Guides pratiques sur le pentesting, la recherche de vulnérabilités et les outils de sécurité à base d’IA.
Les articles sont publiés en anglais et en portugais.
150 articles
SpaceX's all-stock acquisition of Anysphere reshapes the software supply chain at a global scale. Known CVEs, prompt injection vectors, developer telemetry risks, and a hardening checklist for every team running Cursor in production.
Three days after launch, the U.S. Commerce Department ordered Anthropic to disable Fable 5 and Mythos 5 worldwide. The jailbreak that triggered it, the export control precedent it set, and what security teams must do now.
A threat actor claims to hold a massive iFood customer database and is demanding payment to suppress it. The pay-or-leak model, why CPF and contact data is dangerous, and concrete steps for businesses and customers.
How attackers use AI across the kill chain, what new risks AI adoption creates, why traditional pentests fall short, and how pentesty.co tests against AI-driven TTPs.
Misconfigurations still dominate cloud incidents. Hybrid sprawl, IAM as a frontline, and why checklist security misses real attack paths. Plus how cloud-aware pentesting closes the gap.
White-on-white text in a labor court petition targeted Brazil's judicial AI (Galileu). The judge called it prompt injection, imposed a fine, and referred the lawyers for discipline , a field lesson in indirect injection for any org that feeds external documents to LLMs.
Five phases from access to leak, why exfiltration-only extortion scales, what makes detection hard, and concrete controls , from cloud permissions to continuous pentesting.
After ShinyHunters leaked internal analytics in April 2026, the case became a textbook argument against paying extortion: scope, optics, legal risk, and what to build before the deadline hits.
The bank confirmed unauthorized access to international-account data after a cyberattack. Why finance is targeted, what clients should do today, assume-breach design, LGPD/GDPR angles, and why compliance is not the same as security.