CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

Threat modelling Stories

UK Stories

Threat modelling stories

Global Stories

Threat modelling stories

Giesecke+Devrient says post-quantum shift is urgent
Data Protection

Giesecke+Devrient says post-quantum shift is urgent

Encrypted data could be exposed years before practical quantum computers arrive, putting identity, telecoms and payments under pressure.

By Sofiah Nichole Salivio • 4 min read • Last week
XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • Last week
Anthropic widens Fable 5 safeguards & rates jailbreaks
Malware

Anthropic widens Fable 5 safeguards & rates jailbreaks

New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.

By Sean Mitchell • 4 min read • This month
Google Cloud uses AI agents to secure software lifecycle
Cloud Security

Google Cloud uses AI agents to secure software lifecycle

Its internal security team says automated agents now speed vulnerability checks, patching and production monitoring as attacks intensify.

By Sean Mitchell • 4 min read • Last month
OpenAI expands Daybreak with patching tools & partners
Network Security

OpenAI expands Daybreak with patching tools & partners

The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.

By Sean Mitchell • 5 min read • Last month
What Swiss Cheese teaches us about choosing MDR
Security Information and Event Management

What Swiss Cheese teaches us about choosing MDR

MDR buyers risk missing attacks if they focus on price and log limits instead of coverage across identities, endpoints and cloud systems.

By David Higgs • 3 min read • Last month
How continuous assurance can strengthen cyber security in the AI era
Hybrid Cloud

How continuous assurance can strengthen cyber security in the AI era

Periodic penetration tests miss most systems, prompting Australian and New Zealand firms to use AI-driven checks for broader coverage and faster risk spotting.

By Gareth Cox • 3 min read • Last month
Hugging Face Transformers flaw enabled remote code
Cloud Security

Hugging Face Transformers flaw enabled remote code

Millions of downloads were exposed to silent code execution as a flaw in Hugging Face Transformers let malicious models run on load.

By Mark Tarre • 3 min read • Last month
Windows 11 sandbox flaw lets attackers escape with one click
Application Security

Windows 11 sandbox flaw lets attackers escape with one click

Microsoft patched a CVE-2025-59199 flaw in October after researchers showed a single click could let low-integrity code escape Windows 11's sandbox.

By Joseph Gabriel Lagonsin • 4 min read • Last month
MIND first data security firm in Anthropic cyber scheme
Data Protection

MIND first data security firm in Anthropic cyber scheme

Broader Claude access should help MIND sharpen data discovery and loss prevention for customers, after it joined Anthropic's cyber scheme.

By Sofiah Nichole Salivio • 3 min read • Sat, 23rd May 2026
OpenSSF adds five members & new security resources
Application Security

OpenSSF adds five members & new security resources

Members are backing tougher open source security as OpenSSF expands guidance on regulation, Python coding and AI-driven vulnerability tools.

By Sofiah Nichole Salivio • 4 min read • Fri, 22nd May 2026
Anthropic model can chain bugs into exploits, Cloudflare
Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Tue, 19th May 2026
Sweet launches AI red-team agent to test attack paths
Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026

Stories from Other Regions

Threat modelling stories

Picus launches AI platform to validate real exploits
Firewalls

Picus launches AI platform to validate real exploits

Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.

By Sean Mitchell • 4 min read • Last week
Skyhawk AI Red Team seizes AWS organisation in seconds
Cloud Security

Skyhawk AI Red Team seizes AWS organisation in seconds

A financial services cloud was taken over in seconds in a test, highlighting how approved permissions can still let attackers reach full AWS control.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Researchers unveil self-testing quantum random chip
Cloud Security

Researchers unveil self-testing quantum random chip

The chip could bolster banking and cloud security by proving its randomness is intact even as hardware ages, drifts or is tampered with.

By Sean Mitchell • 4 min read • Last month
Zapier security chain exposed package publishing risk
Cloud Security

Zapier security chain exposed package publishing risk

A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.

By Mark Tarre • 4 min read • Fri, 29th May 2026