Pentera Logo Pentera Logo White
resources
Oct 2026
PHP2Shell: the expiry date on “too hard to exploit”
On 21 October 2026, PHP shipped emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619,...
Read now
“Pentera helps us prioritize what truly matters and gives us confidence we are covering our global environment continuously.”
“Seeing a domain admin account cracked in production changed how we view internal exposure.”
“Pentera helped us advance our red team and continuously improve penetration testing.”
“Pentera makes it easier to focus on what is truly exploitable instead of chasing long vulnerability lists.”
“In a complex, large-scale environment, Pentera delivers the speed and visibility security teams need.”
“Pentera amplified our team’s performance and delivered measurable value to upper management.”
"Pentera allows us to tailor testing to each service, reduce time and costs, and shift our focus from simply finding vulnerabilities to actively helping our teams fix them.”

Rubén Alonso | Head of Secure
Development Unit, Telefonica

“I don’t think we’d be able to advance our red team without Pentera. If you’re looking to improve penetration testing, I would definitely recommend it.”

Owen Fuller | Cybersecurity Engineering
Manager, Casey’s

Featured resources
Research
Oct 2026
PHP2Shell: the expiry date on “too hard to exploit”
Learn more
Featured resources
Research
Aug 2026
The Value Problem: What AI cannot decide for us
Pentera Labs Deep Dive - Part 4
Learn more
Featured resources
Research
Aug 2026
The Behavior Frontier: What AI cannot predict or verify
Pentera Labs Deep Dive - Part 2
Learn more
1 / 3

Resources Research

Solutions / Use cases
Content Types
Research
Oct 2026
PHP2Shell: the expiry date on “too hard to exploit”
Read more
Research
Aug 2026
The Value Problem: What AI cannot decide for us
Pentera Labs Deep Dive - Part 4
Read more
Research
Aug 2026
The Behavior Frontier: What AI cannot predict or verify
Pentera Labs Deep Dive - Part 2
Read more
Research
Aug 2026
The Information Ceiling: What AI cannot learn universally
Pentera Labs Deep Dives - Part 3
Read more
Research
Aug 2026
The Self-Reference Trap: What AI cannot say about itself
Pentera Labs Deep Dives - Part I
Read more
Research
Aug 2026
ShadowPanel: Pre-Auth RCE in CyberPanel
Chasing cPanel’s Shadow Through CVE-2026-41473 and CVE-2026-41472
Read more
Research
Jul 2026
AI Double Agent: Claude Just Got a New Voice
How we went from a compromised Claude account to remote code execution on a victim’s workstation
Read more
Research
Jun 2026
Looks Legit, Runs Malicious: The Quiet Trust Gap in AWS SSM
The risks behind AWS Systems Manager shared documents
Read more
Research
May 2026
Podman’s WebView Turned World-View
[CVE-2026-34045]
Unauthenticated Remote Denial-of-Service & Information Disclosure in Podman Desktop
Read more
Research
May 2026
Thinking Outside of the (In)Box: Getting Gmail’s ‘Stamp of Approval’ on Malicious Payloads
Uncovering integration flaws between Gmail and Google Drive that allow detected malicious payloads to be mislabeled as safe and bypass native security controls.
Read more
Research
Feb 2026
LOLBins Against the Machine: Reverse Engineering at Machine Speed
Read more
Research
Jan 2026
When the Lab Door Stays Open: Exposed Training Apps Exploited for Fortune 500 Cloud Breaches
‎
Read more