Hack The Box

The signal is strong. Let’s not assume the rest is 📡 Meet the HTB Certified Wi-Fi Pentesting Expert! A hands-on certification designed to teach you how modern Wi-Fi networks really work, how they’re assessed, and where they tend to fall apart. From understanding wireless behavior to testing today’s protections in realistic scenarios, HTB CWPE is built for people who want real Wi-Fi pentesting skills, not surface-level knowledge. Learn more: okt.to/5xDXZm #HackTheBox #HTB #CWPE #WiFiPentester #Cybersecurity #WiFi

How many Active Directory vulnerabilities can you spot?  We’re excited to be partnering with @Semperis to host a challenge that tests your AD expertise! Come visit our booth S-0967 at RSAC 2026 and see how far your skills can take you. #HackTheBox #HTB #Cybersecurity #ActiveDirectory #Challenge #RSAC

Are we cooked, chat? 😏  Here are the pieces of content coming to the #HackTheBox platforms this week! 🔵 ShadowStream, a Sherlock created by Galvatronus 🔴 Kobold, an HTB Season 10 Machine, created by sau123 🔴 Lucky Dice, a Challenge created by gramthanos Find them on #HTB Labs and Enterprise Platform: okt.to/X2foiK #Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills

New CVE Machine 🚨 Principal is now available for you to explore a critical identity boundary flaw. This new free retired Machine is centered on CVE-2026-29000, a newly disclosed authentication bypass in the pac4j-jwt library. Since Pac4j is used to implement major identity flows like OAuth, SAML, and JWT authentication, this vulnerability allows attackers to bypass core security controls in Java applications. Assigned a CVSS score of 9.1, it highlights the far-reaching consequences when a system verifies a cryptographic envelope but fails to validate the claim inside. Sharpen your skills now: okt.to/XmS2Hn #HackTheBox #CVE #Cybersecurity #Pentesting #RedTeam #Infosec #Cryptography

Think you can capture the flag while the whole floor is watching? 👀 We are bringing the heat to our RSAC 2026 booth with a live mini-challenge designed to test your limits. The rules are simple: play, win, and repeat. If you dominate the leaderboard, you might just walk away with an exclusive HTB Challenge Coin to add to your collection! Not to mention that we will be giving away one epic prize every single day, so make sure you bring your A-game. Stop by booth S-0967 to lock in your spot and see if you have what it takes to pwn the competition. See you on the floor 👋 #HackTheBox #CyberSecurity #CaptureTheFlag #InfosecEvents #RSAC

Red teamers, we have a mission for you 📞  Or maybe make it three! We have added 3 new Pro Labs to HTB Labs, each designed to put your red teaming skills to the ultimate test. Whether you want to sink your teeth into a massive network or you only have an evening to achieve domain compromise, there is a path for you: 🔴 Shinra  Master the art of stealthy movement in Active Directory by operating covertly to avoid detection mechanisms in this full-scale scenario.  🔴 Reflection  Practice the complex process of chaining multiple weaknesses across the identity infrastructure to escalate from limited access to the Domain Administrator role. 🔴 Trusted  Jump straight into an internal red team engagement, starting with zero credentials and rapidly assessing the security posture of an AD environment. Get started now: okt.to/uZCKDh #HackTheBox #CyberSecurity #RedTeaming #ActiveDirectory #Pentesting #ProLabs

You can spend a year reading documentation, or you can spend forty-eight hours in a CTF and come out with better instincts 💡  Participating in a CTF can be a great way to build the technical intuition required for a career in security. In the new episode of Learn with HTB, we explain the specific advantages of different competition formats and why mastering pattern recognition is essential for any defender.  You will learn how to find the right team and why starting now is better for your growth than waiting until you feel like an expert. Watch the full episode now: okt.to/Mxc2rt P.S. There might be a Silver Annual subscription giveaway happening in our YouTube section. Watch the video to discover how to join! 👀  #HackTheBox #Cybersecurity #CTF #BlueTeam #Infosec #LearnHacking #CareerGrowth

Concrete jungle where hackers are made of 🎤 Here are the pieces of content coming to the #HackTheBox platforms this week! 🔵 Liberty, a Sherlock created by chicken0248 🔴 VariaType, an HTB Season 10 Machine, created by WackyH4cker  🔴 GameLoader, a Challenge created by pakcyberbot Find them on #HTB Labs and Enterprise Platform: okt.to/HhOLJD #Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills

Think you can spot the hidden flaw? 🤔 Remember, sometimes the most subtle inputs can lead to significant discoveries. Write the solution in the thread below!

The results are in, and we are starting 2026 at the top of the leaderboard 🏆 We are thrilled to share that Hack The Box has been named a Leader in The Forrester Wave: Cybersecurity Skills and Training Platforms, Q1 2026. This marks the second consecutive time we have been placed in the Leaders category, rising to the No. 2 position. In the evaluation, HTB received superior scores in 13 criteria, including Agentic AI Readiness, innovation, gamification, accessibility, and community. As organizations prepare for an AI-driven threat landscape, validating the performance of both security teams and AI agents is becoming critical. This recognition reflects how far Hack The Box has evolved into a mature enterprise-ready cyber readiness platform, helping organizations strengthen offensive and defensive capabilities required for the agentic AI shift. As Balaji Prakash Rao, Chief Product Security Officer and Deputy CISO at Resideo, put it, "what stands out most is Hack The Box’s continued investment in what’s next—operational readiness and AI‑augmented security—while maintaining the hands‑on, realistic simulations that drive measurable improvements for our cybersecurity teams.” Whether building AI-native security teams or preparing for the next wave of threats, our commitment remains the same: to move beyond theory and prove readiness through real-world practice. Read the full evaluation here: okt.to/ELXfTh #HackTheBox #HTB #CyberSecurity #ForresterWave #AIsecurity #CyberSkills #InfoSec #CyberReadiness

RSAC 2026 is better when you get hands-on 🕹️ At the Hack The Box booth, you can take on a 2 to 5-minute CTF Challenge, claim a spot on the leaderboard, and win daily prizes. 1 completed Challenge = 1 entry. May the best (and luckiest) cyber professional win 🏆   Find us at Moscone South, Booth S-0967. See you there! #RSAC2026 #CyberSecurity #CTF #SecurityOperations #HackTheBox #BlueTeaming #RedTeaming

"I'm not technical enough" "I'm starting too late" "I'll be the only one" Cybersecurity is for everyone 💚  Imposter syndrome is a persistent vulnerability for many in the industry. Today serves as a meaningful reminder that the cyber community thrives on being fluid and inclusive of every perspective, including gender. Our industry stays resilient when it welcomes anyone with the curiosity to learn and the courage to try.  Finding your place in security starts with simple, consistent actions like completing a single lesson or asking a question in a group chat. Remember, every expert once struggled to solve their very first challenge! You belong in this fight alongside millions of others who are building their skills from the ground up. If you want to join a free group of peers to learn cybersecurity together, take a look at our local meetups: okt.to/kcuVd5 #HackTheBox #HTB #Cybersecurity #InformationSecurity #IWD #Community

Looking for a meaningful connection? 😍 How about one that gives you a direct path to Domain Admin? Wireless remains one of the most overlooked entry points in modern infrastructure, often serving as the easiest way into an organization. The HTB Certified Wi-Fi Pentesting Expert is built to bridge that gap, moving you beyond simple script-running into deep protocol analysis and real-world attack chains. It is time to master #WiFi exploitation. Start the HTB CWPE path and get certified: okt.to/0dRUeD #CWPE #HackTheBox #WirelessSecurity #Pentesting #Infosec #CyberSecurity

HTB Academy is entering its zen era 🧘‍♂️  The next generation of cybersecurity training is officially here! We have stripped away the noise to give you a platform that moves as fast as you do. Inspired by a retro, analog aesthetic but built on a cutting-edge tech stack, this update is all about performance and focus. Here is what is new: ✔️ A new workflow designed to eliminate distractions and keep you in the zone ✔️ A Zen-inspired interface to bring peace of mind and clarity to your training ✔️ Full mobile compatibility so you can level up your skills on the go ✔️ An upgraded tech stack for a faster, more responsive experience Head over to the platform to switch to the 2.0 Beta and experience the upgrade for yourself: okt.to/STlNG9 #HTBAcademy #CyberSecurity #EthicalHacking #Infosec #CyberSecurityTraining #HTB

Stop hiring like it’s 2025 🙅 Our latest AI-Augmented vs. Human-Only Cybersecurity Performance Benchmark Report, based on Neurogrid CTF data, shows which shifts occur when AI joins the workflow and where the advantage actually shows up. ✔️ Up to 4.1x more output for AI-augmented elite teams ✔️ 27% solve rate for top AI-augmented teams vs 16% for top human-only teams ✔️ AI advantage peaked at 3.89x on medium-difficulty work The highest impact appears when teams combine AI assistance with disciplined oversight, rigorous validation, and clearly defined human responsibility. Huge thanks to the team behind the research: Gibb Witham, Gerasimos Marketos, Niko Maroulis, Yiannis Foukarakis, Nikos Bantaliants, Pavlos Kolios, Amy Collins, and Christine Bartlett. Deep dive into the findings here: okt.to/5WTAfk #CyberSecurity #CISO #SecurityLeadership #AIinSecurity #CyberTalent #HackTheBox #SOC

I've got my eyes on you 👀 Here are the pieces of content coming to the #HackTheBox platforms this week! 🔵 Vantage, a Sherlock created by Xenophon3 🔴 CCTV, an HTB Season 10 Machine, created by holdthefort 🔴 Sandcastle, a Challenge created by clubby789 Find them on #HTB Labs and Enterprise Platform: okt.to/iVMhYI #Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills

Attackers, we C you 👀 Command-and-control traffic is the lifeline that keeps an intrusion alive. Spot the beacons, weird DNS, and suspicious processes early, and you can cut the attacker off before they escalate. Grab the C2 detection checklist we built with @LetsDefendIO, then stress-test your skills where it counts. Ready to put your detection skills to the test? Jump into the DFIR Labs on Hack The Box and start investigating: okt.to/wUryIa #HackTheBox #HTB #C2 #Detection #BlueTeam #Educational

Your trust issues were right 🫣 CVE-2025-54136 affects Cursor versions 1.2.4 and below and can lead to remote code execution due to how MCP configurations are handled. The first time an MCP config is introduced, the user approves it. After that, any changes to the same file are automatically trusted. In shared environments or collaborative projects, this opens the door to stealthy payload swaps and potential lateral movement starting from a developer workstation. Swipe through the slides to break down the exploit path and mitigation steps, and save this post to review your MCP configs later. Train humans and agents side by side to face the next wave of advanced threats: okt.to/xarz7V #CyberSecurity #CVE #AppSec #DevSecOps #ThreatResearch #Infosec #HackTheBox

You heard it from the best 🔝  And by the best, we mean Esha Kiran Kumar Kalyanam, who is currently a cybersecurity analyst, an opportunity that came by after attending a Hack the Box event in Auckland! Stories like this are exactly why our meetups matter! At HTB, the focus has always been on hands-on experience that mirrors real security challenges. The kind of practice that sharpens how you think, how you approach incidents, and how you communicate your impact in an interview or on the job. If you are serious about growing in this industry, put yourself in environments that push you technically and surround you with people who are on the same path. Join a Hack The Box meetup, connect with fellow cybersecurity enthusiasts, and take the next step toward your next role: okt.to/O42AjW #HackTheBox #HTB #SuccessStory #Meetups #Hacking #Community #RedTeaming

You won't believe what HTB just released 😱 Here are the pieces of content coming to the #HackTheBox platforms this week! 🔵 ShadowBait, a Sherlock created by Levi2210 🔴 Pirate, an HTB Season 10 Machine, created by ruyct4ft 🔴 Madmath, a Challenge created by ApparentlyPlus Find them on #HTB Labs and Enterprise Platform: okt.to/EiVsyk #Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills

Irresistible force meets an immovable object 🤝 Hack The Box and @Hacker0x01 are joining forces for RSAC 2026 with a common mission: measurable, validated cyber readiness.  Stop by our booths to: ✔️ Take on live security Challenges ✔️ See measurable cyber readiness in action ✔️ Talk to the team about building real-world capabilities that hold up under pressure See you in San Francisco 👋 #RSAC2026 #CyberSecurity #HackTheBox #HackerOne #RedTeam #BlueTeam