IT Brief UK - Technology news for CIOs & IT decision-makers
United Kingdom

Security testing Stories - Page 2

UK Stories

Security testing stories

PortSwigger launches Burp AT public beta for pentesters
Application Security

PortSwigger launches Burp AT public beta for pentesters

The beta gives pentesters controlled AI assistance inside Burp Suite, with approvals, logging and scope rules still enforced by the platform.

By Sean Mitchell • 4 min read • Last month

Global Stories

Security testing stories

Anthropic says Claude models accessed real systems in tests
Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • This month
EU AI Act deadline exposes growing agentic security risks
Data Protection

EU AI Act deadline exposes growing agentic security risks

Security teams face fresh pressure as test breaches show autonomous AI can stray beyond scope, just as the EU AI Act tightens across Europe.

By Sofiah Nichole Salivio • 6 min read • This month
KnowBe4 launches vishing simulations for staff training
Risk & Compliance

KnowBe4 launches vishing simulations for staff training

Employees now face more realistic phone-based fraud tests as security teams can simulate vishing using local caller IDs and AI voices.

By Mark Tarre • 4 min read • Last month
BreachLock report flags AI, cloud & web logic risks
Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Qualys adds governance to TotalAI for AI risk control
Cloud Security

Qualys adds governance to TotalAI for AI risk control

Governance features aim to help security teams prove AI controls to boards and regulators as shadow AI and agentic risks spread.

By Joseph Gabriel Lagonsin • 5 min read • Last month
HackerOne launches H1 Remediation for faster fixes
Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Last month
OpenAI models hacked Hugging Face in security test
Cloud Security

OpenAI models hacked Hugging Face in security test

The breach highlights how autonomous AI can turn live testing into a real attack path, exposing internal data and credentials.

By Sofiah Nichole Salivio • 5 min read • Last month
WatchGuard joins OpenAI & Anthropic AI cyber schemes
Digital Transformation

WatchGuard joins OpenAI & Anthropic AI cyber schemes

As attackers use AI to speed up exploits, the security vendor is adding tools aimed at faster testing and vulnerability fixes for partners.

By Sean Mitchell • 4 min read • Last month
Old flaw leaves Wansview camera exposing credentials
Data Protection

Old flaw leaves Wansview camera exposing credentials

Consumers could have had passwords and cloud tokens exposed from a low-cost indoor camera, after researchers found a flaw first disclosed in 2002.

By Sofiah Nichole Salivio • 4 min read • Last month

Stories from Other Regions

Security testing stories

Reco to brief Black Hat on AI agent security risks
Privileged Access Management

Reco to brief Black Hat on AI agent security risks

Security teams face new exposure as AI agents inherit permissions and move data across business systems, Reco says.

By Joseph Gabriel Lagonsin • 4 min read • This month
AI models breach live systems in cybersecurity tests
Network Security

AI models breach live systems in cybersecurity tests

Security teams face faster, stealthier intrusions after AI agents managed to breach live systems in controlled tests by Anthropic and OpenAI.

By Sofiah Nichole Salivio • 5 min read • This month
Incode named Gartner leader for third straight year
Software-as-a-Service

Incode named Gartner leader for third straight year

The ranking reinforces Incode's pitch to banks and platforms seeking faster checks as deepfakes and synthetic identities raise fraud risk.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Sygnia finds AI onboarding flaw exposing client data
Fintech

Sygnia finds AI onboarding flaw exposing client data

A faulty token check let low-privilege users view other applicants' identities, payment details and Social Security numbers in a financial onboarding app.

By Mark Tarre • 4 min read • Last month
NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Last month
Cobalt launches autonomous pentest for continuous testing
Application Security

Cobalt launches autonomous pentest for continuous testing

Security teams may get findings within 24 hours as Cobalt targets faster testing across sprawling software estates.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Synack study finds major blind spots in security testing
Data Protection

Synack study finds major blind spots in security testing

Fast-moving corporate systems are outpacing scheduled checks, leaving many firms with security gaps that can persist for days or weeks.

By Sean Mitchell • 4 min read • Last month