CMOtech UK - Technology news for CMOs & marketing decision-makers
United Kingdom

Penetration testing Stories - Page 8

UK Stories

Penetration testing stories

WorkNest launches Secure division with Pentest People
Data Protection

WorkNest launches Secure division with Pentest People

Customers get a single cyber and compliance service as WorkNest folds Pentest People and Bulletproof into a new security division.

By Sean Mitchell • 3 min read • Wed, 13th May 2026
Cybersecurity has a speed problem
DevOps

Cybersecurity has a speed problem

Vulnerability exploitation has collapsed from years to hours, leaving organisations racing to fix exposed systems before attackers do.

By Jorge Monteiro • 4 min read • Thu, 7th May 2026
Lloyds, Google & Hack The Box host UK finance hackathon
DevOps

Lloyds, Google & Hack The Box host UK finance hackathon

Banks and fintechs are being pushed to sharpen cyber defences as AI threats and operational knock-on effects test the UK payments system.

By Karen Joy Bacudo • 4 min read • Thu, 7th May 2026

Global Stories

Penetration testing stories

Synack report says vulnerability testing gap widens
Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • Sat, 16th May 2026
Outer Hebrides cyber firm wins Scotland tech award
Supply Chain

Outer Hebrides cyber firm wins Scotland tech award

The award puts a remote island cyber specialist in the national spotlight as firms seek more help against rising attacks.

By Mark Tarre • 3 min read • Fri, 15th May 2026
HackerOne links validated flaws to Wiz cloud platform
Digital Transformation

HackerOne links validated flaws to Wiz cloud platform

Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026
HackerOne & Wiz link validated findings to cloud risk
Digital Transformation

HackerOne & Wiz link validated findings to cloud risk

Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.

By Sofiah Nichole Salivio • 3 min read • Fri, 15th May 2026
Sweet launches AI red-team agent to test attack paths
Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026
IRONSCALES gets Anthropic verification for email defence
Phishing

IRONSCALES gets Anthropic verification for email defence

Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.

By Sean Mitchell • 4 min read • Fri, 15th May 2026
Integrated Quantum launches Kaggle test of VEIL anonymity
Data Protection

Integrated Quantum launches Kaggle test of VEIL anonymity

The public test could bolster or undermine claims that VEIL can anonymise sensitive AI data without letting outsiders recover the original records.

By Sean Mitchell • 4 min read • Fri, 15th May 2026
Google says AI-powered cyberattacks are already here
Malware

Google says AI-powered cyberattacks are already here

AI is now being used to write exploits and malware, with Google saying it has traced the first zero-day linked to machine assistance.

By Joseph Gabriel Lagonsin • 5 min read • Thu, 14th May 2026
CyberCX report finds 29% of tests exposed severe flaws
Digital Transformation

CyberCX report finds 29% of tests exposed severe flaws

AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.

By Sean Mitchell • 4 min read • Wed, 13th May 2026
Microsoft patches 137 flaws, including critical Netlogon
Network Infrastructure

Microsoft patches 137 flaws, including critical Netlogon

Domain controllers face urgent patching after a Netlogon flaw was rated 9.8, with no privileges or user interaction needed for exploitation.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 13th May 2026
AI drives ransomware surge, experts urge faster defence
Malware

AI drives ransomware surge, experts urge faster defence

Experts say AI is accelerating ransomware attacks, shrinking the patching window and forcing organisations to overhaul defences and recovery plans.

By Sofiah Nichole Salivio • 6 min read • Tue, 12th May 2026
AI now routine in cyber attacks, Google report finds
Malware

AI now routine in cyber attacks, Google report finds

Security teams face a broader threat as criminals and state-backed actors use generative AI to speed hacks, phishing and malware.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 12th May 2026
OpenAI launches GPT-5.5-Cyber for vetted defenders
Firewalls

OpenAI launches GPT-5.5-Cyber for vetted defenders

Vetted security teams will get fewer refusals on authorised tasks as OpenAI tightens access around its most permissive cyber model.

By Mark Tarre • 4 min read • Fri, 8th May 2026
Synack launches Sara AI Pentesting for wider coverage
Data Protection

Synack launches Sara AI Pentesting for wider coverage

The move aims to widen security coverage as firms struggle to test expanding attack surfaces quickly enough.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 8th May 2026
Strike Graph launches Trust Chain for supplier risk
Data Protection

Strike Graph launches Trust Chain for supplier risk

Vendor assessments could be completed faster and with less manual chasing as the new tool verifies evidence rather than self-reported answers.

By Sofiah Nichole Salivio • 4 min read • Thu, 7th May 2026