InfrastructureNews New Zealand - Aotearoa's infrastructure news for industry decision-makers
New Zealand

Penetration testing Stories

Global Stories

Penetration testing stories

Fintech growth exposes security & finance weaknesses
Data Protection

Fintech growth exposes security & finance weaknesses

Rising use of digital payments is forcing fintechs to tighten controls as executives warn that weak access, AI and fraud defences are exposing customers.

By Karen Joy Bacudo • 6 min read • 2 days ago
LevelBlue named SentinelOne's Premier remediation partner
Application Security

LevelBlue named SentinelOne's Premier remediation partner

Organisations using Wayfinder Frontier AI Services will now get help turning validated vulnerabilities into prioritised fixes and post-deployment checks.

By Mark Tarre • 4 min read • 2 days ago
BeyondTrust warns identity risks drive most attacks
Hybrid Cloud

BeyondTrust warns identity risks drive most attacks

Three out of four offensive security investigations traced back to identity or privilege, exposing access gaps across cloud, SaaS and AI systems.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago
Horizon3 raises USD $250 million at over USD $2 billion
Software-as-a-Service

Horizon3 raises USD $250 million at over USD $2 billion

The new capital will fund Horizon3's expansion into Asia-Pacific and Europe as demand for its attack-testing software grows among large enterprises.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago
Anthropic says Claude models accessed real systems in tests
Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • 3 days ago
Security leaders warn as AI bot traffic overtakes humans
Robotics

Security leaders warn as AI bot traffic overtakes humans

Automated requests now make up most web traffic, raising costs for sites and sharpening fears over AI-driven fraud and phishing.

By Sean Mitchell • 4 min read • Last week
BreachLock report flags AI, cloud & web logic risks
Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Last week
Microsoft launches AI cyber model to cut security costs
Encryption

Microsoft launches AI cyber model to cut security costs

The new model is designed to halve operating costs for Microsoft's MDASH security system as automated attacks grow cheaper and more frequent.

By Mark Tarre • 3 min read • Last week
HackerOne launches H1 Remediation for faster fixes
Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Last week

Stories from Other Regions

Penetration testing stories

Straiker launches kill switch for enterprise AI agents
Application Security

Straiker launches kill switch for enterprise AI agents

Security teams can now stop rogue enterprise AI agents in seconds as Straiker adds runtime controls to its wider testing platform.

By Sean Mitchell • 4 min read • Today
Reco to brief Black Hat on AI agent security risks
Privileged Access Management

Reco to brief Black Hat on AI agent security risks

Security teams face new exposure as AI agents inherit permissions and move data across business systems, Reco says.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday
AI models breach live systems in cybersecurity tests
Network Security

AI models breach live systems in cybersecurity tests

Security teams face faster, stealthier intrusions after AI agents managed to breach live systems in controlled tests by Anthropic and OpenAI.

By Sofiah Nichole Salivio • 5 min read • 3 days ago
Incode named Gartner leader for third straight year
Software-as-a-Service

Incode named Gartner leader for third straight year

The ranking reinforces Incode's pitch to banks and platforms seeking faster checks as deepfakes and synthetic identities raise fraud risk.

By Joseph Gabriel Lagonsin • 3 min read • Last week
Novee to reveal AI agent & Java flaws at Black Hat
Cloud Security

Novee to reveal AI agent & Java flaws at Black Hat

Security gaps in AI workflows and enterprise Java could expose secrets, trigger remote code execution and disrupt supply chains.

By Sean Mitchell • 4 min read • Last week
eSentire adds email & patch tools to Atlas AI platform
Network Security

eSentire adds email & patch tools to Atlas AI platform

Email-borne attacks can now be tracked alongside endpoint and network threats as eSentire folds patching and response into Atlas AI Platform.

By Mark Tarre • 4 min read • Last week
WorkNest Secure adds continuous vulnerability scanning
Digital Transformation

WorkNest Secure adds continuous vulnerability scanning

Customers can now track security weaknesses in real time, as GuardNest moves beyond annual checks to constant scanning and remediation.

By Mark Tarre • 3 min read • Last week
Sygnia finds AI onboarding flaw exposing client data
Fintech

Sygnia finds AI onboarding flaw exposing client data

A faulty token check let low-privilege users view other applicants' identities, payment details and Social Security numbers in a financial onboarding app.

By Mark Tarre • 4 min read • Last week
PortSwigger launches Burp AT public beta for pentesters
Application Security

PortSwigger launches Burp AT public beta for pentesters

The beta gives pentesters controlled AI assistance inside Burp Suite, with approvals, logging and scope rules still enforced by the platform.

By Sean Mitchell • 4 min read • Last week