Pentera Blog: Pentesting, Red Teaming & Security

Understanding VMware vCenter Privilege Escalation

Yuval Lazar

30 Sep 2021

Privilege escalation flaws in platforms like vCenter are especially dangerous because they can turn limited access into full control over critical infrastructure. In this case, a low-privileged foothold could be escalated into root access on a system that manages some of the organization’s most sensitive assets. That is why rapid...

Exploring the PrintNightmare Vulnerability

Pentera Team

09 Sep 2021

PrintNightmare showed how a common Windows service can become a high-impact attack path when exploited for remote code execution and privilege escalation. The real challenge was never just patching—it was understanding where the vulnerability could actually lead inside the environment. Security teams need continuous validation to prioritize exposure based on...

Understanding Top Exploited Vulnerabilities

Pentera Team

06 Aug 2021

Attackers do not need zero-days to create impact. Known vulnerabilities and common weaknesses are often enough. Security teams need to prioritize what is truly exploitable.

Welcome to Pentera’s Next Phase of Security

Amitai Ratzon

16 Jun 2021

Security teams cannot outspend today’s threat landscape with more tools alone. What matters is continuously validating defenses against real attacker behavior so organizations can reduce exposure and build resilience with confidence.

Must-Have Features for Security Validation Tools

Pentera Team

25 Apr 2021

Security validation only works if it is continuous, adversarial, and tied to real business risk. The right platform helps teams validate faster, prioritize smarter, and retest with confidence.

Password Security Tips: How to Create a Stronger Password

Aviv Cohen

22 Jan 2021

Weak and reused passwords still give attackers one of the easiest paths into an organization. Strong password hygiene, MFA, and continuous validation are essential to reducing that risk.

Cybersecurity Highlights of 2020

Pentera Team

14 Jan 2021

Cybersecurity moves fast, but the strongest programs keep learning, testing, and sharing what works. That mindset is what turns momentum into lasting resilience.

Lessons from the SolarWinds Supply Chain Attack

Aviv Cohen

30 Dec 2020

Source code repositories are crown-jewel assets, and a single gap can put the entire software supply chain at risk. Organizations need continuous validation of the attack paths that could lead attackers to development environments and IP.

Round B Funding: Achieving Our Vision

Arik Liberzon

09 Sep 2020

Cybersecurity is shifting from manual assessment to continuous, automated validation. The goal is simple: give organizations real proof that their defenses work against modern attacks.

CEO Insights on Round B and Beyond

Amitai Ratzon

09 Sep 2020

Security teams no longer want assumptions—they want proof. The growth of automated security validation reflects that shift, helping organizations continuously test resilience against real attacker behavior.

Best Practices for Cybersecurity Hygiene

Amitai Ratzon

08 Jun 2020

Cybersecurity is not about how many controls you deploy—it is about knowing they actually work. Continuous validation helps organizations catch the single weakness an attacker needs before it becomes a breach.

Ensuring Security Against Ransomware Threats

Aviv Cohen

01 Jun 2020

Ransomware resilience depends on whether your controls can stop the attack techniques that happen before encryption. Continuous validation helps security teams find those gaps early and reduce the chance of real disruption.