NopSec

Here at NopSec, we are constantly pushing the boundaries of vulnerability management and proactive threat defense. Today, we are thrilled to announce that NopSec has officially been accepted into Anthropic's Cyber Verification Program (CVP) through our us

CVE-2026-15409, also known as the SonicWall SMA1000 Server-Side Request Forgery (SSRF) flaw, is a critical security vulnerability affecting enterprise secure remote access gateways. The flaw was discovered by Adam Babis of SonicWall PSIRT. It was observed

What is CVE-2026-56164? CVE-2026-56164, also known as the Microsoft SharePoint Server Elevation of Privilege Vulnerability, is a critical zero-day privilege escalation flaw affecting self-hosted environments. Discovered during active attacks and patched i

If your firm runs Cisco Vulnerability Management, the platform most people still call Kenna, part of the decision has already been made for you. Cisco announced the end of the product in December 2025. The end-of-sale date was March 10, 2026. The last day

Every security team has a list. Things they would test if the time, the budget, or the tooling allowed. They do not. Four of the five items below are drawn from NopSec customer conversations. The fifth is the meta-question every CISO has asked. 1. The sha

In my twenty years in information security, I've witnessed the rise and fall of countless technologies. I've seen "silver bullets" come and go, but I have never encountered a technology that evolves with the blistering pace of Large Language Models (LLMs)

CVE-2021-26855 - the original ProxyLogon - sits in most external pen test scopes as a check-the-box concern. The scanner has it flagged on an Exchange server. CVSS 9.8. Your patch management dashboard shows it remediated. Done? Maybe. The scanner confirms

What makes a pen test report worth handing over to your auditor is the depth of the test underneath it. NopSec Adversarial Emulation was built to deliver that depth - the same five-phase methodology our team has run for eighteen years, executed on a diffe

You ran a pen test in November. The report landed in your inbox in December, polished and bound, with an executive summary you forwarded to your CFO and a 200-page appendix nobody opened. It is now May. In the months since that report arrived, your team p

A penetration test gives you a snapshot. A week of work, a PDF report, and a picture of your environment frozen in time. By the time your team reads the findings, something has already changed. A new application deployed. A firewall rule modified. A vulne