How to implement a continuous offensive security testing program 2026-07-08 at 07:30 By Help Net Security The hard part was never finding the exposure. It was deciding what to do about it: whether to patch, mitigate, monitor, or accept, and banking that that decision would still hold tomorrow. A penetration test answers this question for […]
How to implement a continuous offensive security testing program Read More »
Picus Autonomous Exposure Validation Platform validates real-world CVE exploitability 2026-07-07 at 16:31 By Industry News Picus Security has launched the Picus Autonomous Exposure Validation Platform, built for a world where frontier AI has collapsed the time between disclosure and attack. Adversaries now weaponize new CVEs in hours, against a backdrop of around 132 published every
Picus Autonomous Exposure Validation Platform validates real-world CVE exploitability Read More »
Why you need BAS and autonomous pentesting together 2026-06-02 at 09:09 By Help Net Security Most security teams know the drill: A new autonomous penetration testing tool gets deployed, and the first run is genuinely impressive. The dashboard surfaces critical findings, maps lateral movement paths nobody had documented before, and exposes a legacy service account
Why you need BAS and autonomous pentesting together Read More »
You don’t have to choose between BAS or automated pentesting, you shouldn’t 2026-03-25 at 08:07 By Help Net Security There’s a debate making the rounds in security circles that sounds reasonable on the surface but falls apart under operational scrutiny: Which is better, breach and attack simulation (BAS) or automated penetration testing (APT)? Security vendors
You don’t have to choose between BAS or automated pentesting, you shouldn’t Read More »
New infosec products of the week: October 17, 2025 2025-10-17 at 07:17 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from Aura, Bitsight, Blumira, Cayosoft, Corelight, Netcraft, and Picus Security. Picus Security uses AI to turn threat intelligence into attack simulations Picus Security launched new AI-powered
New infosec products of the week: October 17, 2025 Read More »
Picus Security uses AI to turn threat intelligence into attack simulations 2025-10-14 at 17:03 By Industry News Picus Security launched new AI-powered breach and attack simulation (BAS) capabilities within the Picus Security Validation Platform. This introduces a new level of speed and intelligence, enabling security teams to create and simulate complex attack scenarios, validate the
Picus Security uses AI to turn threat intelligence into attack simulations Read More »
Security validation: The key to maximizing ROI from security investments 2025-10-14 at 08:00 By Help Net Security Every sizable organization invests heavily in firewalls, SIEMs, EDRs, and countless other technologies that form the backbone of a modern enterprise’s cyber defenses. Yet despite these significant investments, attackers continue to exploit misconfigurations, untested rules, and hidden dependencies
Security validation: The key to maximizing ROI from security investments Read More »
Webinar: The BAS Summit 2025: Redefining Attack Simulation through AI 2025-09-30 at 15:00 By Help Net Security Join Picus Security, SANS, Hacker Valley, and leading CISOs at The BAS Summit 2025 to learn how AI is redefining Breach and Attack Simulation (BAS) and why it’s becoming the new benchmark for cyber resilience. Attend the webinar
Webinar: The BAS Summit 2025: Redefining Attack Simulation through AI Read More »
Fixing silent failures in security controls with adversarial exposure validation 2025-09-10 at 08:16 By Help Net Security Organizations often operate as if their security controls are fully effective simply because they’re deployed, configured, and monitored. Firewalls are in place, endpoints are protected, and SIEM rules are running. All good, right? Not so fast. Appearances can
Fixing silent failures in security controls with adversarial exposure validation Read More »
Weak alerting and slipping prevention raise risk levels for CISOs 2025-08-18 at 07:47 By Mirko Zorz Prevention effectiveness is falling, detection gaps remain wide, and attackers are exploiting weaknesses in data protection and credentials. Data theft prevention has dropped to 3 percent, password cracking success rates have nearly doubled, and new threat groups are bypassing
Weak alerting and slipping prevention raise risk levels for CISOs Read More »
Photos: Black Hat USA 2025 2025-08-07 at 11:38 By Help Net Security Here’s a look inside Black Hat USA 2025. The featured vendors are: Stellar Cyber, Vonahi Security, Gurucul, Check Point, HackerOne, EasyDMARC, Elastic, Google, Tines, Veracode, VioletX, Pentera, Keep Aware, Oleria, SpyCloud, Trend Micro and Picus Security. The post Photos: Black Hat USA 2025
Photos: Black Hat USA 2025 Read More »
Picus provides automated pentesting testing to help uncover critical risks 2024-12-11 at 11:18 By Industry News Picus Security announced new innovations to its Attack Path Validation (APV) product. The new Picus APV now offers security teams accurate, risk-free, and continuous automated penetration testing to uncover critical risks, while significantly reducing business disruptions and time spent
Picus provides automated pentesting testing to help uncover critical risks Read More »
Picus Security raises $45 million to help organizations reduce cyber risk 2024-09-19 at 15:31 By Industry News Picus Security announced it has closed a $45 million growth investment round led by Riverwood Capital with the participation of existing investor Earlybird Digital East Fund, bringing Picus’ total funds raised to $80 million. Picus has over 500
Picus Security raises $45 million to help organizations reduce cyber risk Read More »
Organizations fail to log 44% of cyber attacks, major exposure gaps remain 2024-08-02 at 07:31 By Help Net Security 40% of tested environments allowed attack paths that lead to domain admin access, according to Picus Security. Achieving domain admin access is particularly concerning because it is the highest level of access within an organization’s IT
Organizations fail to log 44% of cyber attacks, major exposure gaps remain Read More »
Picus Security introduces security validation for Kubernetes 2024-05-24 at 11:04 By Industry News Picus Security announced security validation for Kubernetes. This new capability allows Security and DevOps teams to realize the benefits of containers securely by proactively measuring and optimizing the resilience of clusters. It is the latest innovative addition to the Picus Security Validation
Picus Security introduces security validation for Kubernetes Read More »
Picus Security helps organizations reduce their threat exposure with AI-driven insights 2024-04-03 at 16:31 By Industry News Picus Security announced Picus Numi AI. As the latest innovation of the Picus Security Validation Platform, this generative AI security analyst empowers any member of a security team to access critical, up-to-date information about their security posture to
Picus Security helps organizations reduce their threat exposure with AI-driven insights Read More »
Understanding the tactics of stealthy hunter-killer malware 2024-02-15 at 06:31 By Help Net Security Picus Security has revealed a rise in hunter-killer malware, highlighting a significant shift in adversaries’ capability to pinpoint and thwart advanced enterprise defenses, including next-gen firewalls, antivirus programs, and EDR systems. There was a 333% increase in malware that can actively
Understanding the tactics of stealthy hunter-killer malware Read More »
Picus Security unveils new capabilities to give security teams full context of their attack surface 10/11/2023 at 15:01 By Industry News Picus Security announced the addition of Picus Attack Surface Validation and AI-driven threat profiling to the Picus Security Validation Platform. The new capabilities give security teams full context of their attack surface so they
Flaw in Revolut payment systems exploited to steal $20 million 10/07/2023 at 17:05 By Zeljka Zorz Organized criminal groups exploited a flaw in Revolut’s payment systems and made off with $20+ million of the company’s money, the Financial Times reported on Sunday, citing people with knowledge of the situation. Revolut’s cybersecurity troubles Revolut is a
Flaw in Revolut payment systems exploited to steal $20 million Read More »