Offensive Security Stories

Global Stories

Offensive Security stories

Palo Alto launches continuous AI defence for clients

Attackers are exploiting AI faster than many defences can respond, prompting a shift to continuous testing for hidden exposures.

By Sean Mitchell • 5 min read • Last week

Cloud Security

Proofpoint launches AI security against trusted attacks

Targeted phishing and payment fraud are getting harder to spot as attackers mimic routine business workflows and trusted contacts.

By Mara Sugue • 4 min read • Last week

Malware

AI security incidents expose new criminal tradeoffs

Criminals are increasingly using AI for ransomware and credential theft, while flaws in test models are exposing production systems and data.

By Joseph Gabriel Lagonsin • 5 min read • This month

Security Information and Event Management

Horizon3 links NodeZero to CrowdStrike Falcon SIEM

Security teams can now compare validated exposure findings with endpoint and cloud telemetry after Horizon3 tied NodeZero into CrowdStrike's SIEM.

By Sean Mitchell • 3 min read • This month

Malware

Google warns of AI-powered cyberattacks in live ops

Defenders now have minutes, not hours, as attackers use agentic AI to automate credential theft, scanning and extortion across live operations.

By Sean Mitchell • 5 min read • This month

Ransomware

eSentire teams up with CMS Distribution on MDR push

UK and Ireland resellers gain access to 24/7 threat hunting and incident response as eSentire widens its channel reach through CMS Distribution.

By Joseph Gabriel Lagonsin • 3 min read • This month

Network Security

SentinelOne adds OpenAI GPT-5.6-Cyber to AI services

Security teams could cut manual triage as the new service ranks code and intrusion risks by real-world exploitability, not alert volume.

By Sean Mitchell • 4 min read • This month

Cloud Security

Lasso launches AI guardrail LEAP & raises USD $30m

The funding will help Lasso expand a guardrail designed to inspect AI traffic at scale without costly GPUs, including for US government users.

By Sean Mitchell • 5 min read • This month

Security Information and Event Management

Filigran adds attack chaining to OpenAEV v3 release

Security teams can now trace how one weak point becomes a full breach path as Filigran automates multi-step testing in OpenAEV v3.

By Sean Mitchell • 4 min read • This month

Data Protection

A-LIGN buys Pathfynder in cyber services expansion

The deal gives A-LIGN customers direct access to penetration testing and red teaming as firms seek fewer vendors for cyber compliance and defence.

By Joseph Gabriel Lagonsin • 4 min read • This month

Software-as-a-Service

OpenAI launches GPT-6 Astra for paid ChatGPT users

The rollout will reach paid ChatGPT tiers and developer channels after early testing showed faster task completion, stronger coding and tighter safeguards.

By Sean Mitchell • 4 min read • This month

Network Security

Cybersecurity chiefs warn of evolving insider threats

Trusted employees and AI agents are now seen as prime insider risks, with deepfake fraud and hidden access gaps worsening the threat.

By Sofiah Nichole Salivio • 5 min read • This month

Network Security

AI closes vulnerability window as zero-day exploits surge

Machine-speed discovery is shrinking defenders' lead time, as AI now uncovers obscure flaws and turns them into exploits before patches land.

By Pascal Geenens • 7 min read • This month

Stories from Other Regions

Offensive Security stories

Data Protection

Edinburgh Napier & Approov boost smartphone security

Smartphone apps used for banking and workplace access will face tougher defences as the partners recruit two cybersecurity researchers for a 30-month project.

By Joseph Gabriel Lagonsin • 5 min read • Yesterday

Data Protection

Huntress urges access to frontier AI for cyber defenders

Smaller firms could face more frequent attacks if access to advanced models stays limited to government agencies, Huntress says.

By Mara Sugue • 5 min read • Last week

Disaster Recovery

Greenwich Pacific launches cyber-recovery service for banks

US banks are under pressure to prove systems can be restored quickly as regulators and counterparties demand tested resilience, not paper plans.

By Karen Joy Bacudo • 4 min read • This month

Data Protection

ThreatCanary launches sovereign AI security platform

Australian firms could get a clearer view of AI-driven attack paths as ThreatCanary rolls out a platform blending asset discovery, API checks and offensive testing.

By Sean Mitchell • 4 min read • This month