Editor's picks
Most read this quarter
Topics
Browse by topic
AI Pen Testing
Agentic and autonomous pentesting across web, API and mobile; benchmarks and evidence.
All AI Pen Testing posts (56) →
AI Pen Testing
PHP2Shell Was Not the First. The Next One Is Already in Someone’s Queue
AI Pen Testing
API Penetration Testing in 2026: Why Scanners Miss What Attackers Exploit
AI Pen Testing
What Recent Autonomous Hacking Incidents Mean for Web App and API Security
AI Pen Testing
Old Web Bugs, New Blast Radius: What Vegas 2026 Means for API Testing
AI Red Teaming
Agentic red teaming, attack chaining and Continuous Automated Red Teaming (CART).
All AI Red Teaming posts (33) →
AI Red Teaming
The Top 25 Red Teaming Tools in 2026 (Updated List)
AI Red Teaming
Continuous Automated Red Teaming (CART): How It Works and Why Annual Red Teams Are Obsolete in 2026
AI Pen Testing
How to Run Continuous Penetration Testing Without Hiring a Red Team
AI Pen Testing
The AI Shift in Offensive Security: From Manual to Autonomous Agents
Exposure Validation
Adversarial exposure validation, proof of exploit and vulnerability validation.
All Exposure Validation posts (8) →
Exposure Validation
Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 19 Oct to 25 Oct 2026
Breach Intelligence (CVE)
Weekly Report: New Hacking Techniques and Critical CVEs 19 Oct to 25 Oct 2026
Exposure Validation
Adversarial Exposure Validation (AEV): The 2026 Guide for CISOs Who Are Done With Theoretical Risk
Exposure Validation
MITRE ATT&CK in 2026: How to Use It to Validate Your Security Controls
CTEM
Running a continuous threat exposure management program: scoping to mobilisation.
All CTEM posts (3) →Attack Surface
ASM, EASM, discovery, shadow IT and the assets nobody listed.
All Attack Surface posts (69) →
Attack Surface
Why Traditional ASM and CTEM Tools Will Fail in the Next 12 Months
Attack Surface
Nine Programs, Nine Organizations, One Forgotten DNS Record: How FireCompass’s Agentic AI Penetration Testing Found Subdomain Takeover Risk Across Five Cloud and CDN Providers
Attack Surface
Top 10 Reconnaissance Tools for Web Application Pentesting in 2026
Attack Surface
Supply Chain Cyber Risk in 2026: How to Assess and Continuously Monitor Third-Party Exposure
Securing AI
LLM red teaming, AI application security and safe autonomy for agents.
All Securing AI posts (17) →Compliance and Regulation
SEBI, RBI, IRDAI, PCI DSS, SOC 2, ISO 27001 and DORA, and what each asks of your testing program.
All Compliance and Regulation posts (11) →
AI Pen Testing
PCI DSS 4.0 Penetration Testing Requirements in 2026: What You Need to Know
Compliance and Regulation
SEBI AI Guidelines: What 10k+ Financial Entities Must Do
Compliance and Regulation
IRDAI 2026 Cybersecurity Guidelines: What Changed? How To Respond?
AI Red Teaming
What are the SEBI guidelines on Red Teaming & Continuous Automated Red Teaming (CART)?
Threat Research
Original research from the FireCompass agents and researchers: exploit write-ups, attack chains and disclosures.
All Threat Research posts (48) →
Exposure Validation
Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 19 Oct to 25 Oct 2026
Breach Intelligence (CVE)
Weekly Report: New Hacking Techniques and Critical CVEs 19 Oct to 25 Oct 2026
AI Pen Testing
PHP2Shell Was Not the First. The Next One Is Already in Someone’s Queue
Breach Intelligence (CVE)
PHP2Shell (CVE-2026-109618, CVE-2026-109619): The Complete Guide to Exposure, Exploitation, Remediation, and Verification
Breach Intelligence (CVE)
Weekly intelligence on new hacking techniques, critical CVEs and the breaches that matter.
All Breach Intelligence (CVE) posts (226) →
Breach Intelligence (CVE)
Weekly Report: New Hacking Techniques and Critical CVEs 19 Oct to 25 Oct 2026
AI Pen Testing
PHP2Shell Was Not the First. The Next One Is Already in Someone’s Queue
Breach Intelligence (CVE)
PHP2Shell (CVE-2026-109618, CVE-2026-109619): The Complete Guide to Exposure, Exploitation, Remediation, and Verification
Breach Intelligence (CVE)
Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 12 Oct to 18 Oct 2026
Analyst Recognition
What Gartner and other analysts say about the category, and what it means for a security leader.
All Analyst Recognition posts (9) →
Analyst Recognition
GigaOm Attack Surface Management(ASM) Radar 2025 Top Leaders
Analyst Recognition
GigaOm Features FireCompass As A Leader In Attack Surface Management 2023 Radar Report
Analyst Recognition
How Manufacturing Industries Can Benefit From External Attack Surface Management (EASM)
Analyst Recognition
Forrester Features FireCompass In The External Attack Surface Management Landscape
Strategy and Programs
How security leaders run AEV, CTEM and continuous testing programs: metrics, budgets and board framing.
All Strategy and Programs posts (29) →
Exposure Validation
Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 19 Oct to 25 Oct 2026
Events
Field Notes from Black Hat and DEF CON 2026: What Changed in the Attacker Playbook?
AI Pen Testing
Implementing Agentic AI Pentesting While Managing Risk and Cost
Strategy and Programs
How to Build a Continuous Offensive Security Testing Program in 2026
Buyer's Guides & Comparisons
Tool lists, vendor comparisons, pricing guides and the questions to ask before you sign.
All Buyer's Guides & Comparisons posts (30) →
AI Pen Testing
Implementing Agentic AI Pentesting While Managing Risk and Cost
AI Pen Testing
The Top Open-Source AI Pentesting Tools in 2026, and What Each One Leaves You to Build
AI Red Teaming
The Top 25 Red Teaming Tools in 2026 (Updated List)
Attack Surface
Top 10 Reconnaissance Tools for Web Application Pentesting in 2026
Fundamentals
Definitions, comparisons and explainers for the terms security teams use every day.
All Fundamentals posts (55) →
AI Pen Testing
Agentic AI Pentesting vs Human Pentesting: Comparison in 2026
AI Pen Testing
API Penetration Testing: What It Is, How It Works, and How to Do It Continuously
Exposure Validation
Adversarial Exposure Validation (AEV): The 2026 Guide for CISOs Who Are Done With Theoretical Risk
Exposure Validation
MITRE ATT&CK in 2026: How to Use It to Validate Your Security Controls
Company News
Press releases, funding, partnerships, patents and product updates from FireCompass.
All Company News posts (15) →
AI Pen Testing
Press Release: AI Pentest Agent Reaches HackerOne’s Top 3 on a $5,000-a-Month Budget
AI Pen Testing
Press Release: FireCompass Launches AI Agents for Autonomous Web and API Penetration Testing With Freemium Access
Company News
FireCompass Raises $20 Million to Scale Offensive Security with Agentic AI
Company News
What’s New at FireCompass: CISO Dashboard, 799 New Vulnerabilities, 50+ Attack Trees
Events
Keynotes, panels, fireside chats, webinars and conference field notes.
All Events posts (15) →
Events
Field Notes from Black Hat and DEF CON 2026: What Changed in the Attacker Playbook?
AI Pen Testing
Old Web Bugs, New Blast Radius: What Vegas 2026 Means for API Testing
Events
FC & ECC Panel – The Mythos Threat Is Real: How CISOs Should Respond
AI Pen Testing
AI in Offensive Security: Redefining Pen Testing and Red Teaming
Stay current
Get new posts by email
One email a week, no more. Attack Lab write-ups, Fundamentals explainers and the weekly breach and CVE intelligence.