SecurityBrief Asia - Technology news for CISOs & cybersecurity decision-makers
Asia

Penetration testing Stories - Page 19

Global Stories

Penetration testing stories

Check Point earns CREST accreditation for penetration testing
Firewalls

Check Point earns CREST accreditation for penetration testing

Check Point Software Technologies has earned CREST accreditation for its penetration testing services, affirming its high standards in cybersecurity assurance.

By Melvin Hipolito • 3 min read • Mon, 21st Jul 2025
Race condition in nopCommerce gift cards enables repeated use
DevOps

Race condition in nopCommerce gift cards enables repeated use

A race condition vulnerability in nopCommerce gift cards lets attackers redeem the same card repeatedly, exploiting a flaw in the checkout process.

By Jed Nykolle Harme • 4 min read • Fri, 11th Jul 2025
Zyxel advances Secure by Design for global SMB networking security
Firewalls

Zyxel advances Secure by Design for global SMB networking security

Zyxel Networks adopts CISA's Secure by Design Pledge, enhancing SMB networking security with MFA, unique passwords, and transparent vulnerability reporting worldwide.

By Catherine Knowles • 4 min read • Thu, 10th Jul 2025
LevelBlue acquires Trustwave to form largest global MSSP
DevOps

LevelBlue acquires Trustwave to form largest global MSSP

LevelBlue's acquisition of Trustwave creates the world's largest pure-play managed security services provider, enhancing global cyber defence capabilities.

By Catherine Knowles • 4 min read • Fri, 4th Jul 2025
Most fintechs fail API security, risking sensitive payment data
Data Protection

Most fintechs fail API security, risking sensitive payment data

New research reveals 84% of fintechs lack robust API security, exposing sensitive payment data to significant cyber risks beyond regulated sectors.

By Shannon Williams • 3 min read • Thu, 3rd Jul 2025
LevelBlue to acquire Trustwave, creating top global cyber giant
DevOps

LevelBlue to acquire Trustwave, creating top global cyber giant

LevelBlue will acquire Trustwave, creating the world's largest pure-play managed security services provider with enhanced global cybersecurity capabilities.

By Sean Mitchell • 4 min read • Wed, 2nd Jul 2025
AI drives 80 percent of phishing with USD $112 million lost in India
Malware

AI drives 80 percent of phishing with USD $112 million lost in India

AI powers 80% of phishing attacks, causing USD $112 million in losses in India by May 2025, as cybercrime evolves with machine-generated deception.

By Melvin Hipolito • 5 min read • Tue, 1st Jul 2025
Tech sector faces sharp rise in AI & ransomware threats
Firewalls

Tech sector faces sharp rise in AI & ransomware threats

Trustwave reveals a surge in AI-driven and ransomware attacks, with tech firms facing 85% of global ransomware incidents amid rising cyber threats.

By Melvin Hipolito • 4 min read • Fri, 27th Jun 2025
Growing gap revealed between AI innovation & enterprise security
DevOps

Growing gap revealed between AI innovation & enterprise security

A new report reveals a widening gap between AI innovation and enterprise security, with 36% of firms struggling to keep up with generative AI risks.

By Shannon Williams • 4 min read • Thu, 26th Jun 2025
Over 80,000 Microsoft Entra ID accounts hit by major takeover campaign
Malware

Over 80,000 Microsoft Entra ID accounts hit by major takeover campaign

Over 80,000 Microsoft Entra ID accounts have been targeted in the UNK_SneakyStrike takeover campaign exploiting the TeamFiltration penetration testing tool.

By Sean Mitchell • 5 min read • Thu, 12th Jun 2025
LevelBlue to acquire Aon's cyber consulting teams in global deal
DevOps

LevelBlue to acquire Aon's cyber consulting teams in global deal

LevelBlue will acquire Aon's Cybersecurity and IP consulting teams, including Stroz Friedberg, adding 300 experts and boosting global cyber defence services.

By Catherine Knowles • 4 min read • Thu, 12th Jun 2025
Exclusive: SquareX's Audrey Adeline on why the browser is 'the new endpoint'
DevOps

Exclusive: SquareX's Audrey Adeline on why the browser is 'the new endpoint'

Audrey Adeline of SquareX warns the browser, where 80% of device time is spent, is the new cybersecurity battleground in an evolving threat landscape.

By Melania Watson • 5 min read • Tue, 10th Jun 2025
Cobalt unveils platform updates to streamline pentesting workflows
Unified Communications

Cobalt unveils platform updates to streamline pentesting workflows

Cobalt updates its Offensive Security Platform to streamline pentesting with faster launches, real-time collaboration, clearer risk prioritisation, and workflow automation.

By Catherine Knowles • 3 min read • Fri, 6th Jun 2025

Stories from Other Regions

Penetration testing stories

Trustwave launches OT security portfolio with Nozomi Networks
Ransomware

Trustwave launches OT security portfolio with Nozomi Networks

Trustwave and Nozomi Networks team up to launch a new OT security portfolio, boosting defence of critical infrastructure against rising cyber threats.

By Melania Watson • 3 min read • Wed, 23rd Jul 2025
Pangea Labs launches to boost AI security & tackle new threats
DevOps

Pangea Labs launches to boost AI security & tackle new threats

Pangea launches Pangea Labs and AI Red Teaming services to tackle evolving AI security threats and protect large language models in enterprises.

By Kaleah Salmon • 4 min read • Fri, 18th Jul 2025
Qantas data breach exposes 5.7 million in third-party cyberattack
DevOps

Qantas data breach exposes 5.7 million in third-party cyberattack

Qantas has revealed a cyberattack on a third-party call centre, exposing personal data of 5.7 million customers and raising serious security concerns.

By Shannon Williams • 4 min read • Fri, 11th Jul 2025
Spectrum appoints Deane Jessep to drive sovereign AI strategy
Data Protection

Spectrum appoints Deane Jessep to drive sovereign AI strategy

Spectrum names Deane Jessep CTO to lead New Zealand's sovereign AI strategy, tackling cloud costs, data sovereignty, and AI governance in enterprise and government sectors.

By Melvin Hipolito • 3 min read • Fri, 11th Jul 2025
e2e-assure & Validato partner to bolster public sector cyber defences
Unified Communications

e2e-assure & Validato partner to bolster public sector cyber defences

e2e-assure and Validato have partnered to enhance cyber resilience in public sector organisations through continuous security validation and staff training.

By Catherine Knowles • 4 min read • Thu, 10th Jul 2025