Penetration testing stories

Hackers are abandoning noisy ransomware to quietly steal data, as a report finds 80% of top attack techniques now focus on evasion.

Fime opens a Melbourne software security lab to certify rising SoftPOS payments under PCI MPoC, targeting booming NFC mobile acceptance growth.

Cyber firms warned over ‘verification crisis’ as tools flag floods of flaws but only 0.47% prove exploitable, leaving real risk unresolved.

Bitget and BlockSec launch a UEX Security Standard, urging provable, system-wide safeguards for unified multi-asset trading platforms.

SpecterOps has launched BloodHound Scentry, a managed identity risk service to find and remediate attack paths across complex environments.

Cowbell and Zurich roll out Prime One cyber cover for Australian SMEs, targeting firms up to AUD $100 million turnover with rapid broker access.

SYTECH’s two-day virtual workshop with Futures For All introduces 141 global pupils to digital forensics and online safety careers.

Flare reports 114% annual growth among MSSPs as providers consolidate threat intelligence tools to boost services without extra analyst strain.

ENCS and DIVD have agreed a new cyber pact to uncover and disclose vulnerabilities in Europe’s high-impact energy and critical systems.

Canada’s investment watchdog has unveiled a tiered crypto custody regime, tying asset limits to custodians’ capital, tech controls and oversight.

Routine admin tools, not exotic exploits, let attackers race across networks, compromising over half of systems in under an hour.

Lateral movement now eclipses zero-day exploits as the top cyber risk, Zero Networks warns, with attacks able to hit 60% of systems in an hour.

Netpoleon partners with Hack The Box to deliver hands-on cyber skills training and readiness tools to address ANZ’s growing security gap.

AI-fuelled cyberattacks overwhelm defenders as false positives swamp security teams and critical threats slip through in 2026, Hadrian warns.

AI security fears and rapid release cycles are pushing firms to demand faster, deeper pentesting - and many are ready to ditch existing vendors.

HackerOne launches Agentic PTaaS, blending AI agents with human experts to deliver continuous, always-on penetration testing for enterprises.

AI-driven cloud adoption is forcing firms to swap static privacy checklists for continuous, real-time defence of sensitive data flows.

A critical flaw in Apache bRPC’s /pprof/heap endpoint allows unauthenticated remote code execution on exposed services, researchers warn.

Glasgow cyber security provider Acumen Cyber appoints veteran strategist Derek Whigham to its board to steer UK growth and services.

New UK cyber bill pushes critical sectors towards continuous offensive security testing as state-backed and criminal threats intensify.