Offensive Security stories
Periodic penetration tests miss most systems, prompting Australian and New Zealand firms to use AI-driven checks for broader coverage and faster risk spotting.
Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.
Passes in a sponsored hacking exam will trigger USD $1,000 in training credits for underserved communities, with up to USD $1 million on offer.
Only 12% of chief information security officers have recently validated controls they expect to stop intruders moving sideways through networks.
Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.
Security teams face faster attack cycles as eSentire extends Atlas with agentic AI and appoints Ilan Mindel as Chief Cyber Officer.
Security teams could cut alert backlogs as the new system flags only flaws that can be exploited in a specific environment.
Security teams can now assess network, web and AI weaknesses together as Terra Security broadens continuous validation to infrastructure.
Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.
The move widens defences for businesses as AI systems become a bigger target for attackers and zero-day flaws multiply across enterprise software.
AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.
The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.
Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.
Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.
Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.
The scanner found four critical remote code execution bugs among 16 Windows flaws, including issues in the kernel TCP/IP stack and IKEv2 service.
AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.
Enterprises could cut remediation noise as attacker-validated findings are ranked against business context, ownership and exploit paths.
The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.
AI-written phishing is forcing security teams to rethink email defences as Ocean claims its system already scans more than one billion messages a month.