TechDay US - America's technology news network

Offensive Security Stories

American Stories

Offensive Security stories

Skyhawk AI Red Team seizes AWS organisation in seconds
Cloud Security

Skyhawk AI Red Team seizes AWS organisation in seconds

A financial services cloud was taken over in seconds in a test, highlighting how approved permissions can still let attackers reach full AWS control.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Minimus opens full image catalogue without registration
DevOps

Minimus opens full image catalogue without registration

Developers can now pull thousands of hardened container images for free, as the company drops registration and expands access across its library.

By Sean Mitchell • 4 min read • Last month

Global Stories

Offensive Security stories

SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday
OpenAI imposes passkey rule for high-risk ChatGPT users
Data Protection

OpenAI imposes passkey rule for high-risk ChatGPT users

Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.

By Sean Mitchell • 6 min read • 2 days ago
Tracebit says context bombs can derail AI cyber attacks
Cloud Security

Tracebit says context bombs can derail AI cyber attacks

Tests on five models found a planted text string sharply reduced successful AI-led intrusions, cutting full compromise to 1% in an AWS range.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago
Group-IB launches purple teaming service for cyber defences
Ransomware

Group-IB launches purple teaming service for cyber defences

Security teams are being pressed to prove their defences work in live attacks, as spending scrutiny shifts from tools to real-world response.

By Sean Mitchell • 4 min read • 4 days ago
HackerOne joins Anthropic cyber defence AI programme
Software-as-a-Service

HackerOne joins Anthropic cyber defence AI programme

The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.

By Sofiah Nichole Salivio • 4 min read • Last week
Google backs 33 cybersecurity startups in AI shift
Data Protection

Google backs 33 cybersecurity startups in AI shift

New tools for governing AI agents are moving to the fore as Google picks 33 cybersecurity startups for its first cybersecurity forum cohort.

By Sean Mitchell • 4 min read • Last week
XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • Last week
Mandiant finds way to recover active ADFS signing keys
Data Protection

Mandiant finds way to recover active ADFS signing keys

Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.

By Mark Tarre • 5 min read • Last week
Commvault launches AI cyber resilience recovery test
Data Protection

Commvault launches AI cyber resilience recovery test

The two-hour exercise is designed to show whether security teams can recover cleanly as AI-driven attacks can now unfold in minutes.

By Mark Tarre • 4 min read • Last week
Why faster AI is exposing slower security thinking
Digital Transformation

Why faster AI is exposing slower security thinking

The real risk is growing backlogs and patching delays, as AI speeds up exploit development faster than security teams can respond.

By Gareth Cox • 5 min read • Last week
Anthropic AI controversy raises cyber trust concerns
Data Protection

Anthropic AI controversy raises cyber trust concerns

Hidden tracking markers and a US standoff over a vulnerability-finding model are fuelling fears that AI now carries cyber and national security risks.

By Mark Tarre • 4 min read • This month
Hack The Box adds defensive tools for cyber readiness
Security Operations Centres

Hack The Box adds defensive tools for cyber readiness

Security leaders can now map team gaps more precisely as the platform adds crisis simulation, AI coaching and SOC training tools.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Offensive Security stories

ITSEC Asia launches Bronyx AI for automated testing
Data Protection

ITSEC Asia launches Bronyx AI for automated testing

Businesses may get security test results in hours as ITSEC Asia's new platform flags risks and keeps human consultants in the loop.

By Sofiah Nichole Salivio • 4 min read • Yesterday
AI reshapes data & cyber risk for Australian firms
Ransomware

AI reshapes data & cyber risk for Australian firms

Boards are being pushed to rethink data platforms and cyber controls as AI adoption exposes Australian firms to faster attacks and stricter governance demands.

By Sofiah Nichole Salivio • 4 min read • 4 days ago
FPT wins UK Cyber Essentials security certifications
Firewalls

FPT wins UK Cyber Essentials security certifications

The certifications may help reassure UK customers and public-sector buyers as cyber breaches remain widespread and scrutiny of suppliers intensifies.

By Joseph Gabriel Lagonsin • 4 min read • Last month