Offensive Security Stories - Page 2

Global Stories

Offensive Security stories

Mandiant finds way to recover active ADFS signing keys

Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.

By Mark Tarre • 5 min read • This month

Data Protection

Commvault launches AI cyber resilience recovery test

The two-hour exercise is designed to show whether security teams can recover cleanly as AI-driven attacks can now unfold in minutes.

By Mark Tarre • 4 min read • This month

Digital Transformation

Why faster AI is exposing slower security thinking

The real risk is growing backlogs and patching delays, as AI speeds up exploit development faster than security teams can respond.

By Gareth Cox • 5 min read • This month

Data Protection

Anthropic AI controversy raises cyber trust concerns

Hidden tracking markers and a US standoff over a vulnerability-finding model are fuelling fears that AI now carries cyber and national security risks.

By Mark Tarre • 4 min read • This month

Security Operations Centres

Hack The Box adds defensive tools for cyber readiness

Security leaders can now map team gaps more precisely as the platform adds crisis simulation, AI coaching and SOC training tools.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Data Protection

Your annual penetration testing is already out of date

Organisations risk missed exposures as cloud, APIs and AI systems change far faster than annual security checks can keep up.

By Richard Ford • 5 min read • Last month

Cloud Security

IBM joins OpenAI cyber programme with app security tool

Enterprise security teams gain a new AI-assisted way to spot exploitable code flaws, as IBM widens its cyber work with OpenAI.

By Sean Mitchell • 4 min read • Last month

Network Security

OpenAI expands Daybreak with patching tools & partners

The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.

By Sean Mitchell • 5 min read • Last month

Cloud Security

Mini Shai-Hulud worm turns public, NCC Group warns

Public release of the Mini Shai-Hulud code means copycat attacks can now hit developers, CI/CD systems and open-source supply chains.

By Sofiah Nichole Salivio • 4 min read • Last month

Digital Transformation

Organisations shift to continuous testing in security

With AI speeding up attacks, 53% of security leaders say point-in-time tests are already outdated by the time reports land.

By Sean Mitchell • 4 min read • Last month

Data Protection

Anthropic's Claude Fable 5 sparks cybersecurity warnings

Cybersecurity teams fear the release could speed up vulnerability hunting on both sides, forcing faster patching and tighter controls.

By Sean Mitchell • 5 min read • Last month

Hybrid Cloud

How continuous assurance can strengthen cyber security in the AI era

Periodic penetration tests miss most systems, prompting Australian and New Zealand firms to use AI-driven checks for broader coverage and faster risk spotting.

By Gareth Cox • 3 min read • Last month