Penetration testing stories
AI is now being used to write exploits and malware, with Google saying it has traced the first zero-day linked to machine assistance.
AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.
Domain controllers face urgent patching after a Netlogon flaw was rated 9.8, with no privileges or user interaction needed for exploitation.
Experts say AI is accelerating ransomware attacks, shrinking the patching window and forcing organisations to overhaul defences and recovery plans.
Security teams face a broader threat as criminals and state-backed actors use generative AI to speed hacks, phishing and malware.
Vetted security teams will get fewer refusals on authorised tasks as OpenAI tightens access around its most permissive cyber model.
The move aims to widen security coverage as firms struggle to test expanding attack surfaces quickly enough.
Vendor assessments could be completed faster and with less manual chasing as the new tool verifies evidence rather than self-reported answers.
Enterprises using Microsoft Defender will get round-the-clock human-led threat hunting, as CrowdStrike also broadens its AI risk coalition across partners.
Security teams can now validate scanner findings in minutes as Intruder rolls out AI agents to cut false positives and speed remediation.
Security teams can now validate scanner alerts in minutes as Intruder’s new AI agents cut false positives and speed up triage.
Compliance checks can now draw on existing workforce data, cutting months of manual SOC 2 prep for IT teams already using Rippling.
Businesses face tighter reporting and new rules as ministers move to overhaul cyber security, AI oversight and digital identity regulation.
Customers get a single cyber and compliance service as WorkNest folds Pentest People and Bulletproof into a new security division.
Vulnerability exploitation has collapsed from years to hours, leaving organisations racing to fix exposed systems before attackers do.
Banks and fintechs are being pushed to sharpen cyber defences as AI threats and operational knock-on effects test the UK payments system.
The findings add pressure on ministers to modernise the 1990 Computer Misuse Act as breaches hit 43% of UK businesses and 28% of charities.
Repeated phishing training helped cut Singapore staff click rates to 7.4% from 17%, despite more than 8,500 fake emails sent.
Defenders face faster, harder-to-stop attacks as SANS says AI is now built into phishing, malware and reconnaissance at scale.
Businesses are seeking more advisers as AI and tighter rules make cybersecurity compliance the most in-demand skillset on Malt’s platform.