Patched and Still Breached: Inside LMG Security’s 2026 Penetration Testing Report
Your systems are patched. Your vulnerability scans look good. So why are attackers still getting in?
LMG Security’s newly released 2026 Penetration Testing Report, Patched and Still Breached, uncovers what really happens when penetration testers put organizational defenses to the test. After analyzing a year of real-world penetration testing findings, our team discovered a surprising trend: 88% of domain takeovers involved no software vulnerability along the attack path.
Join Sherri Davidoff & Tom Pohl, Director of Penetration Testing, from LMG Security for an exclusive look at the findings behind the report. Tom will break down the most common paths attackers take, explain why traditional vulnerability management doesn’t tell the whole story, and share practical steps organizations can take to reduce their risk.
During this webinar, you’ll learn:
- What our penetration testers discovered about the weaknesses attackers actually exploit.
- Why common vulnerabilities aren’t always the ones that lead to a compromise.
- The three recurring attack paths responsible for 71% of domain takeovers.
- Five practical security changes that can stop 94% of the takeover paths.
Go beyond the vulnerability scan and discover where your organization’s biggest security risks may actually be hiding.
Speakers
Founder
LMG Security
Sherri Davidoff is the Founder of LMG Security and the author of three books, including “Ransomware and Cyber Extortion” and “Data Breaches: Crisis and Opportunity.” As a recognized expert in cybersecurity, she has been called a “security badass” by the New York Times. Sherri is a regular instructor at the renowned Black Hat trainings and a faculty member at the Pacific Coast Banking School. She is also the co-author of Network Forensics: Tracking Hackers Through Cyberspace (Prentice Hall, 2012), and has been featured as the protagonist in the book, Breaking and Entering: The Extraordinary Story of a Hacker Called “Alien.” Sherri is a GIAC-certified forensic examiner (GCFA) and penetration tester (GPEN) and received her degree in Computer Science and Electrical Engineering from MIT.
Director of Penetration Testing
LMG Security
Tom is the Director of Penetration Testing for LMG Security, a seasoned hacker, and the winner of many hacking competitions, including Wild West Hackin’ Fest, Circle City Con, THOTCON, BSidesLV, and DEFCON. Tom is a seasoned presenter at major security conferences such as DEFCON, BSidesLV, CornCon, and SecDSM, and he has led technical training classes for many organizations. In addition, Tom also discovered several vulnerabilities that have been covered in a number of major industry publications. Prior to working for LMG, Tom was the head of software architecture at Businessolver for nearly 20 years.
