Penetration testing Stories

Australian Stories

Penetration testing stories

Interactive lifts cyber careers with uni work scheme

The partnership is helping fill Australia's cyber skills gap, with 20 graduates placed into live security environments over five years.

By Mark Tarre • 4 min read • 6 days ago

Global Stories

Penetration testing stories

Software-as-a-Service

ExpressVPN hits 27 audits as privacy tools pass checks

Cure53 found no major flaws in ExpressVPN's email alias and identity monitoring tools, bolstering trust as privacy services face scrutiny.

By Sean Mitchell • 4 min read • 2 days ago

Cloud Security

Check Point launches AI tool to test exploitability

Security teams could cut alert backlogs as the new system flags only flaws that can be exploited in a specific environment.

By Sean Mitchell • 4 min read • 3 days ago

Digital Transformation

Google Cloud launches AI Threat Defence against attacks

The new service aims to help firms keep pace as AI-powered criminals automate attacks faster than security teams can patch flaws.

By Sean Mitchell • 4 min read • 2 days ago

Application Security

Bugcrowd launches RL environments for AI security training

The platform aims to help AI developers move beyond benchmark tests, as models struggle to tackle real-world vulnerabilities safely and reliably.

By Sean Mitchell • 4 min read • 5 days ago

Network Infrastructure

Terra adds continuous testing for network infrastructure

Security teams can now assess network, web and AI weaknesses together as Terra Security broadens continuous validation to infrastructure.

By Mark Tarre • 4 min read • Last week

Data Protection

TAC Security adds Anthropic & Perplexity AI clients

Independent security checks are gaining urgency as fast-growing AI and software firms face rising scrutiny from customers, partners and regulators.

By Sean Mitchell • 3 min read • Last week

Ransomware

Exploitation overtakes social engineering in Rapid7 report

Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.

By Mark Tarre • 3 min read • Last week

Data Protection

Group-IB named Gartner vendor in incident response guide

Cybersecurity buyers may see faster response times, as the guide spotlights Group-IB among providers offering round-the-clock support and preparedness work.

By Mark Tarre • 3 min read • Last week

Security Operations Centres

AI security training surges as prompt injection tops list

AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Last week

Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • This month

Supply Chain

Outer Hebrides cyber firm wins Scotland tech award

The award puts a remote island cyber specialist in the national spotlight as firms seek more help against rising attacks.

By Mark Tarre • 3 min read • This month

Digital Transformation

HackerOne links validated flaws to Wiz cloud platform

Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.

By Sofiah Nichole Salivio • 4 min read • This month

Digital Transformation

HackerOne & Wiz link validated findings to cloud risk

Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.

By Sofiah Nichole Salivio • 3 min read • This month

Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • This month

Phishing

IRONSCALES gets Anthropic verification for email defence

Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.

By Sean Mitchell • 4 min read • This month