Penetration Testing

ransomware_AdobeStock_327128576

Ransomware

Threat Intelligence

Brief

Ransomware gangs seeking penetration testers

Screenshot 2025-08-08 at 8.45.12 AM

Threat Management

Black Hat

Resource

Fortra

The rising need for offensive security strategy and skill

Person holding cellphone with logo of National Security Agency (NSA) on screen in front of webpage.

Stuttgart, Germany – 10-28-2024: Person holding cellphone with l

Critical Infrastructure Security

Free NSA cyber services program expands

<body>Live from Black Hat 2025 in Las Vegas, Matt Alderman sits down with Rohit Dhamankar, VP of Product Strategy at Fortra, to dive deep into the evolving world of offensive security. From red teaming and pen testing to the rise of AI-powered threat simulation and continuous penetration testing, this conversation is a must-watch for CISOs, security architects, and compliance pros navigating today's dynamic threat landscape.</body>

<body>Live from Black Hat 2025 in Las Vegas, Matt Alderman sits down with Rohit Dhamankar, VP of Product Strategy at Fortra, to dive deep into the evolving world of offensive security. From red teaming and pen testing to the rise of AI-powered threat simulation and continuous penetration testing, this conversation is a must-watch for CISOs, security architects, and compliance pros navigating today's dynamic threat landscape.</body>

<body>Learn why regulatory bodies worldwide are now embedding offensive security requirements into frameworks like PCI DSS 4.0, and how organizations can adopt scalable strategies—even with limited red team resources. Rohit breaks down the nuances of purple teaming, AI-assisted red teaming, and the role of BAS platforms in enhancing defense postures.</body>

<body>Learn why regulatory bodies worldwide are now embedding offensive security requirements into frameworks like PCI DSS 4.0, and how organizations can adopt scalable strategies—even with limited red team resources. Rohit breaks down the nuances of purple teaming, AI-assisted red teaming, and the role of BAS platforms in enhancing defense postures.</body>

<body>Whether you’re building in-house capabilities or leveraging external partners, this interview reveals key insights on security maturity, strategic outsourcing, and the future of cyber offense and defense convergence.</body>

<body>Whether you’re building in-house capabilities or leveraging external partners, this interview reveals key insights on security maturity, strategic outsourcing, and the future of cyber offense and defense convergence.</body>

<body>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a> to learn more about them!</body>

<body>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14196″} podcast from PPWorks

The Rising Need for Offensive Security Strategy and Skill – Rohit Dhamankar – BH25 #2

Robotic spiders invade circuit board; digital attack background

Automated penetration testing

Risk Assessments/Management

Horizon3.ai

Security tools aren’t enough: Why you don’t know if your defenses actually work (and what to do about it)

<body>In the leadership and communications section, How CISOs can talk cybersecurity so it makes sense to executives, Firms to spend more on GenAI than security in 2025, Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring, and more!</body>

<body>In the leadership and communications section, How CISOs can talk cybersecurity so it makes sense to executives, Firms to spend more on GenAI than security in 2025, Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring, and more!</body>

<body>Next, pre-recorded interviews from RSAC Conference 2025, including:</body>

<body>Next, pre-recorded interviews from RSAC Conference 2025, including:</body>

<body>This segment is sponsored by Fortinet. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortinetrsac">https://securityweekly.com/fortinetrsac</a> to learn more about them!</body>

<body>This segment is sponsored by Fortinet. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortinetrsac">https://securityweekly.com/fortinetrsac</a> to learn more about them!</body>

<body>Unpacking the latest annual report from Fortinet's FortiGuard Labs. We're talking with Derek Manky, Chief Security Strategist and Global VP Threat Intelligence, Fortinet’s FortiGuard Labs, to get a snapshot of the active threat landscape and trends from 2024, including a comprehensive analysis across all tactics used in cyberattacks, as outlined in the MITRE ATT&amp;CK framework. The report reveals that threat actors are increasingly harnessing automation, commoditized tools, and AI to systematically erode the traditional advantages held by defenders.</body>

<body>Unpacking the latest annual report from Fortinet's FortiGuard Labs. We're talking with Derek Manky, Chief Security Strategist and Global VP Threat Intelligence, Fortinet’s FortiGuard Labs, to get a snapshot of the active threat landscape and trends from 2024, including a comprehensive analysis across all tactics used in cyberattacks, as outlined in the MITRE ATT&amp;CK framework. The report reveals that threat actors are increasingly harnessing automation, commoditized tools, and AI to systematically erode the traditional advantages held by defenders.</body>

<body>Read the full report at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortinetrsac">https://securityweekly.com/fortinetrsac</a>.</body>

<body>Read the full report at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortinetrsac">https://securityweekly.com/fortinetrsac</a>.</body>

<body>This segment is sponsored by Cobalt. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/cobaltrsac">https://securityweekly.com/cobaltrsac</a> to learn more about them!</body>

<body>This segment is sponsored by Cobalt. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/cobaltrsac">https://securityweekly.com/cobaltrsac</a> to learn more about them!</body>

<body>In this interview, Gunter Ollmann, Chief Technology Officer at Cobalt, unpacks the findings from the State of Pentesting Report 2025, spotlighting both measurable security progress and the rising challenges introduced by generative AI (genAI).
While the report shows that organizations are resolving vulnerabilities faster than ever, genAI systems stand out as a growing security blind spot: only 21% of serious genAI vulnerabilities identified during penetration testing are fixed, compared to over 75% for API flaws and 68% for cloud vulnerabilities. Nearly 32% of genAI-related findings were classified as high risk — more than double the average across other systems. And although 98% of organizations are adopting genAI-powered features, only 66% are running regular security assessments on those systems.</body>

<body>In this interview, Gunter Ollmann, Chief Technology Officer at Cobalt, unpacks the findings from the State of Pentesting Report 2025, spotlighting both measurable security progress and the rising challenges introduced by generative AI (genAI).
While the report shows that organizations are resolving vulnerabilities faster than ever, genAI systems stand out as a growing security blind spot: only 21% of serious genAI vulnerabilities identified during penetration testing are fixed, compared to over 75% for API flaws and 68% for cloud vulnerabilities. Nearly 32% of genAI-related findings were classified as high risk — more than double the average across other systems. And although 98% of organizations are adopting genAI-powered features, only 66% are running regular security assessments on those systems.</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.cobalt.io/blog/key-takeaways-state-of-pentesting-report-2025">https://www.cobalt.io/blog/key-takeaways-state-of-pentesting-report-2025</a>
<a rel="noreferrer noopener" target="_blank" href="https://resource.cobalt.io/state-of-pentesting-2025?_gl=1*zwbjgz*_gcl_aw*R0NMLjE3MzcwNTU5ODMuQ2owS0NRaUEtYUs4QmhDREFSSXNBTF8tSDltRlB0X2FmSVhnQnBzSjYxOHlRZ1dhcmRMQ0lHalo3eVgxcTh1cHVnWFVwV0todHFPSDFZZ2FBb0hNRUFMd193Y0I.*_gcl_au*MTc4MjQwMTAwNC4xNzQ0NjM0MTgz">https://resource.cobalt.io/state-of-pentesting-2025?gl=1*zwbjgz*gclaw*R0NMLjE3MzcwNTU5ODMuQ2owS0NRaUEtYUs4QmhDREFSSXNBTF8tSDltRlB0X2FmSVhnQnBzSjYxOHlRZ1dhcmRMQ0lHalo3eVgxcTh1cHVnWFVwV0todHFPSDFZZ2FBb0hNRUFMd193Y0I.*gcl_au*MTc4MjQwMTAwNC4xNzQ0NjM0MTgz</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.cobalt.io/blog/key-takeaways-state-of-pentesting-report-2025">https://www.cobalt.io/blog/key-takeaways-state-of-pentesting-report-2025</a>
<a rel="noreferrer noopener" target="_blank" href="https://resource.cobalt.io/state-of-pentesting-2025?_gl=1*zwbjgz*_gcl_aw*R0NMLjE3MzcwNTU5ODMuQ2owS0NRaUEtYUs4QmhDREFSSXNBTF8tSDltRlB0X2FmSVhnQnBzSjYxOHlRZ1dhcmRMQ0lHalo3eVgxcTh1cHVnWFVwV0todHFPSDFZZ2FBb0hNRUFMd193Y0I.*_gcl_au*MTc4MjQwMTAwNC4xNzQ0NjM0MTgz">https://resource.cobalt.io/state-of-pentesting-2025?gl=1*zwbjgz*gclaw*R0NMLjE3MzcwNTU5ODMuQ2owS0NRaUEtYUs4QmhDREFSSXNBTF8tSDltRlB0X2FmSVhnQnBzSjYxOHlRZ1dhcmRMQ0lHalo3eVgxcTh1cHVnWFVwV0todHFPSDFZZ2FBb0hNRUFMd193Y0I.*gcl_au*MTc4MjQwMTAwNC4xNzQ0NjM0MTgz</a></body>

Penetration Testing

Ransomware gangs seeking penetration testers

The rising need for offensive security strategy and skill

Free NSA cyber services program expands

The Rising Need for Offensive Security Strategy and Skill – Rohit Dhamankar – BH25 #2

Security tools aren’t enough: Why you don’t know if your defenses actually work (and what to do about it)

CISO Communication and Hiring, as they Combat Threat and Penetration Testing Trends – Derek Manky, Gunter Ollmann – BSW #395

RSAC 2025 executive interview: Fortra’s Rohit Dhamankar

Fast Five

Selected by the SC Media Editorial team every Tuesday.