A hidden password. A custom Python tool. A path to Domain Admin. 🦞 We reverse engineered Lobster Data’s password obfuscation and built “Lobster Pot” to recover the credentials. Here’s how it unfolded: netragard.com/blog/reverse-e… #Cybersecurity #infosec

“Rogue AI” didn’t breach Australia’s Medicare portal. A poorly controlled agent did exactly what its human-built harness allowed. The attack was noisy, detectable, and preventable. Read why the model isn’t the only one to blame: netragard.com/blog/openai-au…

AI can help attackers move faster but passing an audit still doesn’t prove they can’t get in. After Adriel Desautels’s Business Insight feature, we examine the compliance gap, attack paths, and why testing real-world exposure matters. ntrgd.io/tp6  #Infosec

Different assets face different threats. Network, cloud, web apps, APIs, mobile, wireless, and physical environments each need testing built for their attack surface. Learn which penetration test fits your risk profile: netragard.com/blog/types-of-… #PenTesting #InfoSec

A penetration test report should be more than scanner output and CVSS scores. It should show how an attacker moved through your environment, what they could reach, and how to disrupt that path before damage occurs. Read our guide: netragard.com/blog/how-to-in… #InfoSec #Pentesting

Everyone’s calling the OpenAI / Hugging Face incident “rogue AI.” It wasn’t. It was a harness + containment failure. We break it down from a red team perspective in: “AI Didn’t Go Rogue: How OpenAI’s Harness Failed…” 🔗 ntrgd.io/07n

“Encrypted” credentials can still translate directly into compromise. In a FaciliWorks deployment, we reversed weak credential protection and pulled plaintext SQL + app creds. Blog with the details: netragard.com/blog/faciliwor…

There’s no “one-size-fits-all” penetration testing schedule. Annual + post-change testing is the baseline. The real value comes from layering deep manual tests with continuous automated coverage that matches your threat model. Full post: netragard.com/blog/penetrati… #infosec

The pentest industry optimized for price and polish, not real adversarial testing. On ESW #465, Netragard’s Adriel Desautels breaks down Fixing Pentesting, why scanners + AI aren’t enough, and how to demand real testing from vendors. 🎧 securityweekly.com/esw-465

If “more tools” and “bigger budgets” actually worked, we wouldn’t keep seeing the same breach stories every year. The problem isn’t just underfunding - it’s under-validating. 🔐New post: Big Security Budgets, Still Easy to Hack netragard.com/blog/big-secur…

Your pentest report with 200 vulnerabilities is worse than one with 12 findings tied to actual business impact. Volume ≠ value in cybersecurity. How to evaluate real pentest quality: netragard.com/blog/5-penetra…

If DORA and Threat‑Led Penetration Testing (TLPT) keep coming up in your meetings, but not everyone on the team has the same baseline, this high-level overview might help. 🔗 netragard.com/blog/dora-requ… #DORA #TLPT #SecurityTesting

Tools are great at quickly flagging common issues; humans are great at digging deeper, chaining vulnerabilities, and explaining what actually matters to your business. See why meaningful security needs expert‑led testing, not just automation: ntrgd.io/923 #InfoSec

Web app pentesting isn’t “run a scan.” It’s breaking your app the way attackers will: abusing auth flows, business logic, APIs, and JWTs to map a real Path to Compromise. Read how it actually works: ntrgd.io/2vn #AppSec #CyberSecurity #InfoSec

Mythos and the AI hype that will get you breached.  Read our latest post for a reality check on AI and penetration testing: ntrgd.io/hyp #infosec #cybersecurity #Mythos #PenTest #AI

Your network is the backbone of your business. If attackers own it, they own everything connected to it. New post: what network penetration testing is, when to use it, and how mapping the Path to Compromise helps you prioritize real risk. ntrgd.io/npt

GLBA now clearly ties compliance to how you test safeguards: annual penetration testing, bi-annual vuln assessments, and evidence those results drive fixes. 🔗Get the details and a 2026 checklist: ntrgd.io/glba

Most "penetration tests" today are just automated scans in disguise. AI & scanners can't find zero-days, test business logic, or map a real attack path. Compliance theater ≠ security. Know the difference before your next test. ntrgd.io/xui #InfoSec #PenTesting

Orgs still average 194 days to detect a breach. The tools aren’t the problem. The strategy is. Our new @SCMagazine article covers manual #pentesting, #honeypots in cybersecurity + credential canaries — real #threatintelligence, fraction of the cost. 🔗: ntrgd.io/wi7

New on @OTechTalks: Adriel Desautels on how AI actually changes offensive security, why most “AI pentesting” is just a dressed‑up vulnerability scanner, and why you can’t stop every breach - but you can limit the damage. 🔗ntrgd.io/ott #CyberSecurity #AI #PenTesting