Pentera Logo Pentera Logo White
resources
Oct 2026
PHP2Shell: the expiry date on “too hard to exploit”
On 21 October 2026, PHP shipped emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619,...
Read now
“Pentera helps us prioritize what truly matters and gives us confidence we are covering our global environment continuously.”
“Seeing a domain admin account cracked in production changed how we view internal exposure.”
“Pentera helped us advance our red team and continuously improve penetration testing.”
“Pentera makes it easier to focus on what is truly exploitable instead of chasing long vulnerability lists.”
“In a complex, large-scale environment, Pentera delivers the speed and visibility security teams need.”
“Pentera amplified our team’s performance and delivered measurable value to upper management.”
"Pentera allows us to tailor testing to each service, reduce time and costs, and shift our focus from simply finding vulnerabilities to actively helping our teams fix them.”

Rubén Alonso | Head of Secure
Development Unit, Telefonica

“I don’t think we’d be able to advance our red team without Pentera. If you’re looking to improve penetration testing, I would definitely recommend it.”

Owen Fuller | Cybersecurity Engineering
Manager, Casey’s

Blog
PHP2Shell: the expiry date on “too hard to exploit”
Learn more
Blog
ECB AI Cybersecurity Action Plan: What Banks Must Submit by October 31
Learn more
Blog
Pentera Named Among the Most Promising Solutions in Wavestone’s Landscape of Agentic AI Pentesting
Learn more
1/3

Blog

PHP2Shell: the expiry date on “too hard to exploit”
Erez Yalon
22 Oct 2026
On 21 October 2026, PHP shipped emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are CVSS v4.0 9.2.
Read more
ECB AI Cybersecurity Action Plan: What Banks Must Submit by October 31
Assaf Regev
20 Oct 2026
ECB AI Cybersecurity Action Plan: What Banks Must Submit by October 31 How to build a supervisor-ready AI cybersecurity action plan before the October 31, 2026 deadline On July 7, 2026, the European Central Bank sent a letter (SSM-2026-0301) to the CEOs of every significant institution under its direct supervision....
Read more
Pentera Named Among the Most Promising Solutions in Wavestone’s Landscape of Agentic AI Pentesting
Pentera Team
06 Oct 2026
Wavestone, one of Europe’s leading independent consulting firms, published a landscape review of 69 agentic AI solutions for penetration testing on September 14, 2026. The research helps red teamers, professional pentesters and security auditors decide which AI tools to use. Read it in French or English. Wavestone’s radar of AI...
Read more
Have You Heard the News? Pentera Has Been Recognized as a 2026 Customers’ Choice for Adversarial Exposure Validation on Gartner® Peer Insights™
Pentera Team
03 Sep 2026
Customers gave Pentera an overall rating of 4.8 out of 5, and 94% said they would recommend it as of June 2026. Pentera has now been recognized as a Customers’ Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for Adversarial Exposure Validation. We feel that is worth...
Read more
Attackers Don’t Respect Vendor Boundaries
Erez Yalon
30 Jul 2026
Why should you?
Read more
Recorded Future and Pentera
Doron Naim
22 Jul 2026
Pioneering Automated Threat-Led Validation
Read more
Exposure Management Used to Be Baggage Claim.
Nimrod Lavi
17 Jul 2026
It's Becoming Air Traffic Control.
Read more
Not All Attack Graphs Are Created Equal
Noam Hirsch
06 Jul 2026
How active validation changes exposure management
Read more
Same Field, Same Players, But the Game Has Changed
Erez Yalon
25 Jun 2026
Frontier AI models are now a commodity, available to attackers and defenders alike. The real edge isn't the model. It's context, and only one side of this fight has it.
Read more
Five Eyes warned AI will upend cybersecurity in months. The same afternoon, OpenAI showed why.
Erez Yalon
24 Jun 2026
Five Eyes warned that the timeline is months, not years. The harder truth buried in that statement: a finding is no longer a signal. Proof it's reachable and exploitable is.
Read more
When Someone Pulls the AI Plug
Erez Yalon
17 Jun 2026
On June 9, Anthropic launched its shiniest model yet. On June 12, the US government made them switch it off. For everyone. Worldwide.If you build security products for a living, that three-day arc should ruin your week, not just Anthropic's.
Read more
AI-Driven Exploit Generation: What Mythos Means for Cyber Defense
Shlomo Ben-Yosef
28 Apr 2026
Anthropic’s Mythos marks a turning point: AI can now autonomously turn disclosed vulnerabilities into real-world exploit chains in hours, collapsing the window defenders once relied on. For security teams, “hard to exploit” and “no known exploit” are no longer meaningful comfort signals. The new defense standard is continuous, adversarial validation...
Read more