CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

Penetration testing Stories

UK Stories

Penetration testing stories

NCC Group joins Cyber Scheme accredited company programme
IoT Security

NCC Group joins Cyber Scheme accredited company programme

The recognition could help buyers identify cyber providers whose staff meet UK professional standards, amid skills shortages and crowded markets.

By Sean Mitchell • 3 min read • Last week
FPT wins UK Cyber Essentials security certifications
Firewalls

FPT wins UK Cyber Essentials security certifications

The certifications may help reassure UK customers and public-sector buyers as cyber breaches remain widespread and scrutiny of suppliers intensifies.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Global Stories

Penetration testing stories

XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • 4 days ago
Mandiant finds way to recover active ADFS signing keys
Data Protection

Mandiant finds way to recover active ADFS signing keys

Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.

By Mark Tarre • 5 min read • 4 days ago
Why faster AI is exposing slower security thinking
Digital Transformation

Why faster AI is exposing slower security thinking

The real risk is growing backlogs and patching delays, as AI speeds up exploit development faster than security teams can respond.

By Gareth Cox • 5 min read • 5 days ago
Anthropic widens Fable 5 safeguards & rates jailbreaks
Malware

Anthropic widens Fable 5 safeguards & rates jailbreaks

New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.

By Sean Mitchell • 4 min read • Last week
Eleveight AI expands Armenia factory after rapid sell-out
Data Protection

Eleveight AI expands Armenia factory after rapid sell-out

Demand for sovereign AI compute has forced the Gagarin site to expand within weeks, with capacity set to rise to 5MW by year-end.

By Joseph Gabriel Lagonsin • 4 min read • Last week
FlowForma launches FlowAssure for vendor risk checks
Software-as-a-Service

FlowForma launches FlowAssure for vendor risk checks

Vendor reviews could be cut from days to minutes as the new AI tool centralises evidence and automates lower-risk approvals.

By Sean Mitchell • 4 min read • Last week
Five Eyes AI cyber warning prompts calls for faster defence
Security Operations Centres

Five Eyes AI cyber warning prompts calls for faster defence

Attackers are already using AI to exploit flaws faster than many organisations can detect them, Five Eyes agencies warned.

By Mark Tarre • 5 min read • Last week
NCC Group joins OpenAI Daybreak cyber partner programme
Network Infrastructure

NCC Group joins OpenAI Daybreak cyber partner programme

The tie-up gives NCC Group early access to GPT-5.5-Cyber, as OpenAI seeks trusted testers for defensive uses of its cyber tools.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Your annual penetration testing is already out of date
Data Protection

Your annual penetration testing is already out of date

Organisations risk missed exposures as cloud, APIs and AI systems change far faster than annual security checks can keep up.

By Richard Ford • 5 min read • Last month

Stories from Other Regions

Penetration testing stories

Claroty & Frenos launch industrial cyber risk tool
Cybersecurity

Claroty & Frenos launch industrial cyber risk tool

Industrial operators can now test cyber exposures without touching live systems, helping prioritise fixes that could prevent costly downtime.

By Mark Tarre • 4 min read • 2 days ago
CISA uses Anthropic AI to hunt flaws in federal code
Application Security

CISA uses Anthropic AI to hunt flaws in federal code

The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.

By Mark Tarre • 5 min read • 3 days ago
Picus launches AI platform to validate real exploits
Firewalls

Picus launches AI platform to validate real exploits

Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.

By Sean Mitchell • 4 min read • 4 days ago
Skyhawk AI Red Team seizes AWS organisation in seconds
Cloud Security

Skyhawk AI Red Team seizes AWS organisation in seconds

A financial services cloud was taken over in seconds in a test, highlighting how approved permissions can still let attackers reach full AWS control.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Straiker raises USD $64 million to secure AI agents
Software-as-a-Service

Straiker raises USD $64 million to secure AI agents

Enterprise customers face growing risks as autonomous software gains access to internal systems, prompting fresh demand for agent security tools.

By Sean Mitchell • 4 min read • Last week
Cobalt study says automated AI tests miss key flaws
Application Security

Cobalt study says automated AI tests miss key flaws

False negatives from automated scanning tools are fuelling a shift towards human-led AI security testing across large organisations.

By Sofiah Nichole Salivio • 4 min read • Last week