TelcoNews UK - Telecommunications news for ICT decision-makers
United Kingdom

Penetration testing Stories - Page 2

UK Stories

Penetration testing stories

AI trust & governance seen as key to safe adoption
Data Protection

AI trust & governance seen as key to safe adoption

As AI spreads through core business functions, executives warn weak oversight could expose firms to deepfakes, fraud and costly incidents.

By Sofiah Nichole Salivio • 5 min read • Last week
CybaVerse expands CybaOps with SIEM & case management
Security Information and Event Management

CybaVerse expands CybaOps with SIEM & case management

Managed service providers can now offer broader cyber security services without building their own security operations from scratch.

By Sofiah Nichole Salivio • 4 min read • This month

Global Stories

Penetration testing stories

AI deserves our appreciation, but only if we're honest about what we're appreciating
Malware

AI deserves our appreciation, but only if we're honest about what we're appreciating

AI is speeding up attacks as well as defence, with high-risk prompts and unsupervised agents exposing firms to new security gaps.

By Robert Falzon • 4 min read • Last week
Security leaders urge governance as AI reshapes defence
Data Protection

Security leaders urge governance as AI reshapes defence

Boards face rising pressure to control shadow AI as attackers automate faster and security teams shift to continuous verification.

By Sean Mitchell • 7 min read • Last week
OpenAI imposes passkey rule for high-risk ChatGPT users
Data Protection

OpenAI imposes passkey rule for high-risk ChatGPT users

Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.

By Sean Mitchell • 6 min read • Last week
Tracebit says context bombs can derail AI cyber attacks
Cloud Security

Tracebit says context bombs can derail AI cyber attacks

Tests on five models found a planted text string sharply reduced successful AI-led intrusions, cutting full compromise to 1% in an AWS range.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Proofpoint spots Entra ID spoofing attack technique
Network Security

Proofpoint spots Entra ID spoofing attack technique

Attackers can now probe Entra ID accounts and passwords at scale without a real app, leaving defenders with little sign-in telemetry.

By Sean Mitchell • 4 min read • Last week
Group-IB launches purple teaming service for cyber defences
Ransomware

Group-IB launches purple teaming service for cyber defences

Security teams are being pressed to prove their defences work in live attacks, as spending scrutiny shifts from tools to real-world response.

By Sean Mitchell • 4 min read • Last week
HackerOne joins Anthropic cyber defence AI programme
Software-as-a-Service

HackerOne joins Anthropic cyber defence AI programme

The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.

By Sofiah Nichole Salivio • 4 min read • This month
Google backs 33 cybersecurity startups in AI shift
Data Protection

Google backs 33 cybersecurity startups in AI shift

New tools for governing AI agents are moving to the fore as Google picks 33 cybersecurity startups for its first cybersecurity forum cohort.

By Sean Mitchell • 4 min read • This month
XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • This month
Mandiant finds way to recover active ADFS signing keys
Data Protection

Mandiant finds way to recover active ADFS signing keys

Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.

By Mark Tarre • 5 min read • This month
Why faster AI is exposing slower security thinking
Digital Transformation

Why faster AI is exposing slower security thinking

The real risk is growing backlogs and patching delays, as AI speeds up exploit development faster than security teams can respond.

By Gareth Cox • 5 min read • This month
Anthropic widens Fable 5 safeguards & rates jailbreaks
Malware

Anthropic widens Fable 5 safeguards & rates jailbreaks

New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.

By Sean Mitchell • 4 min read • This month

Stories from Other Regions

Penetration testing stories

Claroty & Frenos launch industrial cyber risk tool
Cybersecurity

Claroty & Frenos launch industrial cyber risk tool

Industrial operators can now test cyber exposures without touching live systems, helping prioritise fixes that could prevent costly downtime.

By Mark Tarre • 4 min read • This month
CISA uses Anthropic AI to hunt flaws in federal code
Application Security

CISA uses Anthropic AI to hunt flaws in federal code

The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.

By Mark Tarre • 5 min read • This month
Picus launches AI platform to validate real exploits
Firewalls

Picus launches AI platform to validate real exploits

Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.

By Sean Mitchell • 4 min read • This month