{"version":"https://jsonfeed.org/version/1","title":"Zero Day Security","home_page_url":"https://zerodaysecurity.net","description":"Zero Day Security","author":{"name":"Zero Day Security"},"items":[{"id":"https://zerodaysecurity.net/blog/f/crest-vs-oscp-what-your-pentesters-certifications-mean","html_content":"

When you compare penetration testing providers, you'll see a wall of acronyms: CREST, CRT, CPSA, OSCP, OSWA, OSWP and more. Some buyers are told they "must" use a CREST provider; others are told OSCP is the gold standard...

","url":"https://zerodaysecurity.net/blog/f/crest-vs-oscp-what-your-pentesters-certifications-mean","title":"CREST vs OSCP: What Your Pentester's Certifications Mean","summary":"When you compare penetration testing providers, you'll see a wall of acronyms: CREST, CRT, CPSA, OSCP, OSWA, OSWP and more. Some buyers are told they \"must\" use a CREST provider; others are told OSCP is the gold standard...","date_modified":"2026-10-01T16:40:48Z"},{"id":"https://zerodaysecurity.net/blog/f/owasp-top-10-for-llm-applications-explained-2025-list","html_content":"

Companies are shipping chatbots, AI assistants, RAG search and autonomous agents faster than they can secure them. The OWASP Top 10 for Large Language Model Applications is the most widely used framework for understandin...

","url":"https://zerodaysecurity.net/blog/f/owasp-top-10-for-llm-applications-explained-2025-list","title":"OWASP Top 10 for LLM Applications Explained (2025 List)","summary":"Companies are shipping chatbots, AI assistants, RAG search and autonomous agents faster than they can secure them. The OWASP Top 10 for Large Language Model Applications is the most widely used framework for understandin...","date_modified":"2026-10-01T16:40:19Z"},{"id":"https://zerodaysecurity.net/blog/f/hipaa-penetration-testing-requirements-2026-guide","html_content":"

If your organization creates, stores or transmits electronic protected health information (ePHI), you have probably asked a simple question: does HIPAA require a penetration test? The honest answer is "not by name, but i...

","url":"https://zerodaysecurity.net/blog/f/hipaa-penetration-testing-requirements-2026-guide","title":"HIPAA Penetration Testing Requirements: 2026 Guide","summary":"If your organization creates, stores or transmits electronic protected health information (ePHI), you have probably asked a simple question: does HIPAA require a penetration test? The honest answer is \"not by name, but i...","date_modified":"2026-09-28T22:22:16Z"},{"id":"https://zerodaysecurity.net/blog/f/penetration-testing-vs-vulnerability-scanning","html_content":"

If you're researching cybersecurity for your business, you've probably heard these terms thrown around:

","url":"https://zerodaysecurity.net/blog/f/penetration-testing-vs-vulnerability-scanning","title":"Penetration Testing vs Vulnerability Scanning","summary":"If you're researching cybersecurity for your business, you've probably heard these terms thrown around:","date_modified":"2026-01-14T21:01:43Z"},{"id":"https://zerodaysecurity.net/blog/f/what-is-penetration-testing-complete-guide-for-business-owners","html_content":"

If you've ever wondered "What exactly is penetration testing?" or been confused by terms like "ethical hacking," "pen testing," or "security assessments"—you're not alone.

","url":"https://zerodaysecurity.net/blog/f/what-is-penetration-testing-complete-guide-for-business-owners","title":" What is Penetration Testing? Complete Guide for Business Owners","summary":"If you've ever wondered \"What exactly is penetration testing?\" or been confused by terms like \"ethical hacking,\" \"pen testing,\" or \"security assessments\"—you're not alone.","date_modified":"2026-01-14T20:57:54Z"},{"id":"https://zerodaysecurity.net/blog/f/how-much-does-penetration-testing-cost-in-2026-pricing-guide","html_content":"

If you're researching penetration testing for your business, you've probably noticed something frustrating: most companies won't list their prices.

","url":"https://zerodaysecurity.net/blog/f/how-much-does-penetration-testing-cost-in-2026-pricing-guide","title":"How Much Does Penetration Testing Cost in 2026? [Pricing Guide]","summary":"If you're researching penetration testing for your business, you've probably noticed something frustrating: most companies won't list their prices.","date_modified":"2026-01-14T19:30:43Z"},{"id":"https://zerodaysecurity.net/blog/f/pci-dss-penetration-testing-requirements-complete-2026-guide","html_content":"

If you accept credit card payments—whether online, in-person, or via mobile—you need to comply with PCI DSS (Payment Card Industry Data Security Standard). And unlike SOC 2, PCI DSS explicitly requires penetration testin...

","url":"https://zerodaysecurity.net/blog/f/pci-dss-penetration-testing-requirements-complete-2026-guide","title":"PCI DSS Penetration Testing Requirements: Complete 2026 Guide","summary":"If you accept credit card payments—whether online, in-person, or via mobile—you need to comply with PCI DSS (Payment Card Industry Data Security Standard). And unlike SOC 2, PCI DSS explicitly requires penetration testin...","date_modified":"2026-01-14T19:07:14Z"},{"id":"https://zerodaysecurity.net/blog/f/soc-2-penetration-testing-requirements-your-complete-2026-guide","html_content":"

If you're preparing for a SOC 2 audit, you've probably heard conflicting information about penetration testing. Some sources say it's required, others say it's optional. The truth? Penetration testing isn't technically r...

","url":"https://zerodaysecurity.net/blog/f/soc-2-penetration-testing-requirements-your-complete-2026-guide","title":"SOC 2 Penetration Testing Requirements: Your Complete 2026 Guide","summary":"If you're preparing for a SOC 2 audit, you've probably heard conflicting information about penetration testing. Some sources say it's required, others say it's optional. The truth? Penetration testing isn't technically r...","date_modified":"2026-01-14T19:01:48Z"},{"id":"https://zerodaysecurity.net/blog/f/the-future-of-cvecommon-vulnerabilities-and-exposures-funding","html_content":"

In April 2025, the cybersecurity landscape teetered on the edge of a major disruption. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) came dangerously close to letting funding lapse for the Common Vulne...

","url":"https://zerodaysecurity.net/blog/f/the-future-of-cvecommon-vulnerabilities-and-exposures-funding","title":"The Future of CVE(Common Vulnerabilities and Exposures) Funding","summary":"In April 2025, the cybersecurity landscape teetered on the edge of a major disruption. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) came dangerously close to letting funding lapse for the Common Vulne...","date_modified":"2025-04-17T17:07:50Z"},{"id":"https://zerodaysecurity.net/blog/f/%F0%9F%9A%A8-critical-alert-crushftp-authentication-bypass-cve-2025-31161","html_content":"

A critical authentication bypass vulnerability has been identified in CrushFTP, a widely-used enterprise file transfer solution. Tracked as CVE-2025-31161, this flaw allows unauthenticated attackers to gain unauthorized ...

","url":"https://zerodaysecurity.net/blog/f/%F0%9F%9A%A8-critical-alert-crushftp-authentication-bypass-cve-2025-31161","title":"🚨 Critical Alert: CrushFTP Authentication Bypass (CVE-2025-31161","summary":"A critical authentication bypass vulnerability has been identified in CrushFTP, a widely-used enterprise file transfer solution. Tracked as CVE-2025-31161, this flaw allows unauthenticated attackers to gain unauthorized ...","date_modified":"2025-04-16T18:39:10Z"},{"id":"https://zerodaysecurity.net/blog/f/how-to-disable-legacy-broadcasting-protocols","html_content":"

🚨 What Are Legacy Broadcasting Protocols — And Why Are They Dangerous?

","url":"https://zerodaysecurity.net/blog/f/how-to-disable-legacy-broadcasting-protocols","title":"How to Disable Legacy Broadcasting Protocols","summary":"🚨 What Are Legacy Broadcasting Protocols — And Why Are They Dangerous?","date_modified":"2025-04-10T18:05:47Z"},{"id":"https://zerodaysecurity.net/blog/f/your-credentials-are-on-the-dark-web-protect-yourself-now","html_content":"

Imagine waking up one day to find your bank account drained or your social media accounts taken over. You didn’t click any strange links or fall for a scam—so how did it happen? The truth is, your credentials might alrea...

","url":"https://zerodaysecurity.net/blog/f/your-credentials-are-on-the-dark-web-protect-yourself-now","title":"Your Credentials Are on the Dark Web! Protect Yourself Now!","summary":"Imagine waking up one day to find your bank account drained or your social media accounts taken over. You didn’t click any strange links or fall for a scam—so how did it happen? The truth is, your credentials might alrea...","date_modified":"2025-04-08T13:08:09Z"},{"id":"https://zerodaysecurity.net/blog/f/ransomware-understanding-the-threat","html_content":"

Ransomware: Understanding the Threat and How to Protect Your Business

","url":"https://zerodaysecurity.net/blog/f/ransomware-understanding-the-threat","title":"Ransomware: Understanding the Threat","summary":"Ransomware: Understanding the Threat and How to Protect Your Business","date_modified":"2025-01-24T02:35:08Z"},{"id":"https://zerodaysecurity.net/blog/f/how-ai-is-revolutionizing-penetration-testing","html_content":"

AI is changing penetration testing, but probably not in the way the marketing suggests. Automated tools have become faster and smarter, and that genuinely helps. Yet the findings that matter most in a real penetration te...

","url":"https://zerodaysecurity.net/blog/f/how-ai-is-revolutionizing-penetration-testing","title":"How AI is Revolutionizing Penetration Testing","summary":"AI is changing penetration testing, but probably not in the way the marketing suggests. Automated tools have become faster and smarter, and that genuinely helps. Yet the findings that matter most in a real penetration te...","date_modified":"2025-01-23T17:30:40Z"}]}