SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Australia

Penetration testing Stories - Page 2

Global Stories

Penetration testing stories

XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • This month
Mandiant finds way to recover active ADFS signing keys
Data Protection

Mandiant finds way to recover active ADFS signing keys

Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.

By Mark Tarre • 5 min read • This month
Why faster AI is exposing slower security thinking
Digital Transformation

Why faster AI is exposing slower security thinking

The real risk is growing backlogs and patching delays, as AI speeds up exploit development faster than security teams can respond.

By Gareth Cox • 5 min read • This month
Anthropic widens Fable 5 safeguards & rates jailbreaks
Malware

Anthropic widens Fable 5 safeguards & rates jailbreaks

New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.

By Sean Mitchell • 4 min read • This month
Eleveight AI expands Armenia factory after rapid sell-out
Data Protection

Eleveight AI expands Armenia factory after rapid sell-out

Demand for sovereign AI compute has forced the Gagarin site to expand within weeks, with capacity set to rise to 5MW by year-end.

By Joseph Gabriel Lagonsin • 4 min read • This month
FlowForma launches FlowAssure for vendor risk checks
Software-as-a-Service

FlowForma launches FlowAssure for vendor risk checks

Vendor reviews could be cut from days to minutes as the new AI tool centralises evidence and automates lower-risk approvals.

By Sean Mitchell • 4 min read • This month
Five Eyes AI cyber warning prompts calls for faster defence
Security Operations Centres

Five Eyes AI cyber warning prompts calls for faster defence

Attackers are already using AI to exploit flaws faster than many organisations can detect them, Five Eyes agencies warned.

By Mark Tarre • 5 min read • Last month
NCC Group joins OpenAI Daybreak cyber partner programme
Network Infrastructure

NCC Group joins OpenAI Daybreak cyber partner programme

The tie-up gives NCC Group early access to GPT-5.5-Cyber, as OpenAI seeks trusted testers for defensive uses of its cyber tools.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Your annual penetration testing is already out of date
Data Protection

Your annual penetration testing is already out of date

Organisations risk missed exposures as cloud, APIs and AI systems change far faster than annual security checks can keep up.

By Richard Ford • 5 min read • Last month

Stories from Other Regions

Penetration testing stories

CybaVerse expands CybaOps with SIEM & case management
Security Information and Event Management

CybaVerse expands CybaOps with SIEM & case management

Managed service providers can now offer broader cyber security services without building their own security operations from scratch.

By Sofiah Nichole Salivio • 4 min read • This month
Picus launches AI platform to validate real exploits
Firewalls

Picus launches AI platform to validate real exploits

Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.

By Sean Mitchell • 4 min read • This month
NCC Group joins Cyber Scheme accredited company programme
IoT Security

NCC Group joins Cyber Scheme accredited company programme

The recognition could help buyers identify cyber providers whose staff meet UK professional standards, amid skills shortages and crowded markets.

By Sean Mitchell • 3 min read • This month
Skyhawk AI Red Team seizes AWS organisation in seconds
Cloud Security

Skyhawk AI Red Team seizes AWS organisation in seconds

A financial services cloud was taken over in seconds in a test, highlighting how approved permissions can still let attackers reach full AWS control.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Straiker raises USD $64 million to secure AI agents
Software-as-a-Service

Straiker raises USD $64 million to secure AI agents

Enterprise customers face growing risks as autonomous software gains access to internal systems, prompting fresh demand for agent security tools.

By Sean Mitchell • 4 min read • Last month
Cobalt study says automated AI tests miss key flaws
Application Security

Cobalt study says automated AI tests miss key flaws

False negatives from automated scanning tools are fuelling a shift towards human-led AI security testing across large organisations.

By Sofiah Nichole Salivio • 4 min read • Last month
FPT wins UK Cyber Essentials security certifications
Firewalls

FPT wins UK Cyber Essentials security certifications

The certifications may help reassure UK customers and public-sector buyers as cyber breaches remain widespread and scrutiny of suppliers intensifies.

By Joseph Gabriel Lagonsin • 4 min read • Last month
The state of cyber resilience amongst UK organisations
Data Protection

The state of cyber resilience amongst UK organisations

Despite reported gains, fewer than one in four UK organisations trust their cyber defences to withstand a major incident, a survey found.

By Jason Simper • 5 min read • Last month
Agoda launches public bug bounty with USD $6,000 reward
Data Protection

Agoda launches public bug bounty with USD $6,000 reward

Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.

By Sean Mitchell • 4 min read • Last month