CMOtech US - Technology news for CMOs & marketing decision-makers
United States

Offensive Security Stories - Page 3

American Stories

Offensive Security stories

UltraViolet Cyber launches Solstice AI pentesting platform
Application Security

UltraViolet Cyber launches Solstice AI pentesting platform

The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Ocean raises GBP £28 million to fight AI email fraud
Data Protection

Ocean raises GBP £28 million to fight AI email fraud

AI-written phishing is forcing security teams to rethink email defences as Ocean claims its system already scans more than one billion messages a month.

By Sean Mitchell • 4 min read • Sat, 23rd May 2026

Global Stories

Offensive Security stories

How continuous assurance can strengthen cyber security in the AI era
Hybrid Cloud

How continuous assurance can strengthen cyber security in the AI era

Periodic penetration tests miss most systems, prompting Australian and New Zealand firms to use AI-driven checks for broader coverage and faster risk spotting.

By Gareth Cox • 3 min read • Last month
Synack expands CREST pathways with two new certifications
Data Protection

Synack expands CREST pathways with two new certifications

Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.

By Sean Mitchell • 4 min read • Last month
EC-Council launches Hackers4Humanity to fund training
AI Security

EC-Council launches Hackers4Humanity to fund training

Passes in a sponsored hacking exam will trigger USD $1,000 in training credits for underserved communities, with up to USD $1 million on offer.

By Sofiah Nichole Salivio • 3 min read • Last month
Cyber chiefs trust controls, but few have tested them
Network Security

Cyber chiefs trust controls, but few have tested them

Only 12% of chief information security officers have recently validated controls they expect to stop intruders moving sideways through networks.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Ransomware attacks fall in April as The Gentlemen rise
Malware

Ransomware attacks fall in April as The Gentlemen rise

Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.

By Sofiah Nichole Salivio • 4 min read • Last month
eSentire adds offensive AI features & names cyber chief
Security Operations Centres

eSentire adds offensive AI features & names cyber chief

Security teams face faster attack cycles as eSentire extends Atlas with agentic AI and appoints Ilan Mindel as Chief Cyber Officer.

By Sofiah Nichole Salivio • 4 min read • Last month
Check Point launches AI tool to test exploitability
Cloud Security

Check Point launches AI tool to test exploitability

Security teams could cut alert backlogs as the new system flags only flaws that can be exploited in a specific environment.

By Sean Mitchell • 4 min read • Fri, 29th May 2026
Terra adds continuous testing for network infrastructure
Network Infrastructure

Terra adds continuous testing for network infrastructure

Security teams can now assess network, web and AI weaknesses together as Terra Security broadens continuous validation to infrastructure.

By Mark Tarre • 4 min read • Sat, 23rd May 2026
Exploitation overtakes social engineering in Rapid7 report
Ransomware

Exploitation overtakes social engineering in Rapid7 report

Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.

By Mark Tarre • 3 min read • Fri, 22nd May 2026
TrendAI expands bug bounty to cover AI vulnerabilities
Digital Transformation

TrendAI expands bug bounty to cover AI vulnerabilities

The move widens defences for businesses as AI systems become a bigger target for attackers and zero-day flaws multiply across enterprise software.

By Mark Tarre • 3 min read • Wed, 20th May 2026
AI security training surges as prompt injection tops list
Security Operations Centres

AI security training surges as prompt injection tops list

AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 20th May 2026
Anthropic model can chain bugs into exploits, Cloudflare
Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Tue, 19th May 2026
Synack report says vulnerability testing gap widens
Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • Sat, 16th May 2026
Sweet launches AI red-team agent to test attack paths
Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026
IRONSCALES gets Anthropic verification for email defence
Phishing

IRONSCALES gets Anthropic verification for email defence

Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.

By Sean Mitchell • 4 min read • Fri, 15th May 2026
Microsoft unveils MDASH to find Windows security flaws
Network Security

Microsoft unveils MDASH to find Windows security flaws

The scanner found four critical remote code execution bugs among 16 Windows flaws, including issues in the kernel TCP/IP stack and IKEv2 service.

By Sean Mitchell • 4 min read • Thu, 14th May 2026