Best Practices

Blog
Best Practices

CVE-2026-48907: Unauthenticated RCE in Joomla Content Editor

CVE-2026-48907: Unauthenticated RCE in the Joomla Content Editor extension

Lire plus ->

What to do when your CEO asks, ‘Are we exposed?’

Understanding whether your organisation is exposed to a new vulnerability requires two things: speed and validation

Lire plus ->

Testing AI-powered systems at scale via Bug Bounty, part 1: traditional infrastructure

Lire plus ->

Testing AI-powered systems at scale via Bug Bounty, part 1: traditional infrastructure

Lire plus ->

They said AI would kill Bug Bounty. The data says otherwise

Lire plus ->

Scaling Bug Bounty triage in the AI era

Lire plus ->

Scaling Bug Bounty triage in the AI era

Lire plus ->

AI-ACCELERATED OFFENSE: IMPLEMENTING ANTHROPIC’S GUIDANCE

Cybersecurity in a world of AI-accelerated offence: How YesWeHack implements Anthropic’s prescriptions

Lire plus ->

Cybersecurity in a world of AI-accelerated offence: How YesWeHack implements Anthropic’s prescriptions

Lire plus ->

COST, AI frontier models and more: A measured take on the future of security testing

Lire plus ->

COST, AI frontier models and more: A measured take on the future of security testing

Lire plus ->

Scaling Bug Bounty triage in the AI era

Lire plus ->

Is this vulnerability exploitable in YOUR environment?

Validation: Your path to overcoming alert fatigue in vulnerability management

Lire plus ->

Validation: Your path to overcoming alert fatigue in vulnerability management

Lire plus ->

YesWeHack is now an Offensive Security and Exposure Management platform

Map, test, fix, comply: unveiling our unified approach to offensive security

Lire plus ->

Map, test, fix, comply: unveiling our unified approach to offensive security

Lire plus ->

Continuous Pentesting with zero false positives: CONTINUOUS COVERAGE, 0 FALSE POSITIVES, FASTER REMEDIATION

Continuous Pentesting with zero false positives: a fully managed, platform-driven approach

Lire plus ->

Continuous Pentesting with zero false positives: a fully managed, platform-driven approach

Lire plus ->

Validation: Your path to overcoming alert fatigue in vulnerability management

Lire plus ->

Showing 9 of 68 articles.

Best Practices

CVE-2026-48907: Unauthenticated RCE in the Joomla Content Editor extension

What to do when your CEO asks, ‘Are we exposed?’

The prioritisation problem: dealing with a growing vulnerability backlog

They said AI would kill Bug Bounty. The data says otherwise

They said AI would kill Bug Bounty. The data says otherwise

CVE-2026-9082: PostgreSQL SQL Injection in Drupal

CVE-2026-9082: PostgreSQL SQL Injection in Drupal

Testing AI-powered systems at scale via Bug Bounty, part 1: traditional infrastructure

Testing AI-powered systems at scale via Bug Bounty, part 1: traditional infrastructure

They said AI would kill Bug Bounty. The data says otherwise

Scaling Bug Bounty triage in the AI era

Scaling Bug Bounty triage in the AI era

Cybersecurity in a world of AI-accelerated offence: How YesWeHack implements Anthropic’s prescriptions

Cybersecurity in a world of AI-accelerated offence: How YesWeHack implements Anthropic’s prescriptions

COST, AI frontier models and more: A measured take on the future of security testing

COST, AI frontier models and more: A measured take on the future of security testing

Scaling Bug Bounty triage in the AI era

Validation: Your path to overcoming alert fatigue in vulnerability management

Validation: Your path to overcoming alert fatigue in vulnerability management

Map, test, fix, comply: unveiling our unified approach to offensive security

Map, test, fix, comply: unveiling our unified approach to offensive security

Continuous Pentesting with zero false positives: a fully managed, platform-driven approach

Continuous Pentesting with zero false positives: a fully managed, platform-driven approach

Validation: Your path to overcoming alert fatigue in vulnerability management

Produits

Chercheurs

Ressources

A propos

Suivez-nous