IT Brief UK - Technology news for CIOs & IT decision-makers
United Kingdom

Penetration testing Stories - Page 11

UK Stories

Penetration testing stories

New ENCS-DIVD pact targets energy cyber weaknesses
DevOps

New ENCS-DIVD pact targets energy cyber weaknesses

ENCS and DIVD have agreed a new cyber pact to uncover and disclose vulnerabilities in Europe's high-impact energy and critical systems.

By Kaleah Salmon • 4 min read • Thu, 5th Feb 2026
Zero Networks warns lateral movement eclipses zero-days
Firewalls

Zero Networks warns lateral movement eclipses zero-days

Lateral movement now eclipses zero-day exploits as the top cyber risk, Zero Networks warns, with attacks able to hit 60% of systems in an hour.

By Mark Tarre • 4 min read • Wed, 4th Feb 2026
Acumen Cyber appoints Derek Whigham to support UK growth
DevOps

Acumen Cyber appoints Derek Whigham to support UK growth

Glasgow cyber security provider Acumen Cyber appoints veteran strategist Derek Whigham to its board to steer UK growth and services.

By Sofiah Nichole Salivio • 3 min read • Wed, 28th Jan 2026
UK firms see AI as key to resilience, cyber gap grows
Disaster Recovery

UK firms see AI as key to resilience, cyber gap grows

UK leaders now see AI and automation as top drivers of resilience, yet most still define it mainly as cyber security, new research finds.

By Shannon Williams • 3 min read • Fri, 23rd Jan 2026

Global Stories

Penetration testing stories

Routine internal access, not exploits, drives cyber risk
Malware

Routine internal access, not exploits, drives cyber risk

Routine admin tools, not exotic exploits, let attackers race across networks, compromising over half of systems in under an hour.

By Shannon Williams • 4 min read • Wed, 4th Feb 2026
Netpoleon, Hack The Box boost ANZ cyber skills training
Disaster Recovery

Netpoleon, Hack The Box boost ANZ cyber skills training

Netpoleon partners with Hack The Box to deliver hands-on cyber skills training and readiness tools to address ANZ's growing security gap.

By Mark Tarre • 4 min read • Tue, 3rd Feb 2026
AI-driven attacks overwhelm security teams in 2026
DevOps

AI-driven attacks overwhelm security teams in 2026

AI-fuelled cyberattacks overwhelm defenders as false positives swamp security teams and critical threats slip through in 2026, Hadrian warns.

By Kaleah Salmon • 3 min read • Fri, 30th Jan 2026
AI security drives demand for faster pentesting models
DevOps

AI security drives demand for faster pentesting models

AI security fears and rapid release cycles are pushing firms to demand faster, deeper pentesting - and many are ready to ditch existing vendors.

By Mark Tarre • 4 min read • Fri, 30th Jan 2026
HackerOne unveils AI‑driven continuous pentesting service
DevOps

HackerOne unveils AI‑driven continuous pentesting service

HackerOne launches Agentic PTaaS, blending AI agents with human experts to deliver continuous, always-on penetration testing for enterprises.

By Joseph Gabriel Lagonsin • 3 min read • Thu, 29th Jan 2026
AI reshapes data privacy as firms shift to real-time defence
Software-as-a-Service

AI reshapes data privacy as firms shift to real-time defence

AI-driven cloud adoption is forcing firms to swap static privacy checklists for continuous, real-time defence of sensitive data flows.

By Shannon Williams • 6 min read • Thu, 29th Jan 2026
Critical flaw in Apache bRPC exposes debug endpoint
DevOps

Critical flaw in Apache bRPC exposes debug endpoint

A critical flaw in Apache bRPC's /pprof/heap endpoint allows unauthenticated remote code execution on exposed services, researchers warn.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 29th Jan 2026
UK bill accelerates shift to offensive cyber security
Firewalls

UK bill accelerates shift to offensive cyber security

New UK cyber bill pushes critical sectors towards continuous offensive security testing as state-backed and criminal threats intensify.

By Sofiah Nichole Salivio • 5 min read • Sat, 24th Jan 2026
NCC Group, Delinea partner on managed PAM for AI era
DevOps

NCC Group, Delinea partner on managed PAM for AI era

NCC Group and Delinea launch managed privileged access service, targeting AI-era identity threats with Zero Trust, cloud-native controls.

By Catherine Knowles • 4 min read • Fri, 23rd Jan 2026
LinkedIn DMs abused to spread Python-based malware
Firewalls

LinkedIn DMs abused to spread Python-based malware

Attackers are abusing LinkedIn private messages to deliver Python-based malware via booby-trapped archives, ReliaQuest has warned.

By Catherine Knowles • 4 min read • Wed, 21st Jan 2026
HackerOne launches safe harbour to protect AI testers
DevOps

HackerOne launches safe harbour to protect AI testers

HackerOne unveils Good Faith AI Research Safe Harbor, giving security testers clearer authorisation and protection for probing AI systems.

By Mark Tarre • 3 min read • Wed, 21st Jan 2026

Stories from Other Regions

Penetration testing stories

CIRO announces tiered crypto custody rules for dealers
DevOps

CIRO announces tiered crypto custody rules for dealers

Canada's investment watchdog has unveiled a tiered crypto custody regime, tying asset limits to custodians' capital, tech controls and oversight.

By Jake MacAndrew • 4 min read • Thu, 5th Feb 2026
AI arms race to reshape Australia's cyber defences by 2026
Malware

AI arms race to reshape Australia's cyber defences by 2026

AI-powered attacks and defences, quantum threats and smart city risks are set to transform Australia's cyber security landscape by 2026.

By Mark Tarre • 6 min read • Wed, 21st Jan 2026