Offensive Security Stories - Page 3

American Stories

Offensive Security stories

Secure.com flags 21 flaws in AI pentest on live stacks

Seven critical weaknesses were found in live production systems over a weekend, showing AI-driven pentests can now uncover basic flaws cheaply.

By Mark Tarre • 5 min read • Fri, 1st May 2026

Global Stories

Offensive Security stories

Ransomware

Exploitation overtakes social engineering in Rapid7 report

Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.

By Mark Tarre • 3 min read • Fri, 22nd May 2026

Digital Transformation

TrendAI expands bug bounty to cover AI vulnerabilities

The move widens defences for businesses as AI systems become a bigger target for attackers and zero-day flaws multiply across enterprise software.

By Mark Tarre • 3 min read • Wed, 20th May 2026

Security Operations Centres

AI security training surges as prompt injection tops list

AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 20th May 2026

Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Tue, 19th May 2026

Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • Sat, 16th May 2026

Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026

Phishing

IRONSCALES gets Anthropic verification for email defence

Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.

By Sean Mitchell • 4 min read • Fri, 15th May 2026

Network Security

Microsoft unveils MDASH to find Windows security flaws

The scanner found four critical remote code execution bugs among 16 Windows flaws, including issues in the kernel TCP/IP stack and IKEv2 service.

By Sean Mitchell • 4 min read • Thu, 14th May 2026

Digital Transformation

CyberCX report finds 29% of tests exposed severe flaws

AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.

By Sean Mitchell • 4 min read • Wed, 13th May 2026

Data Protection

Synack launches Sara AI Pentesting for wider coverage

The move aims to widen security coverage as firms struggle to test expanding attack surfaces quickly enough.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 8th May 2026

Endpoint Protection

CrowdStrike widens QuiltWorks & launches Defender hunting

Enterprises using Microsoft Defender will get round-the-clock human-led threat hunting, as CrowdStrike also broadens its AI risk coalition across partners.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 6th May 2026