CFOtech US - Technology news for CFOs & financial decision-makers
United States

Offensive Security Stories

American Stories

Offensive Security stories

Synack study finds major blind spots in security testing
Data Protection

Synack study finds major blind spots in security testing

Fast-moving corporate systems are outpacing scheduled checks, leaving many firms with security gaps that can persist for days or weeks.

By Sean Mitchell • 4 min read • 3 days ago
CISA uses Anthropic AI to hunt flaws in federal code
Application Security

CISA uses Anthropic AI to hunt flaws in federal code

The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.

By Mark Tarre • 5 min read • This month

Global Stories

Offensive Security stories

OpenAI AI model escapes test rig in Hugging Face hack
Cloud Security

OpenAI AI model escapes test rig in Hugging Face hack

The breach shows frontier AI can slip its sandbox and probe production systems, raising fresh concerns over containment and oversight.

By Sofiah Nichole Salivio • 7 min read • Yesterday
Old flaw leaves Wansview camera exposing credentials
Data Protection

Old flaw leaves Wansview camera exposing credentials

Consumers could have had passwords and cloud tokens exposed from a low-cost indoor camera, after researchers found a flaw first disclosed in 2002.

By Sofiah Nichole Salivio • 4 min read • 3 days ago
ASC-IT launches Darkmoon for private AI pentesting
Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • 5 days ago
Google Cloud sets out AI security plan with Gemini & Wiz
Cloud Security

Google Cloud sets out AI security plan with Gemini & Wiz

Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.

By Mark Tarre • 4 min read • Last week
SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Last week
OpenAI imposes passkey rule for high-risk ChatGPT users
Data Protection

OpenAI imposes passkey rule for high-risk ChatGPT users

Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.

By Sean Mitchell • 6 min read • Last week
Tracebit says context bombs can derail AI cyber attacks
Cloud Security

Tracebit says context bombs can derail AI cyber attacks

Tests on five models found a planted text string sharply reduced successful AI-led intrusions, cutting full compromise to 1% in an AWS range.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Group-IB launches purple teaming service for cyber defences
Ransomware

Group-IB launches purple teaming service for cyber defences

Security teams are being pressed to prove their defences work in live attacks, as spending scrutiny shifts from tools to real-world response.

By Sean Mitchell • 4 min read • Last week
HackerOne joins Anthropic cyber defence AI programme
Software-as-a-Service

HackerOne joins Anthropic cyber defence AI programme

The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.

By Sofiah Nichole Salivio • 4 min read • This month
Google backs 33 cybersecurity startups in AI shift
Data Protection

Google backs 33 cybersecurity startups in AI shift

New tools for governing AI agents are moving to the fore as Google picks 33 cybersecurity startups for its first cybersecurity forum cohort.

By Sean Mitchell • 4 min read • This month
XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • This month
Mandiant finds way to recover active ADFS signing keys
Data Protection

Mandiant finds way to recover active ADFS signing keys

Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.

By Mark Tarre • 5 min read • This month

Stories from Other Regions

Offensive Security stories

Intruder launches AI pentesting for web apps on demand
Cloud Security

Intruder launches AI pentesting for web apps on demand

Smaller firms can now run web app pentests in hours, as Intruder's AI service cuts costs to a fraction of manual reviews.

By Sean Mitchell • 4 min read • Last week
ITSEC Asia launches Bronyx AI for automated testing
Data Protection

ITSEC Asia launches Bronyx AI for automated testing

Businesses may get security test results in hours as ITSEC Asia's new platform flags risks and keeps human consultants in the loop.

By Sofiah Nichole Salivio • 4 min read • Last week
AI reshapes data & cyber risk for Australian firms
Ransomware

AI reshapes data & cyber risk for Australian firms

Boards are being pushed to rethink data platforms and cyber controls as AI adoption exposes Australian firms to faster attacks and stricter governance demands.

By Sofiah Nichole Salivio • 4 min read • Last week