IT Brief New Zealand - Technology news for CIOs & IT decision-makers
New Zealand

Offensive Security Stories

Global Stories

Offensive Security stories

Horizon3 raises USD $250 million at over USD $2 billion
Software-as-a-Service

Horizon3 raises USD $250 million at over USD $2 billion

The new capital will fund Horizon3's expansion into Asia-Pacific and Europe as demand for its attack-testing software grows among large enterprises.

By Joseph Gabriel Lagonsin • 4 min read • Today
Anthropic says Claude models accessed real systems in tests
Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • Today
BreachLock report flags AI, cloud & web logic risks
Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Last week
Secure.com appoints Brown Hill to lead Americas sales
Digital Transformation

Secure.com appoints Brown Hill to lead Americas sales

The cybersecurity group is widening its Americas push as it seeks more customers and partners for its AI-focused platform.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Hack The Box names new Chief Technology Officer & CMO
Digital Transformation

Hack The Box names new Chief Technology Officer & CMO

The cyber training firm is scaling for AI-era threats and international growth as it adds a new Chief Technology Officer and Chief Marketing Officer.

By Sofiah Nichole Salivio • 3 min read • Last week
Beelzebub raises EUR €3 million to boost cybersecurity
Software-as-a-Service

Beelzebub raises EUR €3 million to boost cybersecurity

The Milan-founded startup plans to expand in Rome and San Francisco as it targets European firms facing tighter NIS2 cybersecurity rules.

By Sean Mitchell • 3 min read • Last week
Microsoft launches Project Perception & AI-Cyber-1-Flash
Digital Transformation

Microsoft launches Project Perception & AI-Cyber-1-Flash

The new system aims to help firms spot and fix vulnerabilities continuously as attacks accelerate across more complex digital estates.

By Sean Mitchell • 4 min read • Last week
ASC-IT launches Darkmoon to hide target data from AI
Data Protection

ASC-IT launches Darkmoon to hide target data from AI

Security teams can now use AI for penetration testing without exposing hostnames, IP ranges or credentials to model providers.

By Joseph Gabriel Lagonsin • 4 min read • Last week
OpenAI model breaches Hugging Face in unprecedented incident
Cloud Security

OpenAI model breaches Hugging Face in unprecedented incident

Security experts warn the breach shows autonomous AI can exploit old misconfigurations at machine speed, widening enterprise identity and containment risks.

By Sofiah Nichole Salivio • 4 min read • Last month
OpenAI AI model escapes test rig in Hugging Face hack
Cloud Security

OpenAI AI model escapes test rig in Hugging Face hack

The breach shows frontier AI can slip its sandbox and probe production systems, raising fresh concerns over containment and oversight.

By Sofiah Nichole Salivio • 7 min read • Last month
Old flaw leaves Wansview camera exposing credentials
Data Protection

Old flaw leaves Wansview camera exposing credentials

Consumers could have had passwords and cloud tokens exposed from a low-cost indoor camera, after researchers found a flaw first disclosed in 2002.

By Sofiah Nichole Salivio • 4 min read • Last month
ASC-IT launches Darkmoon for private AI pentesting
Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Offensive Security stories

PortSwigger launches Burp AT public beta for pentesters
Application Security

PortSwigger launches Burp AT public beta for pentesters

The beta gives pentesters controlled AI assistance inside Burp Suite, with approvals, logging and scope rules still enforced by the platform.

By Sean Mitchell • 4 min read • Last week
NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Last week
Cobalt launches autonomous pentest for continuous testing
Application Security

Cobalt launches autonomous pentest for continuous testing

Security teams may get findings within 24 hours as Cobalt targets faster testing across sprawling software estates.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Autonomous OpenAI agents breach Hugging Face in test
Robotics

Autonomous OpenAI agents breach Hugging Face in test

Security teams are reassessing AI access controls after autonomous models exploited an unknown flaw and moved laterally inside a real system.

By Sofiah Nichole Salivio • 6 min read • Last month
Synack study finds major blind spots in security testing
Data Protection

Synack study finds major blind spots in security testing

Fast-moving corporate systems are outpacing scheduled checks, leaving many firms with security gaps that can persist for days or weeks.

By Sean Mitchell • 4 min read • Last month
Intruder launches AI pentesting for web apps on demand
Cloud Security

Intruder launches AI pentesting for web apps on demand

Smaller firms can now run web app pentests in hours, as Intruder's AI service cuts costs to a fraction of manual reviews.

By Sean Mitchell • 4 min read • Last month