A blind SQL injection in Control Web Panel’s userRes parameter lets attackers with a guessable username gain MySQL root access, enabling full server takeover via a planted PHP webshell.
Read more about Emerging Threat: (CVE-2026-57517) Control Web Panel Remote Code Execution via SQL InjectionCyCognito Blog
Your source for exposure management research, product news, and security insights.
Search the Blog
Two pre-authentication vulnerabilities in BeyondTrust Remote Support and Privileged Remote Access let attackers bypass authentication entirely and gain unauthorized, potentially privileged, access to affected appliances.
Read more about Emerging Threat: (CVE-2026-40138 & CVE-2026-40139) BeyondTrust Remote Support Authentication BypassA missing authentication check in Apache Tomcat lets attackers bypass GSSAPI-bound directory logins, gaining unauthorized access to any application behind that Realm.
Read more about Emerging Threat: (CVE-2026-55957) Apache Tomcat Authentication Bypass via JNDIRealm GSSAPI Binds
Today we’re announcing continuous AI pentesting. It runs always-on across your full external surface, using AI agents to spot overlooked weaknesses, reason through context, and chain the multi-step moves a skilled adversary would. It has already uncovered real exposures in live environments. Here’s how it works.
Read more about Continuous AI Pentesting: What We’re Building, and What It’s Already FindingMost organisations don’t know what’s on their external attack surface. Richard Stiennon joins our CEO Rob Gurzeev to unpack why attackers always find what defenders miss, and how AI is making that gap harder to close.
Read more about Thinking Like an Attacker: How to Strengthen Modern Cyber Defence Strategies
Star Wars as a security case study: the Empire’s real failure wasn’t missing the exhaust port, it was never testing whether it mattered.
Read more about The Force Awakens Your Attack SurfaceThe instinctive reaction to Mythos is: we need to patch faster. That instinct is understandable. It is also exactly the wrong frame. The real question isn’t how many CVEs are in your queue. It’s how many of your exposed assets can actually be exploited right now, by anyone with an API key and an afternoon.
Read more about Mythos, MOAK, CTEM and the End of CVE Chasing
The latest GigaOm Radar for Attack Surface Management highlights the shift from inventory to contextual prioritization and actionable validation across 32 vendors. CyCognito was named a Leader for the third year in a row and, for the first time, an Outperformer.
Read more about CyCognito Named a Leader and Outperformer in the 2026 GigaOm Radar for ASM
Modern security frameworks often fail by surfacing endless vulnerabilities without context. This blog explores how the CTEM framework’s Validation stage provides “permission to ignore” theoretical risks, allowing teams to focus engineering resources exclusively on confirmed, evidence-based, and exploitable threats.
Read more about Permission to Ignore: Leveraging the CTEM Framework to Focus on Real RiskContinuous Threat Exposure Management (CTEM) shifts security metrics from measuring activity to prioritizing impact. This refocuses reporting on urgent, validated issues and continuous testing coverage. By tracking remediation hours and material exposure reduction, organizations can effectively manage risk without creating unnecessary noise or alert fatigue.
Read more about From Activity to Impact: How CTEM Refocuses Security KPIs