Security testing stories
Projects in Lunar Strategy’s network will now get earlier security checks, as Cyberscope moves into smart contract audits before token launches and expansion.
The move aims to widen security coverage as firms struggle to test expanding attack surfaces quickly enough.
Enterprises using Microsoft Defender will get round-the-clock human-led threat hunting, as CrowdStrike also broadens its AI risk coalition across partners.
Security teams can now validate scanner findings in minutes as Intruder rolls out AI agents to cut false positives and speed remediation.
Security teams can now validate scanner alerts in minutes as Intruder’s new AI agents cut false positives and speed up triage.
API-related breaches now cost organisations more than USD $700,000 on average, as AI-linked interfaces draw fresh hacker attention.
Three-quarters of organisations now see third-party software as a top risk, as AI flaws and supply-chain gaps slow security fixes.
Rising AI-generated vulnerability reports are leaving security teams with record backlogs and only hours to judge which flaws hackers can exploit.
The framework is designed to expose hidden risks in production AI systems that can be missed by conventional one-off tests.
Offensive AI is widening exposure gaps for firms that test only a third of their attack surfaces on average, Synack says.
Boards in regulated sectors now have firmer assurance after Abacus secured CREST approval for penetration testing, renewed annually.
Businesses face growing exposure to API and AI-driven attacks as Check Point’s web application firewall earns top marks for accuracy.
Sensitive chats and uploaded files could have been quietly leaked from ChatGPT via DNS tunnelling before OpenAI fixed the flaw.
Corporate buyers may take note as eScan’s Enterprise EDR earned AV-TEST’s Best Advanced Protection award for consistency against ransomware and infostealers.
Approved developers can now build software directly on Mercury MP Intelligent Controllers, aiming to add edge-based integrations without replacing core systems.
The findings add pressure on ministers to modernise the 1990 Computer Misuse Act as breaches hit 43% of UK businesses and 28% of charities.
Procurement teams in defence and critical infrastructure may now view White Rook Cyber more favourably after its CREST testing approval.
UK cyber security suppliers could gain access to regulated procurement frameworks under a new accreditation scheme based on staff competence.
Customer data and service security may be at risk, as nearly one in five UK telecom web servers leak configuration details, a study finds.
Security teams are turning to continuous, risk-based assessment as fragmented tools leave them unable to see which exposures matter most.