A single integer overflow in Windows HTTP.sys can lead to local privilege escalation. In our latest Core Security blog, Cristian Rubio breaks down CVE-2026-62735 from buffer corruption and kernel memory access to SYSTEM token replacement. coresecurity.com/blog/cve-20…

Hacktivity is bringing us to Budapest on October 21. Prash Rai and Shaech Choudhury will be there to connect with attendees and talk red teaming, offensive security, and the latest challenges facing security teams. You’ll find us next to EMIB. See you there!

SecTor 2026 starts tomorrow. Catch Connor Johnson, Nick O’Hara, and Jasmine Zaker at booth #621 for offensive security conversations, demos, and time with the team.

Fortra Principal Exploit Writer Ricardo Narvaja analyzes CVE-2026-81963, a Windows CBS local privilege escalation vulnerability that could allow a controlled dpx.dll to load inside the SYSTEM-level TiWorker.exe process. Read the technical analysis: ow.ly/K0Br50ZTarn

SecTor 2026 is coming up and Fortra will be in Toronto. Connect with Connor Johnson, Nick O’Hara, and Jasmine Zaker at booth #621 for offensive security discussions and demos. If you’re attending SecTor, stop by and see us!

Tomorrow at 44CON: Cobalt Strike Fundamentals. Join Jasmine Zaker, Senior Solutions Engineer at Fortra, for a hands-on session covering command and control and code execution fundamentals in Cobalt Strike. 📍 Novotel London West 📅 September 17

LegacyHive goes beyond “Hive loaded.” New research shows the public PoC can modify a protected administrator registry hive and influence a later High-integrity process. See what the testing revealed. coresecurity.com/blog/cve-20… #WindowsSecurity #VulnerabilityResearch #CyberSecurity

Most systems you can pull offline to test. A hospital's, you can't. See how a #pentest continuously covers the patient portal, EHR, and connected medical devices without disrupting care, from recon to final report. coresecurity.com/resources/c…

For a retail bank, a #pentest does two jobs: surface what an attacker could exploit, and prove to PCI DSS and FFIEC auditors that you looked. See how a full engagement covers both, from recon to final report. Read the use case: coresecurity.com/resources/c…

Get a detailed analysis of CVE-2026-35273, a serious vulnerability affecting Oracle PeopleSoft PeopleTools. Learn about how attackers can use this server-side forgery weakness and how the Fortra FIRE team created an exploit for Core Impact. coresecurity.com/blog/analys…

What does a federal pen test look like? Get the full breakdown on how agencies use them to meet NIST/FISMA requirements, earn citizen trust, and harden defenses before an attacker finds the gaps: coresecurity.com/resources/c…

Impacket 0.13.1 is live! This release includes new relay surfaces, stronger support for modern Windows and SQL Server environments, and a set of practical improvements across the examples scripts. Check out the blog post to get more details> coresecurity.com/blog/whats-…

Government security teams need an efficient, repeatable way to prove which security flaws, like misconfigurations and application vulnerabilities, pose real risk to operations and sensitive data. See how Core Impact can help. #PenTesting 👉coresecurity.com/industries/…

The Core Impact exploit library is always expanding, as our our expert researchers continue to expand exploit coverage across operating systems, enterprise applications, and network services. Check out our quarterly recap to find out the latest additions: coresecurity.com/blog/core-i…

Looking to upgrade your offensive security? Check into one of our Adversary Emulation Suites! Choose from our Red Teaming or Offensive Security Suites and discover the comfort of advanced tools and training. Learn more: coresecurity.com/products/bu… #redteaming #offsec

Headed to Black Hat Asia? We'll see you there! Stop by booth #515 to discuss all things #offsec and then head over to the business hall to check out a speaking session from@outflanknl expert @KyleAvery ! @blackhatevents

Join @kyleavery from @outflanknl at Black Hat Asia! Learn about methodologies to systematically design RL gyms tailored to security research. Get practical guidance on designing robust reward functions along with strategies for developing efficient training environments.

Sweet suite options for every occasion! Choose from our Red Teaming or Offensive Security Suites and find your flavor of adversary emulation. Learn more: coresecurity.com/products/bu… #redteaming #offsec #suites

The theme of this year's CypherCon is "Remember when the internet was fun?" It did used to technically come with its own theme song. #dialup We'll be in Milwaukee tomorrow to reminisce and look to the future. Come find us to chat about every era of #offsec. #CypherCon

Headed to @CypherCon next week? So are we. Come find us if you want to talk red teaming, pen testing, or general trends in offensive security! #cyphercon