CFOtech Canada - Technology news for CFOs & financial decision-makers
Canada

Penetration testing Stories - Page 4

Global Stories

Penetration testing stories

OpenAI & Hugging Face probe AI cyber security incident
AI Security

OpenAI & Hugging Face probe AI cyber security incident

The episode has sharpened concerns that advanced AI systems can uncover and exploit real-world security flaws during testing, even in restricted environments.

By Mark Tarre • 4 min read • Last month
Google makes CodeMender available in its Gemini security models
Private Cloud

Google makes CodeMender available in its Gemini security models

Developers may get patched code faster as Google's preview agent scans repositories, tests exploits and drafts fixes for review.

By Mark Tarre • 4 min read • Last month
ASC-IT launches Darkmoon for private AI pentesting
Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • Last month
FIS joins Anthropic cyber security project with Mythos 5
Fintech

FIS joins Anthropic cyber security project with Mythos 5

For thousands of banks and payments firms, the trial could help spot software flaws before they disrupt critical financial systems.

By Karen Joy Bacudo • 4 min read • Last month
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last month
Google Cloud sets out AI security plan with Gemini & Wiz
Cloud Security

Google Cloud sets out AI security plan with Gemini & Wiz

Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.

By Mark Tarre • 4 min read • Last month
Filigran warns AI security needs tighter human oversight
Data Protection

Filigran warns AI security needs tighter human oversight

Rising automation could speed cyber defence, but Filigran says security teams must keep humans in the loop as agentic AI spreads.

By Sofiah Nichole Salivio • 7 min read • Last month
SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Last month
AI deserves our appreciation, but only if we're honest about what we're appreciating
Malware

AI deserves our appreciation, but only if we're honest about what we're appreciating

AI is speeding up attacks as well as defence, with high-risk prompts and unsupervised agents exposing firms to new security gaps.

By Robert Falzon • 4 min read • Last month
Security leaders urge governance as AI reshapes defence
Data Protection

Security leaders urge governance as AI reshapes defence

Boards face rising pressure to control shadow AI as attackers automate faster and security teams shift to continuous verification.

By Sean Mitchell • 7 min read • Last month
OpenAI imposes passkey rule for high-risk ChatGPT users
Data Protection

OpenAI imposes passkey rule for high-risk ChatGPT users

Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.

By Sean Mitchell • 6 min read • Last month
Tracebit says context bombs can derail AI cyber attacks
Cloud Security

Tracebit says context bombs can derail AI cyber attacks

Tests on five models found a planted text string sharply reduced successful AI-led intrusions, cutting full compromise to 1% in an AWS range.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Proofpoint spots Entra ID spoofing attack technique
Network Security

Proofpoint spots Entra ID spoofing attack technique

Attackers can now probe Entra ID accounts and passwords at scale without a real app, leaving defenders with little sign-in telemetry.

By Sean Mitchell • 4 min read • Last month

Stories from Other Regions

Penetration testing stories

Intruder launches AI web app pentesting at lower cost
Cloud Security

Intruder launches AI web app pentesting at lower cost

Security teams could cut testing delays to hours as Intruder's AI tool scans web apps for flaws from source code access.

By Sean Mitchell • 4 min read • Last month
ITSEC Asia launches Bronyx AI for automated testing
Data Protection

ITSEC Asia launches Bronyx AI for automated testing

Businesses may get security test results in hours as ITSEC Asia's new platform flags risks and keeps human consultants in the loop.

By Sofiah Nichole Salivio • 4 min read • Last month
UK banks face stealth cyber attacks, SonicWall says
Data Protection

UK banks face stealth cyber attacks, SonicWall says

Banks are seeing attackers favour stealthy access over ransomware, with a UK-specific exploit hitting nearly half of monitored sensors.

By Karen Joy Bacudo • 3 min read • Last month
AI reshapes data & cyber risk for Australian firms
Ransomware

AI reshapes data & cyber risk for Australian firms

Boards are being pushed to rethink data platforms and cyber controls as AI adoption exposes Australian firms to faster attacks and stricter governance demands.

By Sofiah Nichole Salivio • 4 min read • Last month
AI trust & governance seen as key to safe adoption
Data Protection

AI trust & governance seen as key to safe adoption

As AI spreads through core business functions, executives warn weak oversight could expose firms to deepfakes, fraud and costly incidents.

By Sofiah Nichole Salivio • 5 min read • Last month