Security testing Stories - Page 2

UK Stories

Security testing stories

PortSwigger launches Burp AT public beta for pentesters

The beta gives pentesters controlled AI assistance inside Burp Suite, with approvals, logging and scope rules still enforced by the platform.

By Sean Mitchell • 4 min read • Last month

Cloud Security

Intruder launches AI pentesting for web apps on demand

Smaller firms can now run web app pentests in hours, as Intruder's AI service cuts costs to a fraction of manual reviews.

By Sean Mitchell • 4 min read • Last month

Cloud Security

Intruder launches AI web app pentesting at lower cost

Security teams could cut testing delays to hours as Intruder's AI tool scans web apps for flaws from source code access.

By Sean Mitchell • 4 min read • Last month

Global Stories

Security testing stories

Risk & Compliance

KnowBe4 launches vishing simulations for staff training

Employees now face more realistic phone-based fraud tests as security teams can simulate vishing using local caller IDs and AI voices.

By Mark Tarre • 4 min read • Last month

Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Last month

Cloud Security

Qualys adds governance to TotalAI for AI risk control

Governance features aim to help security teams prove AI controls to boards and regulators as shadow AI and agentic risks spread.

By Joseph Gabriel Lagonsin • 5 min read • Last month

Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Last month

Cloud Security

OpenAI models hacked Hugging Face in security test

The breach highlights how autonomous AI can turn live testing into a real attack path, exposing internal data and credentials.

By Sofiah Nichole Salivio • 5 min read • Last month

Digital Transformation

WatchGuard joins OpenAI & Anthropic AI cyber schemes

As attackers use AI to speed up exploits, the security vendor is adding tools aimed at faster testing and vulnerability fixes for partners.

By Sean Mitchell • 4 min read • Last month

Data Protection

Old flaw leaves Wansview camera exposing credentials

Consumers could have had passwords and cloud tokens exposed from a low-cost indoor camera, after researchers found a flaw first disclosed in 2002.

By Sofiah Nichole Salivio • 4 min read • Last month

AI Security

OpenAI & Hugging Face probe AI cyber security incident

The episode has sharpened concerns that advanced AI systems can uncover and exploit real-world security flaws during testing, even in restricted environments.

By Mark Tarre • 4 min read • Last month

Private Cloud

Google makes CodeMender available in its Gemini security models

Developers may get patched code faster as Google's preview agent scans repositories, tests exploits and drafts fixes for review.

By Mark Tarre • 4 min read • Last month

Application Security

Secure Code Warrior launches AI trust index on code risk

Businesses using AI coding tools face repeatable security gaps, as the new index found an average 15 vulnerabilities in each codebase.

By Mark Tarre • 4 min read • Last month

Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Fintech

FIS joins Anthropic cyber security project with Mythos 5

For thousands of banks and payments firms, the trial could help spot software flaws before they disrupt critical financial systems.

By Karen Joy Bacudo • 4 min read • Last month

Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last month

Stories from Other Regions

Security testing stories

Fintech

Sygnia finds AI onboarding flaw exposing client data

A faulty token check let low-privilege users view other applicants' identities, payment details and Social Security numbers in a financial onboarding app.

By Mark Tarre • 4 min read • Last month