the most effective techniques NodeZero employs for initial access is password spray. It’s a primitive technique, basically guessing passwords, and when it works it feels like magic. Yet we see it work time and time again in various pentests conducted by NodeZero. In this post we’ll talk about what password spray is and walk through how NodeZero weaponizes...

Which is more valuable to you; the ability to identify a problem, or the ability to solve the problem? There is a plethora of vulnerability scanning tools that do a decent job identifying vulnerabilities. Unfortunately, those tools rarely discern the possible from the exploitable.

Security Strategies

Industry Insights

Attack Research

Attack Content

Security Strategies

Industry Insights

Attack Research

Attack Content

Pentesters

Filters

How can NodeZero help you?