Penetration Testing

University of Pittsburgh researchers tested the efficacy of AI diagnosis models in detecting manipulated images and found they couldn’t spot the fake, producing a wrong diagnosis.

Nine out of 10 respondents to CRA survey say purple teams “very effective” in defending against ransomware and other advanced attacks.

Mitre Engenuity previewed its new ATT&CK Adversary Emulation Fundamentals Certification program — and SC Media was there to sit through the course’s first module.

Winkler, a former intelligence analyst with NSA, a social engineer, systems hacker, and scuba diver and author, told Cybereason Chief Security Officer Sam Curry during a CISO Stories podcast that he is passionate about security and trying to rise the tide.

FIN7 actors set up the fake pentesting company Bastion Secure as a front to conceal its cybercriminal hacking, say researchers. And it's hiring.

CompTIA's latest version of its cloud services and web apps PenTest+ now places more emphasis on vulnerability hunting in cloud and hybrid network environments and web applications.

Said the cyberspace operations principal at SAIC: "Operators have information overload, which leads to decision paralysis. If I'm going to deliver a tool or a data feed or visualization to an end user, I'm going to deliver what they need to see. We’re reducing noise.”