Synack

10/02/2026

Attending ROCon 26 in Dallas (October 13–15)?

Connect with us to see how Synack integrates with Qualys to turn scan findings into validated, exploitable risk.

Book a meeting with our team: https://hubs.ly/Q04z4HXK0

10/02/2026

"Cybersecurity starts with you." 🫵

Happy Cyber Awareness Month! This year, the Cybersecurity and Infrastructure Security Agency's initiative (Securing the Next 250) emphasizes core actions you and your organization can take to build a safe digital future.

CISA has put together a hub featuring Cyber Career Week info, family security tips, even interactive puzzles for kids:

Secure .gov websites use HTTPS A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

10/01/2026

“If you don’t enjoy it, you’re not going to push through those hard times.”
SRT researcher AnInsiderThreat drops some real talk on passion, persistence, and avoiding burnout in bug bounty:

10/01/2026

Webinar Alert! 🚨

Searching for practical ways to quantify threat exposure and communicate risk to executives?

Join Synack and Dark Reading on October 12th for an expert panel featuring Roselle Safran of KeyCaliber, Brandon Taylor of Informa TechTarget, and Synack's own Tim Nordvedt.

🎟️ Register now: https://hubs.ly/Q04y-w060

09/30/2026

Heading to SecureWorld Dallas? 🤠 ⭐️

Connect with Synack to see how combining agentic AI, human expertise, and continuous security validation helps teams defend against machine-speed adversaries.

Sign up for a private 1:1 meeting: https://hubs.ly/Q04yRwsP0

09/30/2026

Synack is headed to OptivCon Kansas City!⛲❤️

Connect with us on October 7th to see how Sara AI Pentesting and the Synack Red Team help expand testing coverage and validate exploitable risk.

Book a meeting with our team: https://hubs.ly/Q04yMNT30

09/30/2026

Proud to share that Synack has been named a Leader in G2’s Fall 2026 Grid® Report for Pe*******on Testing!

“Earning a Leader position in a G2 Report is highly competitive and rooted in verified customer reviews. Congratulations to Synack for achieving this distinction.” — Godard Abel, Co-Founder and CEO, G2

Check out our G2 review page to see why security teams rank Synack as a top pe*******on testing leader: https://www.g2.com/products/synack/reviews

09/29/2026

What do you do when the device you're attacking refuses to talk back?

Synack Red Team researcher Shea Norwood found an unauthenticated command injection bug in a Nortek Linear eMerge E3, the appliance behind badge readers, door locks, and the credential database for facilities. The endpoint would run any command handed to it. It just never said so. No error, no output, no visible change.

So Shea made it talk in a language it couldn't help but speak.

A sleep 5 payload delayed the response by five seconds. Double the sleep, double the delay. Then came the real test: smuggling command output out as a DNS lookup, caught on a Burp Collaborator listener the appliance never knew existed. The HTTP response gave up nothing. The DNS traffic gave up everything, including the exact user the shell was running as.

Full compromise of a door controller isn't just a shell. It's physical access, employee records, and compliance exposure riding on one unsanitized parameter.

Blind doesn't mean unexploitable. Read how timing and DNS turned a silent endpoint into full remote code ex*****on 👇

https://hubs.ly/Q04yBNcP0

09/28/2026

AI Agent Safety: Mark Kuhr on how Synack built runtime guardrails for Sara AI Pentesting👇

09/25/2026

Sara AI Pentesting is nominated for AI Security Solution of the Year at the 2026 Computing Security Awards!
Cast your vote: https://www.computingsecurityawards.co.uk/?page=csa2026vote