Offensive Security Stories

Global Stories

Offensive Security stories

Modified Qwen model underperforms in cyber attack tests

Tracebit found the altered open-weight model reached admin rights far less often than the original, raising doubts about its attack utility.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday

Data Protection

ThreatBook acquires CyberStrikeAI in red team push

The deal gives security teams a widely used AI testing tool with on-premises controls, as vendors race to speed up offensive defence.

By Raphael Veloso • 4 min read • 2 days ago

Cloud Security

TrendAI launches autonomous vulnerability discovery on AWS

The service keeps source code inside customers' AWS environments while using human review to cut false positives and verify fixes.

By Raphael Veloso • 4 min read • 2 days ago

Digital Transformation

Palo Alto launches continuous AI defence for clients

Attackers are exploiting AI faster than many defences can respond, prompting a shift to continuous testing for hidden exposures.

By Sean Mitchell • 5 min read • Last week

Cloud Security

Proofpoint launches AI security against trusted attacks

Targeted phishing and payment fraud are getting harder to spot as attackers mimic routine business workflows and trusted contacts.

By Mara Sugue • 4 min read • Last week

Malware

AI security incidents expose new criminal tradeoffs

Criminals are increasingly using AI for ransomware and credential theft, while flaws in test models are exposing production systems and data.

By Joseph Gabriel Lagonsin • 5 min read • Last month

Security Information and Event Management

Horizon3 links NodeZero to CrowdStrike Falcon SIEM

Security teams can now compare validated exposure findings with endpoint and cloud telemetry after Horizon3 tied NodeZero into CrowdStrike's SIEM.

By Sean Mitchell • 3 min read • Last month

Malware

Google warns of AI-powered cyberattacks in live ops

Defenders now have minutes, not hours, as attackers use agentic AI to automate credential theft, scanning and extortion across live operations.

By Sean Mitchell • 5 min read • Last month

Ransomware

eSentire teams up with CMS Distribution on MDR push

UK and Ireland resellers gain access to 24/7 threat hunting and incident response as eSentire widens its channel reach through CMS Distribution.

By Joseph Gabriel Lagonsin • 3 min read • Last month

Network Security

SentinelOne adds OpenAI GPT-5.6-Cyber to AI services

Security teams could cut manual triage as the new service ranks code and intrusion risks by real-world exploitability, not alert volume.

By Sean Mitchell • 4 min read • Last month

Cloud Security

Lasso launches AI guardrail LEAP & raises USD $30m

The funding will help Lasso expand a guardrail designed to inspect AI traffic at scale without costly GPUs, including for US government users.

By Sean Mitchell • 5 min read • Last month

Security Information and Event Management

Filigran adds attack chaining to OpenAEV v3 release

Security teams can now trace how one weak point becomes a full breach path as Filigran automates multi-step testing in OpenAEV v3.

By Sean Mitchell • 4 min read • Last month

Data Protection

A-LIGN buys Pathfynder in cyber services expansion

The deal gives A-LIGN customers direct access to penetration testing and red teaming as firms seek fewer vendors for cyber compliance and defence.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Offensive Security stories

DevOps

Snyk Evo lifts deals as AI agent security demand surges

Enterprise buyers are spending more to secure AI agents, with Snyk saying Evo now drives 60% of new deals and larger contracts.

By Joseph Gabriel Lagonsin • 5 min read • 4 days ago

Data Protection

Edinburgh Napier & Approov boost smartphone security

Smartphone apps used for banking and workplace access will face tougher defences as the partners recruit two cybersecurity researchers for a 30-month project.

By Joseph Gabriel Lagonsin • 5 min read • 6 days ago

Data Protection

Huntress urges access to frontier AI for cyber defenders

Smaller firms could face more frequent attacks if access to advanced models stays limited to government agencies, Huntress says.

By Mara Sugue • 5 min read • Last week

Disaster Recovery

Greenwich Pacific launches cyber-recovery service for banks

US banks are under pressure to prove systems can be restored quickly as regulators and counterparties demand tested resilience, not paper plans.

By Karen Joy Bacudo • 4 min read • Last month

Data Protection

ThreatCanary launches sovereign AI security platform

Australian firms could get a clearer view of AI-driven attack paths as ThreatCanary rolls out a platform blending asset discovery, API checks and offensive testing.

By Sean Mitchell • 4 min read • Last month