Pentera Blog: Pentesting, Red Teaming & Security

Comparing On-premise vs. Cloud-Based Penetration Testing Strategies

Kyle Bobak

08 Oct 2024

Cloud and on-prem environments expose different risks, but neither is secure by default. What matters is validating how attackers could actually move through each environment and across the gaps between them. Effective security testing must reflect that reality with continuous, environment-specific validation.

Why Pay a Pentester? The Shift to Automated Penetration Testing

Aviv Cohen

08 Oct 2024

Penetration testing should no longer be limited by cost, speed, or scope. Automated pentesting gives security teams the ability to validate more of their environment, more often, with far greater efficiency. That shift is redefining security testing from a periodic exercise into a continuous capability.

How Susceptible are Your Linux Machines to a Ransomware Attack?

Alon Segal

01 Oct 2024

Linux ransomware is rising because attackers are targeting the systems organizations depend on most. That makes continuous validation of Linux exposures just as critical as Windows. Resilience starts by testing the attack paths adversaries are already using.

Ransomware Readiness Strategies: How to Protect Your Organization

Pentera Team

01 Oct 2024

Ransomware readiness is about proving your defenses work. Tools alone are not enough. Continuous validation is what turns preparation into real resilience.

Emulating Cryptomining Attacks: A Deep Dive into Resource Draining with GPU Programming

Pentera Team

11 Sep 2024

Cryptojacking quietly turns stolen access into profit. It drains resources, raises costs, and impacts performance without immediate visibility. Continuous validation helps organizations catch and stop it sooner.

Aligning Security Testing with IT Infrastructure Changes

Dana Meschiany

09 Sep 2024

When security testing does not keep pace with IT change, risk accumulates in the gaps. Continuous security validation helps organizations keep defenses aligned with a constantly evolving environment. That shift makes pentesting more than a compliance task—it becomes a strategic part of managing cyber risk.

Meeting the DORA Mandate: Approaching ICT Risk Management with Pentera

Assaf Regev

05 Sep 2024

DORA raises the bar from compliance to operational resilience. Financial institutions must be able to prove they can identify risk, test controls continuously, and respond to incidents without delay. The organizations that do this well will not just meet regulatory expectations - they will be better prepared for real-world disruption.

Identity Breaches in 2024 – An Ounce of Hygiene is Worth a Pound of Technology

Jason Mar-Tang

20 Aug 2024

Compromised credentials still give attackers one of the easiest ways in. Strong identity hygiene means enforcing MFA, limiting privilege, and validating access continuously. That is how organizations reduce identity-driven risk.

The Kubernetes Attack Surface

Nir Chako

08 Aug 2024

Kubernetes security breaks down when risky roles, service accounts, and pod permissions are left unchecked. Attackers can use those gaps to move laterally and escalate privileges fast. Continuous validation helps teams find and fix that exposure before it becomes cluster-wide compromise.

Blueprint for Success: How to Implement the CTEM Framework

Michal Brenner

18 Jul 2024

CTEM helps organizations move from reacting to isolated findings to continuously understanding and reducing real exposure across the attack surface. The key is not just finding assets or vulnerabilities, but validating which exposures attackers can actually exploit and which ones matter most to the business. That is what turns exposure...

Surviving LockBit Lessons from a Ransomware Attack

Zachary Lewis

09 Jul 2024

Ransomware resilience is built long before the attack begins. What matters most is not just having backups or tools, but knowing they will hold up under real attack conditions. Organizations that test recovery paths, validate critical controls, and plan for operational disruption are the ones best positioned to withstand and...

Return of the RCE: Addressing the regreSSHion Vulnerability – CVE-2024-6387

Or Smolnik

05 Jul 2024

“RegreSSHion is a reminder that even well-known, previously fixed vulnerabilities can return and create serious exposure. When a widely deployed service like OpenSSH is affected, external-facing assets become especially high risk. Organizations need to patch quickly, reduce unnecessary SSH exposure, and continuously validate that critical access paths are truly secure.