security testing

Novee puts forgotten internet-facing assets through penetration testing

AI, asset discovery, Don't miss, Hot stuff, News, Novee, penetration testing, security testing, vulnerability management /

Novee puts forgotten internet-facing assets through penetration testing 2026-11-03 at 16:00 By Help Net Security Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) […]

Novee puts forgotten internet-facing assets through penetration testing Read More »

Open-weight AI model GLM-5.3 cheated its way to correct answers

agentic AI, AI, Irregular, News, security testing /

Open-weight AI model GLM-5.3 cheated its way to correct answers 2026-10-30 at 11:23 By Anamarija Pogorelec Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring an LLM’s ability to plan and execute multistage attacks under realistic constraints. The model refused none of the tasks and […]

Open-weight AI model GLM-5.3 cheated its way to correct answers Read More »

Fortinet patches critical FortiOS flaws found with AI help

AI, Don't miss, email security, firewall, Fortinet, Hot stuff, log management, News, security testing, security update, vulnerability, vulnerability disclosure /

Fortinet patches critical FortiOS flaws found with AI help 2026-10-26 at 13:22 By Zeljka Zorz Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 10, 2026. The vulnerabilities were uncovered with the help of AI models […]

Fortinet patches critical FortiOS flaws found with AI help Read More »

Frontier AI cleared every OT attack goal Booz Allen set in its lab

AI, Booz Allen Hamilton, critical infrastructure, cybersecurity, ICS/SCADA, News, report, security testing /

Frontier AI cleared every OT attack goal Booz Allen set in its lab 2026-10-13 at 08:00 By Anamarija Pogorelec Booz Allen set frontier AI models against an isolated industrial-control testbed in its Chantilly, Virginia lab and watched them clear all eight attack objectives it had defined. The Booz Allen frontier AI OT test architecture (Source: […]

Frontier AI cleared every OT attack goal Booz Allen set in its lab Read More »

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to

agentic AI, AI, Anthropic, monitoring, News, OpenAI, security testing, supply chain attacks /

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to 2026-09-29 at 14:41 By Sinisa Markovic OpenAI’s GPT-6 Astra carried out supply chain attacks on software outside the scope of a security test, according to the UK AI Security Institute (AISI). Anatomy of an unsanctioned simulated supply-chain attack (Source: AISI) AISI tested the […]

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to Read More »

AI agent deception moves from theory to reality in UK cyber tests

agentic AI, AISI, Anthropic, Don't miss, Hot stuff, Irregular, LLMs, monitoring, News, OpenAI, security testing /

AI agent deception moves from theory to reality in UK cyber tests 2026-08-05 at 15:05 By Zeljka Zorz “During a routine cyber evaluation, AI agents took sustained, unsanctioned action directed at real people and organisations,” UK’s AI Security Institute (AISI) disclosed on Tuesday. The agents’ actions included an attempted supply-chain attack that saw them create […]

AI agent deception moves from theory to reality in UK cyber tests Read More »

Security teams keep finding critical flaws after scheduled testing ends

AI, cybersecurity, News, penetration testing, report, security ROI, security testing, Synack /

Security teams keep finding critical flaws after scheduled testing ends 2026-07-22 at 08:00 By Anamarija Pogorelec Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilities outside planned testing windows […]

Security teams keep finding critical flaws after scheduled testing ends Read More »

AI shrinks vulnerability exploitation window to hours

agentic AI, AI, cybersecurity, News, report, security testing, Synack, threats, vulnerability management /

AI shrinks vulnerability exploitation window to hours 2026-05-18 at 09:42 By Anamarija Pogorelec Time has become organizations’ biggest vulnerability because the gap between vulnerability discovery and exploitation has narrowed to hours, according to Synack’s 2026 State of Vulnerabilities Report. Total vulnerabilities by severity (2022-2025) (Source: Synack) AI expands the attack surface Agentic AI systems that […]

AI shrinks vulnerability exploitation window to hours Read More »

Testing reveals Claude Mythos’s offensive capabilities and limits

AI, Anthropic, Artificial Intelligence, Cloud Security Alliance, cybersecurity, Don't miss, enterprise, Hot stuff, News, security testing, SMBs, tips /

Testing reveals Claude Mythos’s offensive capabilities and limits 2026-04-14 at 18:15 By Zeljka Zorz Could Claude Mythos Preview, Anthropic’s latest large language model, be leveraged for fully automated cyber attacks? The UK government’s AI Security Institute (AISI) tested its capability to successfully engage in capture-the-flag (CTF) challenges and multi-step attack scenarios, and found that that […]

Testing reveals Claude Mythos’s offensive capabilities and limits Read More »

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities

Application Security, Artificial Intelligence, attacks, Compliance, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, security testing, software development, StackHawk /

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities 2026-02-26 at 07:35 By Mirko Zorz In this Help Net Security interview, Joni Klippert, CEO at StackHawk, discusses what defines DAST coverage in 2026 and why scan completion does not equal security. She explains how AI-driven DAST testing automates attack surface discovery, supports business-logic testing in […]

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities Read More »

The rise of DAST 2.0 in 2025

Application Security, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, security testing, StackHawk /

The rise of DAST 2.0 in 2025 2025-03-18 at 18:02 By Help Net Security Static Application Security Testing (SAST) found favor among security teams as an easy way to deploy security testing without really engaging developers. With the ability to analyze source code early in the software delivery lifecycle, SAST solutions offered a more proactive […]

The rise of DAST 2.0 in 2025 Read More »

Microsoft plans to boot security vendors out of the Windows kernel

antivirus, cyber resilience, Don't miss, Hot stuff, News, security testing, Windows /

Microsoft plans to boot security vendors out of the Windows kernel 2024-11-19 at 20:48 By Zeljka Zorz Microsoft has announced the Windows Resiliency Initiative, aimed at avoiding a repeat of the prolonged worldwide IT outage caused by a buggy CrowdStrike update that took down millions of Windows machines and rendered them remotely unfixable. As part […]

Microsoft plans to boot security vendors out of the Windows kernel Read More »

Essential metrics for effective security program assessment

Compliance, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, penetration testing, Pentera, security controls, security testing, SOC /

Essential metrics for effective security program assessment 2024-09-19 at 07:02 By Mirko Zorz In this Help Net Security interview, Alex Spivakovsky, VP of Research & Cybersecurity at Pentera, discusses essential metrics for evaluating the success of security programs. Spivakovsky explains how automation and proactive testing can reveal vulnerabilities and improve overall security posture. What are […]

Essential metrics for effective security program assessment Read More »

Learning from CrowdStrike’s quality assurance failures

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, security testing, software, update /

Learning from CrowdStrike’s quality assurance failures 2024-07-25 at 13:01 By Help Net Security CrowdStrike has released a preliminary Post Incident Review (PIR) of how the flawed Falcon Sensor update made its way to millions of Windows systems and pushed them into a “Blue Screen of Death” loop. The PIR is a bit confusing to read […]

Learning from CrowdStrike’s quality assurance failures Read More »

How companies increase risk exposure with rushed LLM deployments

cybersecurity, data, Don't miss, Elastic, Features, generative AI, Hot stuff, LLMs, News, opinion, Privacy, security testing /

How companies increase risk exposure with rushed LLM deployments 2024-07-10 at 07:31 By Mirko Zorz In this Help Net Security interview, Jake King, Head of Threat & Security Intelligence at Elastic, discusses companies’ exposure to new security risks and vulnerabilities as they rush to deploy LLMs. King explains how LLMs pose significant risks to data […]

How companies increase risk exposure with rushed LLM deployments Read More »

Finding software flaws early in the development process provides ROI

cybersecurity, Don't miss, Hot stuff, News, Probely, security assessment, security testing, software, software development /

Finding software flaws early in the development process provides ROI 2024-03-29 at 06:31 By Help Net Security Enterprises spend enormous effort fixing software vulnerabilities that make their way into their publicly-facing applications. The Consortium for Information and Software Quality estimates that the cost of poor software quality in the United States reached $2.41 trillion in […]

Finding software flaws early in the development process provides ROI Read More »

Debunking compliance myths in the digital era

auditing, Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, framework, Hot stuff, MJD Advisors, News, opinion, security testing /

Debunking compliance myths in the digital era 2024-03-28 at 08:02 By Help Net Security Despite recent economic fluctuations, the software-as-a-service (SaaS) market isn’t letting up. The industry is set to grow annually by over 18% and be valued at $908.21 billion by 2030. It’s evident the industry is fueled by an increasing reliance on software […]

Debunking compliance myths in the digital era Read More »

10 tips for creating your security hackathon playbook

cybersecurity, Don't miss, Expert analysis, Expert corner, hacking contest, Hot stuff, Intel, News, opinion, product testing, security testing, tips /

10 tips for creating your security hackathon playbook 2024-02-08 at 08:01 By Help Net Security For more than 12 years, I’ve been organizing and running hackathons with the goal of finding security vulnerabilities and fixing them before a product hits the market. These events can play a pivotal role in the product development lifecycle, increasing […]

10 tips for creating your security hackathon playbook Read More »

Introducing the book: Irreducibly Complex Systems

books, cybersecurity, Don't miss, Hot stuff, Prelude, security testing, strategy, Video /

Introducing the book: Irreducibly Complex Systems 13/10/2023 at 06:32 By Help Net Security In this Help Net Security video interview, David Hunt, CTO at Prelude, discusses his book – Irreducibly Complex Systems: An Introduction to Continuous Security Testing. Continuous security testing (CST) is a new strategy for validating cyber defenses. We buy security products that […]

Introducing the book: Irreducibly Complex Systems Read More »

Scroll to Top