Automated penetration testing

ai_AdobeStock_1088480696

Security Operations

AI/ML

Brief

Escape Technologies raises $18 million for AI-powered security platform

Penetration Testing

Novee cyber security launches with $51.5 million for AI-powered penetration testing

A robot pen tester sits in front of several computer screens, hoodie on, several cans of energy drinks on the desk.

robot-pen-tester-socialsightai

Vulnerability Management

Resource

Horizon3.ai

From scanner noise to verified fixes: How NodeZero MCP powers agentic AI in RBVM

ai_AdobeStock_1527964115

Patch/Configuration Management

Threat Intelligence

Exposure management

News

HexStrike AI pentesting framework abused to exploit Citrix vulnerabilities

Heroic figure lifting flaming sword to cut through mass of gibberish.

cutting-through-noise-socialsightai

Risk Identification/Classification/Mitigation

Redefining risk-based vulnerability management: Cutting through the noise to what matters most

<body>Interview with Snehal Antani - Rethinking Risk-Based Vulnerability Management</body>

<body><h3>Interview with Snehal Antani - Rethinking Risk-Based Vulnerability Management</h3></body>

<body>Vulnerability management is broken. Organizations basically use math to turn a crappy list into a slightly less crappy list, and the hardest part of the job as a CIO is deciding what NOT to fix. There has to be a better way, and there is...</body>

<body><p>Vulnerability management is broken. Organizations basically use math to turn a crappy list into a slightly less crappy list, and the hardest part of the job as a CIO is deciding what NOT to fix. There has to be a better way, and there is...</p></body>


<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://horizon3.ai/intelligence/blogs/vulnerability-management-is-broken-there-is-a-better-way/">https://horizon3.ai/intelligence/blogs/vulnerability-management-is-broken-there-is-a-better-way/</a></li>
</ul>


<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://horizon3.ai/intelligence/blogs/vulnerability-management-is-broken-there-is-a-better-way/">https://horizon3.ai/intelligence/blogs/vulnerability-management-is-broken-there-is-a-better-way/</a></li></ul></body>

<body>This segment is sponsored by Horizon3.ai. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/horizon3">https://securityweekly.com/horizon3</a> to learn more about them!</body>

<body><p>This segment is sponsored by Horizon3.ai. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/horizon3">https://securityweekly.com/horizon3</a> to learn more about them!</p></body>

<body>Topic - Andy Ellis's Black Hat Expo Experience</body>

<body><h3>Topic - Andy Ellis's Black Hat Expo Experience</h3></body>

<body>Andy Ellis visited every booth at Black Hat. Every. Single. One. He wrote up what he learned and we discuss his findings!</body>

<body><p>Andy Ellis visited every booth at Black Hat. Every. Single. One. He wrote up what he learned and we discuss his findings!</p></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.duha.co/state-of-security-vendors-blackhat-2025/">https://www.duha.co/state-of-security-vendors-blackhat-2025/</a></body>

<body><p><a rel="noreferrer noopener" target="_blank" href="https://www.duha.co/state-of-security-vendors-blackhat-2025/">https://www.duha.co/state-of-security-vendors-blackhat-2025/</a></p></body>

<body>Finally, in the enterprise security news,</body>

<body><p>Finally, in the enterprise security news, </p></body>


<ol class="wp-block-list">
<li>Tons of handy new and free tools!</li>


<li>is cybersecurity really at the latter stages of consolidation?</li>


<li>new books</li>


<li>is our obsession with risk quantification hurting our credibility?</li>


<li>AI trends</li>


<li>is there an impending AI layoff-pocalypse?</li>


<li>we explain the kids’ favorite new term: Clanker</li>
</ol>


<body><ol><li>Tons of handy new and free tools!</li><li>is cybersecurity really at the latter stages of consolidation?</li><li>new books</li><li>is our obsession with risk quantification hurting our credibility?</li><li>AI trends</li><li>is there an impending AI layoff-pocalypse?</li><li>we explain the kids’ favorite new term: Clanker</li></ol></body>

<body>All that and more, on this episode of Enterprise Security Weekly.</body>

<body><p>All that and more, on this episode of Enterprise Security Weekly.</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14162″} podcast from PPWorks

Rethinking risk based vulnerability management, Black Hat expo insights, and the news – Snehal Antani – ESW #420

Robotic spiders invade circuit board; digital attack background

Risk Assessments/Management

Security tools aren’t enough: Why you don’t know if your defenses actually work (and what to do about it)

<body>Penetration tests are probably the most common and recognized cybersecurity consulting services. Nearly every business above a certain size has had at least one pentest by an external firm.</body>

<body><p>Penetration tests are probably the most common and recognized cybersecurity consulting services. Nearly every business above a certain size has had at least one pentest by an external firm.</p></body>

<body>Here's the thing, though - the average ransomware attack looks an awful lot like the bog standard pentest we've all been purchasing or delivering for years. Yet thousands of orgs every year fall victim to these attacks. What's going on here? Why are we so bad at stopping the very thing we've been training against for so long?</body>

<body><p>Here's the thing, though - the average ransomware attack looks an awful lot like the bog standard pentest we've all been purchasing or delivering for years. Yet thousands of orgs every year fall victim to these attacks. What's going on here? Why are we so bad at stopping the very thing we've been training against for so long?</p></body>

<body>This Interview with Phillip Wylie will provide some insight into this! Spoiler: a lot of the issues we had 10, even 15 years ago remain today.</body>

<body><p>This Interview with Phillip Wylie will provide some insight into this! Spoiler: a lot of the issues we had 10, even 15 years ago remain today.</p></body>


<ul class="wp-block-list">
<li>Phillip's talk, <a rel="noopener" target="_blank" href="https://www.youtube.com/watch?v=dyWl8CTOChQ">Optimal Offensive Security Programs</a> from Dia de los Hackers last fall</li>
</ul>


<body><ul><li>Phillip's talk, <a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=dyWl8CTOChQ">Optimal Offensive Security Programs</a> from Dia de los Hackers last fall</li></ul></body>