Blog
  • Home
  • Login
  • Try It
CVE-2016-3081: Exploited Apache Struts RCE Puts PCI Scans at Risk

CVE-2016-3081: Exploited Apache Struts RCE Puts PCI Scans at Risk

Threat Advisories • 4 min read
12 Questions to Ask a Penetration Testing Company Before You Hire Them

12 Questions to Ask a Penetration Testing Company Before You Hire Them

Penetration Testing • 8 min read
Choosing the right scope for your next pentest

Choosing the right scope for your next pentest

Penetration Testing • 5 min read
The Q4 Compliance Rush: An MSP Checklist for Meeting Client Deadlines

The Q4 Compliance Rush: An MSP Checklist for Meeting Client Deadlines

3 min read
CVE-2026-85706: Patch GitLab’s Actively Exploited File-Read Flaw

CVE-2026-85706: Patch GitLab’s Actively Exploited File-Read Flaw

Threat Advisories • 3 min read
CVE-2026-55040: SharePoint Authentication Bypass Added to CISA KEV After Public Exploit

CVE-2026-55040: SharePoint Authentication Bypass Added to CISA KEV After Public Exploit

Threat Advisories • 6 min read
Connecting Your External Attack Surface to Your Full Exposure Picture

Connecting Your External Attack Surface to Your Full Exposure Picture

Announcements • 4 min read
CVE-2026-20253: Splunk Enterprise Flaw Lets Unauthenticated Attackers Write Files

CVE-2026-20253: Splunk Enterprise Flaw Lets Unauthenticated Attackers Write Files

Threat Advisories • 5 min read
CVE-2026-20262: Actively Exploited Cisco SD-WAN Manager File Write Flaw

CVE-2026-20262: Actively Exploited Cisco SD-WAN Manager File Write Flaw

Threat Advisories • 5 min read
CVE-2026-10520: Critical Ivanti Sentry Flaw Gives Attackers Root Access

CVE-2026-10520: Critical Ivanti Sentry Flaw Gives Attackers Root Access

Threat Advisories • 6 min read
CVE-2026-50751: Critical Check Point VPN Authentication Bypass Under Active Exploitation

CVE-2026-50751: Critical Check Point VPN Authentication Bypass Under Active Exploitation

Threat Advisories • 5 min read
Quarterly PCI Scans: Building a Cadence That Doesn't Surprise You on Day 89

Quarterly PCI Scans: Building a Cadence That Doesn't Surprise You on Day 89

PCI Compliance • 5 min read
CVE-2026-45247: Critical Mirasvit Cache Warmer Flaw Puts Magento Stores at Risk

CVE-2026-45247: Critical Mirasvit Cache Warmer Flaw Puts Magento Stores at Risk

Threat Advisories • 6 min read
Two Years Running: What Winning MSP Today Product of the Year Means to Our Partners

Two Years Running: What Winning MSP Today Product of the Year Means to Our Partners

Partners • 4 min read
Halo Security Wins 2026 MSP Today Product of the Year Award

Halo Security Wins 2026 MSP Today Product of the Year Award

Announcements • 2 min read
CVE-2026-48172: Critical LiteSpeed cPanel Plugin Flaw Under Active Exploitation

CVE-2026-48172: Critical LiteSpeed cPanel Plugin Flaw Under Active Exploitation

Threat Advisories • 7 min read
Older Posts →

Penetration Testing
  • Penetration Testing
  • Web Application
  • Mobile Application
  • API
  • External Network
  • Internal Network
  • Wireless
  • Compliance
  • Social Engineering
  • Red Teaming
  • Scope a Pentest
Platform
  • Attack Surface Management
  • Vulnerability Scanning
  • PCI Compliance
  • Dark Web Monitoring
  • Use Cases
  • Features
  • Integrations
  • Plans & Pricing
  • Free Trial
Resources
  • Resources
  • Docs
  • Support
  • Blog
  • PCI Glossary
  • CVE Advisories
  • Guides
  • Site Scan
Company
  • About Us
  • Customers
  • News
  • Partner List
  • Become a Partner
  • System Status
  • Trust Center
  • Contact
  • Leader on G2
  • Users Love Us on G2
  • BBB Accredited Business, A+ rating
  • CREST Pathway+ organisation
  • MSP Today Product of the Year 2026
  • AICPA SOC

A CREST Pathway+ organisation has signed Codes of Conduct and Ethics and self-assessed against CREST’s standards. A CREST Pathway+ organisation is aiming for but is not a CREST Accredited Member company.

© 2026 Halo Security
  • Terms
  • Privacy
  • Cookie Preferences