CFOtech Asia - Technology news for CFOs & financial decision-makers
Asia

Offensive Security Stories

Global Stories

Offensive Security stories

Synack expands CREST pathways with two new certifications
Data Protection

Synack expands CREST pathways with two new certifications

Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.

By Sean Mitchell • 4 min read • 4 days ago
EC-Council launches Hackers4Humanity to fund training
AI Security

EC-Council launches Hackers4Humanity to fund training

Passes in a sponsored hacking exam will trigger USD $1,000 in training credits for underserved communities, with up to USD $1 million on offer.

By Sofiah Nichole Salivio • 3 min read • 5 days ago
Cyber chiefs trust controls, but few have tested them
Network Security

Cyber chiefs trust controls, but few have tested them

Only 12% of chief information security officers have recently validated controls they expect to stop intruders moving sideways through networks.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Ransomware attacks fall in April as The Gentlemen rise
Malware

Ransomware attacks fall in April as The Gentlemen rise

Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.

By Sofiah Nichole Salivio • 4 min read • Last week
eSentire adds offensive AI features & names cyber chief
Security Operations Centres

eSentire adds offensive AI features & names cyber chief

Security teams face faster attack cycles as eSentire extends Atlas with agentic AI and appoints Ilan Mindel as Chief Cyber Officer.

By Sofiah Nichole Salivio • 4 min read • Last week
Check Point launches AI tool to test exploitability
Cloud Security

Check Point launches AI tool to test exploitability

Security teams could cut alert backlogs as the new system flags only flaws that can be exploited in a specific environment.

By Sean Mitchell • 4 min read • Last month
Terra adds continuous testing for network infrastructure
Network Infrastructure

Terra adds continuous testing for network infrastructure

Security teams can now assess network, web and AI weaknesses together as Terra Security broadens continuous validation to infrastructure.

By Mark Tarre • 4 min read • Last month
Exploitation overtakes social engineering in Rapid7 report
Ransomware

Exploitation overtakes social engineering in Rapid7 report

Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.

By Mark Tarre • 3 min read • Last month
TrendAI expands bug bounty to cover AI vulnerabilities
Digital Transformation

TrendAI expands bug bounty to cover AI vulnerabilities

The move widens defences for businesses as AI systems become a bigger target for attackers and zero-day flaws multiply across enterprise software.

By Mark Tarre • 3 min read • Last month
AI security training surges as prompt injection tops list
Security Operations Centres

AI security training surges as prompt injection tops list

AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Anthropic model can chain bugs into exploits, Cloudflare
Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Last month
Synack report says vulnerability testing gap widens
Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • Last month
Sweet launches AI red-team agent to test attack paths
Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • Last month
IRONSCALES gets Anthropic verification for email defence
Phishing

IRONSCALES gets Anthropic verification for email defence

Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.

By Sean Mitchell • 4 min read • Last month
Microsoft unveils MDASH to find Windows security flaws
Network Security

Microsoft unveils MDASH to find Windows security flaws

The scanner found four critical remote code execution bugs among 16 Windows flaws, including issues in the kernel TCP/IP stack and IKEv2 service.

By Sean Mitchell • 4 min read • Last month
CyberCX report finds 29% of tests exposed severe flaws
Digital Transformation

CyberCX report finds 29% of tests exposed severe flaws

AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.

By Sean Mitchell • 4 min read • Last month

Stories from Other Regions

Offensive Security stories

UltraViolet Cyber launches Solstice AI pentesting platform
Application Security

UltraViolet Cyber launches Solstice AI pentesting platform

The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Ocean raises GBP £28 million to fight AI email fraud
Data Protection

Ocean raises GBP £28 million to fight AI email fraud

AI-written phishing is forcing security teams to rethink email defences as Ocean claims its system already scans more than one billion messages a month.

By Sean Mitchell • 4 min read • Last month